istio.io/content/docs/setup/kubernetes/platform-setup/aws/index.md

title	description	weight	skip_seealso	keywords
Amazon Web Services	Instructions to setup an AWS cluster with Kops cluster for Istio.	3	true	platform-setup aws

Follow these instructions to prepare an AWS cluster with Kops for Istio.

When you install a new cluster with Kubernetes version 1.9, the prerequisite to enable admissionregistration.k8s.io/v1beta1 is covered.

Nevertheless, you must update the list of admission controllers.

1. Open the configuration file:

   {{< text bash >}} $ kops edit cluster $YOURCLUSTER {{< /text >}}

2. Add the following in the configuration file:

   {{< text yaml >}} kubeAPIServer: admissionControl: - NamespaceLifecycle - LimitRanger - ServiceAccount - PersistentVolumeLabel - DefaultStorageClass - DefaultTolerationSeconds - MutatingAdmissionWebhook - ValidatingAdmissionWebhook - ResourceQuota - NodeRestriction - Priority {{< /text >}}

3. Perform the update:

   {{< text bash >}} $ kops update cluster $ kops update cluster --yes {{< /text >}}

4. Launch the rolling update:

   {{< text bash >}} $ kops rolling-update cluster $ kops rolling-update cluster --yes {{< /text >}}

5. Validate the update with the kubectl client on the kube-api pod, you should see new admission controller:

   {{< text bash >}} $ for i in kubectl \ get pods -nkube-system | grep api | awk '{print $1}' ;
   do kubectl describe pods -nkube-system
   $i | grep "/usr/local/bin/kube-apiserver" ; done {{< /text >}}

6. Review the output:

   Kubernetes up to 1.9: {{< text plain >}} [...] --admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount, PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds, MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota, NodeRestriction,Priority [...] {{< /text >}}

   Kubernetes 1.10+: {{< text plain >}} [...] --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount, PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds, MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota, NodeRestriction,Priority [...] {{< /text >}}