MitchyBAwesome / lambda-eks-sample

Sample project to call Kubernetes API of an Amazon EKS cluster from AWS Lambda

Lambda Lambda Sample

=======

This code repository aims to be a reference sample for implementing AWS Lambda function to interact with Amazon Elastic Container Services for Kubernetes (EKS) using Kubernetes API. Amazon EKS runs the Kubernetes management infrastructure for you across multiple AWS availability zones to eliminate a single point of failure. Amazon EKS is certified Kubernetes conformant so you can use existing tooling and plugins from partners and the Kubernetes community. Applications running on any standard Kubernetes environment are fully compatible and can be easily migrated to Amazon EKS.

Having a AWS Lambda function that integrates with Amazon EKS would allow event-driven triggers to manage and modify deployments and other controls within the Amazon EKS cluster.

While this is just a sample that list the pods running within the Amazon EKS cluster, you can modify the code to meet yourneeds.

Setting this up is rather easy. Build the function using the make command.

$ make

This creates a zip package of the function which can be deployed to AWS Lambda. There are few environment variables that will configure how this function works.

Variable Name	Description
CLUSTER_NAME	Name of the Amazon EKS cluster.
ENV	(Optional) Setting this variable to PRODUCTION controls the level of log output.

You would also need to give the Lambda execution role permissions in Amazon EKS cluster. Refer to this User Guide for detailed instructions.

1. Edit the aws-auth ConfigMap of your cluster.

$ kubectl -n kube-system edit configmap/aws-auth

2. Add your Lambda execution role to the config

# Please edit the object below. Lines beginning with a '#' will be ignored,
# and an empty file will abort the edit. If an error occurs while saving this file will be
# reopened with the relevant failures.
#
apiVersion: v1
data:
  mapRoles: |
    - rolearn: arn:aws:iam::555555555555:role/devel-worker-nodes-NodeInstanceRole-74RF4UBDUKL6
      username: system:node:{{EC2PrivateDNSName}}
      groups:
        - system:bootstrappers
        - system:nodes
    - rolearn: arn:aws:iam::<AWS Account ID>:role/<your lambda execution role>
      username: admin
      groups:
        - system:masters

Once these are configured, you can test your function. Good luck!