In correlation with the end of life (EOL) for MKE 3.3.x, maintenance of this documentation set was discontinued as of 2022-MAY-27. Click here for the latest MKE 3.x version documentation.

Prerequisites

Complete the following prerequisites prior to installing MKE on AWS.

1. Log in to the AWS Management Console.

2. Assign your instance a host name using the ip-<private ip>.<region>.compute.internal template. For example, ip-172-31-15-241.us-east-2.compute.internal.

3. Tag your instance, VPC, and subnets by specifying kubernetes.io/cluster/<unique-cluster-id> in the Key field and <cluster-type> in the Value field. Possible <cluster-type> values are as follows:

   • owned, if the cluster owns and manages the resources that it creates

   • shared, if the cluster shares its resources between multiple clusters

   For example, Key: kubernetes.io/cluster/1729543642a6 and Value: owned.

4. To enable introspection and resource provisioning, specify an instance profile with appropriate policies for manager nodes. The following is an example of a very permissive instance profile:

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Effect": "Allow",
         "Action": [ "ec2:*" ],
         "Resource": [ "*" ]
       },
       {
         "Effect": "Allow",
         "Action": [ "elasticloadbalancing:*" ],
         "Resource": [ "*" ]
       },
       {
         "Effect": "Allow",
         "Action": [ "route53:*" ],
         "Resource": [ "*" ]
       },
       {
         "Effect": "Allow",
         "Action": "s3:*",
         "Resource": [ "arn:aws:s3:::kubernetes-*" ]
       }
     ]
   }
   

5. To enable access to dynamically provisioned resources, specify an instance profile with appropriate policies for worker nodes. The following is an example of a very permissive instance profile:

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Effect": "Allow",
         "Action": "s3:*",
         "Resource": [ "arn:aws:s3:::kubernetes-*" ]
       },
       {
         "Effect": "Allow",
         "Action": "ec2:Describe*",
         "Resource": "*"
       },
       {
         "Effect": "Allow",
         "Action": "ec2:AttachVolume",
         "Resource": "*"
       },
       {
         "Effect": "Allow",
         "Action": "ec2:DetachVolume",
         "Resource": "*"
       },
       {
         "Effect": "Allow",
         "Action": [ "route53:*" ],
         "Resource": [ "*" ]
       }
   }