~/.ssh/id_rsa.pub ? Platform aws INFO Credentials loaded from default AWS environment variables ? Region eu-west-1 ? Base Domain openshift-test-1.cilium.rocks ? Cluster Name cluster-1 ? Pull Secret [? for - cidr: 10.0.0.0/16 networkType: Cilium serviceNetwork: - 172.30.0.0/16 platform: aws: region: eu-west-1 publish: External pullSecret: '{"auths":{"fake":{"auth": "bar"}}}' sshKey: | ssh-rsa infraID="$(jq -r < "${CLUSTER_NAME}/metadata.json" '.infraID')" aws_region="$(jq -r < "${CLUSTER_NAME}/metadata.json" '.aws.region')" cluster_tag="$(jq -r < "${CLUSTER_NAME}/metadata.json" '.aws.identifier[0]

~/.ssh/id_rsa.pub ? Platform aws INFO Credentials loaded from default AWS environment variables ? Region eu-west-1 ? Base Domain openshift-test-1.cilium.rocks ? Cluster Name cluster-1 ? Pull Secret [? for - cidr: 10.0.0.0/16 networkType: Cilium serviceNetwork: - 172.30.0.0/16 platform: aws: region: eu-west-1 publish: External pullSecret: '{"auths":{"fake":{"auth": "bar"}}}' sshKey: | ssh-rsa infraID="$(jq -r < "${CLUSTER_NAME}/metadata.json" '.infraID')" aws_region="$(jq -r < "${CLUSTER_NAME}/metadata.json" '.aws.region')" cluster_tag="$(jq -r < "${CLUSTER_NAME}/metadata.json" '.aws.identifier[0]

for details on how to set creden�als, change region, VPC, cluster size, etc. eksctl create cluster You should see something like this: [ℹ] using region us-west-2 [ℹ] setting availability zones to "/Users/tgraf/.kube/config", try 'kub [✔] EKS cluster "ridiculous-gopher-1548608219" in "us-west-2" region is re Disable SNAT in aws-node agent Disable the SNAT behavior of the aws-node DaemonSet which create a cluster on zone europe-west4-a ; feel free to change the zone if you are in a different region of the globe. export GKE_ZONE="europe-west4-a" gcloud container --project $GKE_PROJECT clusters

on how to set credentials, change region, VPC, cluster size, etc. eksctl create cluster -n test-cluster -N 0 You should see something like this: [ℹ] using region us-west-2 [ℹ] setting availability zones to [us-west-2b us-west-2a us-west- 2c] [...] [✔] EKS cluster "test-cluster" in "us-west-2" region is ready Prepare & Deploy Cilium Download the Cilium release tarball and change to the kubernetes will create a cluster on zone europe-west4-a; feel free to change the zone if you are in a different region of the globe. export GKE_ZONE="europe-west4-a" gcloud container --project $GKE_PROJECT clusters

<eks-config.yaml apiVersion: eksctl.io/v1alpha5 kind: ClusterConfig metadata: name: ${NAME} region: eu-west-1 managedNodeGroups: - name: ng-1 desiredCapacity: 2 privateNetworking: true # taint ~/.ssh/id_rsa.pub ? Platform aws INFO Credentials loaded from default AWS environment variables ? Region eu-west-1 ? Base Domain openshift-test-1.cilium.rocks ? Cluster Name cluster-1 ? Pull Secret [? for - cidr: 10.0.0.0/16 networkType: Cilium serviceNetwork: - 172.30.0.0/16 platform: aws: region: eu-west-1 publish: External pullSecret: '{"auths":{"fake":{"auth": "bar"}}}' sshKey: | ssh-rsa

on how to set credentials, change region, VPC, cluster size, etc. eksctl create cluster -n test-cluster -N 0 You should see something like this: [ℹ] using region us-west-2 [ℹ] setting availability zones to [us-west-2b us-west-2a us-west- 2c] [...] [✔] EKS cluster "test-cluster" in "us-west-2" region is ready Delete VPC CNI (aws-node DaemonSet) Cilium will manage ENIs instead of VPC CNI, so the the cluster). Also make sure to use the region where you will be deploying the cluster. aws s3api create-bucket --bucket prefix-example-com-state-store -- region us-west-2 --create-bucket-configuration

<eks-config.yaml apiVersion: eksctl.io/v1alpha5 kind: ClusterConfig metadata: name: ${NAME} region: eu-west-1 managedNodeGroups: - name: ng-1 desiredCapacity: 2 privateNetworking: true # taint ~/.ssh/id_rsa.pub ? Platform aws INFO Credentials loaded from default AWS environment variables ? Region eu-west-1 ? Base Domain openshift-test-1.cilium.rocks ? Cluster Name cluster-1 ? Pull Secret [? for - cidr: 10.0.0.0/16 networkType: Cilium serviceNetwork: - 172.30.0.0/16 platform: aws: region: eu-west-1 publish: External pullSecret: '{"auths":{"fake":{"auth": "bar"}}}' sshKey: | ssh-rsa