Enable optimization on EKS clusters

Learn how to enable Perforce Unified Compliance to access and optimize your EKS clusters.

Enable EKS cluster access

Update the aws-auth ConfigMap in each cluster to enable Perforce Unified Compliance to access the cluster. Take the following steps:

1. Open a terminal.

2. Ensure your kubectl context is set to the cluster you intend to modify. For information on setting up kubectl, see the Amazon EKS documentation.

3. Use the following command to edit the existing aws-auth ConfigMap:

   kubectl edit configmap aws-auth -n kube-system

4. Add the following entry to the ConfigMap. Replace <account-id> with the actual account ID.

   For an IAM role:

   Copy

   mapRoles: |
       - rolearn: arn:aws:iam::<account-id>:role/Puppet_CDS_Access_Role
       username: cds-access
       groups:
           - system:masters

   For a programmatic (access key) user:

   Copy

   mapUsers: |
       - userarn: arn:aws:iam::<account-id>:user/<programmatic-user>
       username: cds-access
       groups:
           - system:masters

   Replace <programmatic-user> with the name of the IAM user you created for Perforce Unified Compliance.

5. Apply and validate using the following command:

   kubectl get configmap aws-auth -n kube-system -o yaml

Verify EKS cluster add-ons

To gather Elastic Kubernetes Service (EKS) cluster-level metrics, Perforce Unified Compliance requires certain EKS add-ons to be installed and healthy on each cluster.

To verify that these add-ons are installed and working correctly on a cluster, take the following steps:

1. In the AWS Management Console, navigate to the EKS area and select the relevant EKS cluster.

2. Select Add-ons.

3. Confirm the presence and status of the following add-ons:

   • kube-proxy

   • Amazon VPC CNI

   • Metrics Server or Amazon EKS Metrics Server

4. Verify that each of these add-ons shows a status of Active, Healthy, or Installed.

5. If any add-on is missing or unhealthy, install or update it before continuing.