Topics covered:

• AWS deployment basics

• Pre-reads before deployment

• Steps to install

Overview

Amazon Elastic Kubernetes Service (EKS) is an AWS service for deploying, managing, and scaling distributed and containerized workloads. With EKS, you can easily provision a cluster on AWS using Terraform, which automates the process. Then, deploy the DIGIT services configuration using Helm.

Pre-reads

• Know about EKS: https://www.youtube.com/watch?v=SsUnPWp5ilc

• Know what is terraform: https://youtu.be/h970ZBgKINg

Installation Steps

Topics covered:

• Pre-requisites to setting up the AWS account

• Get access to the AWS account

Overview

Follow the details below to set up your AWS account before you proceed with the DIGIT deployment.

Get AWS Access

aws configure --profile digit-quickstart-poc 

AWS Access Key ID []:<Your access key>
AWS Secret Access Key []:<Your secret key>
Default region name []: ap-south-1
Default output format []: text

// Setting profile
export AWS_PROFILE=digit-quickstart-poc

[digit-quickstart-poc] 
aws_access_key_id=*********** 
aws_secret_access_key=*************************

Once the command line access is configured, everything is set to proceed with the terraform to provision the DIGIT Infra-as-code.

If you have any questions please write to us.

Make sure to use the appropriate discussion category and labels to address the issues better.

Discussion Board

Topics covered:

• Pre-requisites to check before deployment​

Pre-requisites

1. ​AWS account with admin access to provision infrastructure. You will need a paid subscription to the AWS.

2. Install kubectl (any version) on the local machine - it helps interact with the Kubernetes cluster.

3. Install Helm - this helps package the services, configurations, environments, secrets, etc into Kubernetes manifests. Verify that the installed version of helm is equal to 3.0 or higher.

// command to check helm version
helm version

1. Install tfswitch - to run different versions of Terraform on the machine. tfswitch supports multiple terraform versions on the same machine and you can toggle between the desired versions.

// On Mac
brew install warrensbox/tap/tfswitch

// On Linux
curl -L https://raw.githubusercontent.com/warrensbox/terraform-switcher/master/install.sh -o install.sh
sudo bash install.sh

5. Run tfswitch and it will show a list of terraform versions. Scroll down and select terraform version (0.14.10) for the Infra-as-code (IaC) to provision cloud resources as code. This provides the desired resource graph and helps destroy the cluster in one go.​

// On Linux
sudo apt-get update && sudo apt-get install -y gnupg software-properties-common
wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
sudo apt-get update && sudo apt-get install terraform

// On Mac
brew tap hashicorp/tap
brew install hashicorp/tap/terraform

1. Install Golang

• For Linux: Follow the instructions here to install Golang on Linux.

• For Windows: Download the installer using the link here and follow the installation instructions.

• For Mac: Download the installer using the link here and follow the installation instructions.

1. Install cURL - for making API calls

2. Install Visual Studio Code - for better code visualization/editing capabilities

3. Install Postman - to run digit bootstrap scripts

4. Install AWS CLI

Overview

The image below illustrates the multiple components deployed. These include the EKS, Worker Nodes, Postgres DB, EBS Volumes, and Load Balancer.

Steps

1. Clone the DIGIT-DevOps repository:

1. Navigate to the cloned repository and checkout the release-1.28-Kubernetes branch:

1. Choose either method below to generate SSH key pairs

   • b. Use openssl:

2. Open input.yaml file in vscode. Use the below code to open it in VS code:

   code infra-as-code/terraform/sample-aws/input.yaml

   If the command does not work, open the file in VS code manually. Once the file is open, fill in the inputs. (If you are not using vscode, open it in any editor of your choice).

3. Fill in the inputs as per the regex mentioned in the comments.

4. Go to infra-as-code/terraform/sample-aws and run init.go script to enrich different files based on input.yaml.

Terraform Execution: Infrastructure Resources Provisioning

Once we are complete declaring the resources, begin with deploying all resources.

Run the terraform scripts to provision infra required to Deploy DIGIT on AWS.

1. CD (change directory) to the following directory and run the below commands to create the remote state.

Once the remote state is created, it is time to provision DIGIT infra. Run the below commands:

Important:

• DB password is asked for in the application stage. Remember the password you have provided. It should be at least 8 characters long. Otherwise, RDS provisioning will fail.

• The output of the apply command will be displayed on the console. Store this in a file somewhere. Values from this file will be used in the next step of deployment.

3. Verify that you can connect to the cluster by running the following command

At this point, your basic infra has been provisioned.

Destroying Infra

To destroy the previously created infrastructure with Terraform, run the command below:

1. ELB is not deployed via Terraform. ELB was created at deployment time by the setup of Kubernetes Ingress. This has to be deleted manually by deleting the ingress service.

   • kubectl delete deployment nginx-ingress-controller -n <namespace>

   • kubectl delete svc nginx-ingress-controller -n <namespace>

     Note: Namespace can be either egov or jenkins.

2. Delete S3 buckets manually from the AWS console and verify if ELB got deleted.
3. Run terraform destroy.