You are looking at the documentation of a prior release. To read the documentation of the latest release, please visit here.

Amazon EKS

Guard installation guide can be found here. Install the Guard on your system by following Install Guard as CLI.

Configure Kubectl

To use EKS cluster with Guard, you have to install AWS CLI on your system. Follow Configuring the AWS CLI in the AWS command Line Interface User Guide.

Guard uses the same credential that are returned with the following command.

$ aws sts get-caller-identity

Open ~/.kube/config file with your favourite editor and copy the following code.

apiVersion: v1
clusters:
- cluster:
    server: <endpoint-url>
    certificate-authority-data: <base64-encoded-ca-cert>
  name: kubernetes
contexts:
- context:
    cluster: kubernetes
    user: aws
  name: aws
current-context: aws
kind: Config
preferences: {}
users:
- name: aws
  user:
    exec:
      apiVersion: client.authentication.k8s.io/v1alpha1
      command: guard
      args:
        - "login"
        - "-k"
        - "<cluster-name>"
        - "-p"
        -  "eks"

Here,

  1. Replace the <endpoint-url> with endpoint URL, which can be retrieved by following command
$ aws eks describe-cluster --name <cluster-name>  --query cluster.endpoint
  1. Replace the <base64-encoded-ca-cert> with the certificate authority data, which can be retrieved by following command
$ aws eks describe-cluster --name <cluster-name>  --query cluster.certificateAuthority.data

To test the configuration run

$ kubectl get pods --all-namespaces