Requirements for creating EKS cluster in Morpheus

[dgaharwar]

For creating an EKS cluster in Morpheus, the AWS IAM role should have the below permissions:

AmazonEKSClusterPolicy
AmazonEKSWorkerNodePolicy
AmazonEKSServicePolicy
AmazonEC2ContainerRegistryReadOnly
AmazonEKS_CNI_Policy
AmazonEKSLocalOutpostClusterPolicy
AmazonEKSVPCResourceController

Also, the trust policy should look like the one below.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "eks.amazonaws.com"
            },
            "Action": "sts:AssumeRole"
        },
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "ec2.amazonaws.com"
            },
            "Action": "sts:AssumeRole"
        }
    ]
}

Important!
When creating EKS, a minimum of 2 subnets should be selected for each Controller and Worker. Both subnets should be in the different Availability Zones.

Example:

For other requirements, refer to our document here.