eks

1# AWS EKS
2 
3Amazon Elastic Kubernetes Service (EKS) runs Kubernetes without installing and operating your own control plane. EKS manages the control plane and integrates with AWS services.
4 
5## Table of Contents
6 
7- [Core Concepts](#core-concepts)
8- [Common Patterns](#common-patterns)
9- [CLI Reference](#cli-reference)
10- [Best Practices](#best-practices)
11- [Troubleshooting](#troubleshooting)
12- [References](#references)
13 
14## Core Concepts
15 
16### Control Plane
17 
18Managed by AWS. Runs Kubernetes API server, etcd, and controllers across multiple AZs.
19 
20### Node Groups
21 
22| Type | Description |
23|------|-------------|
24| **Managed** | AWS manages provisioning, updates |
25| **Self-managed** | You manage EC2 instances |
26| **Fargate** | Serverless, per-pod compute |
27 
28### IRSA (IAM Roles for Service Accounts)
29 
30Associates Kubernetes service accounts with IAM roles for fine-grained AWS permissions.
31 
32### Add-ons
33 
34Operational software: CoreDNS, kube-proxy, VPC CNI, EBS CSI driver.
35 
36## Common Patterns
37 
38### Create a Cluster
39 
40**AWS CLI:**
41 
42```bash
43# Create cluster role
44aws iam create-role \
45  --role-name eks-cluster-role \
46  --assume-role-policy-document '{
47    "Version": "2012-10-17",
48    "Statement": [{
49      "Effect": "Allow",
50      "Principal": {"Service": "eks.amazonaws.com"},
51      "Action": "sts:AssumeRole"
52    }]
53  }'
54 
55aws iam attach-role-policy \
56  --role-name eks-cluster-role \
57  --policy-arn arn:aws:iam::aws:policy/AmazonEKSClusterPolicy
58 
59# Create cluster
60aws eks create-cluster \
61…