# Install AWS CLI
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install

# Install eksctl
curl --silent --location "https://github.com/weaveworks/eksctl/releases/latest/download/eksctl_Linux_amd64.tar.gz" | tar xz -C /tmp
sudo mv /tmp/eksctl /usr/local/bin

# Install kubectl
curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl

# Configure AWS credentials
aws configure

# Create cluster
eksctl create cluster \
  --name my-cluster \
  --region us-east-1 \
  --nodegroup-name my-nodes \
  --node-type t3.medium \
  --nodes 3

# This creates:
# - VPC with public/private subnets
# - EKS control plane
# - Node group with 3 nodes
# - Security groups
# - IAM roles

# Create cluster with advanced configuration
eksctl create cluster --config-file=cluster-config.yaml

apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig

metadata:
  name: prod-cluster
  region: us-east-1

vpc:
  cidr: 10.0.0.0/16
  nat:
    gateway: Single

nodeGroups:
  - name: on-demand
    minSize: 2
    maxSize: 10
    desiredCapacity: 3
    instanceTypes:
      - t3.large
    labels:
      node-type: on-demand
    tags:
      Environment: production

  - name: spot
    minSize: 1
    maxSize: 5
    desiredCapacity: 2
    spot: true
    instanceTypes:
      - t3.large
      - t3a.large
    labels:
      node-type: spot
    tags:
      Environment: production

iam:
  withOIDC: true

addons:
  - name: vpc-cni
  - name: kube-proxy
  - name: coredns

# List clusters
eksctl get clusters

# Get cluster info
eksctl get cluster --name my-cluster -o json

# Update kubeconfig
aws eks update-kubeconfig --name my-cluster --region us-east-1

# Verify connection
kubectl cluster-info
kubectl get nodes

# Delete cluster
eksctl delete cluster --name my-cluster

# List node groups
eksctl get nodegroup --cluster my-cluster

# Create new node group
eksctl create nodegroup \
  --cluster my-cluster \
  --name new-nodes \
  --node-type t3.large \
  --nodes 3

# Scale node group
eksctl scale nodegroup \
  --cluster my-cluster \
  --name my-nodes \
  --nodes 5

# Delete node group
eksctl delete nodegroup \
  --cluster my-cluster \
  --name my-nodes

# Get VPC info
aws ec2 describe-vpcs --filters "Name=tag:eks:cluster,Values=my-cluster"

# Get subnets
aws ec2 describe-subnets --filters "Name=vpc-id,Values=vpc-xxx"

# Security groups
aws ec2 describe-security-groups --filters "Name=group-name,Values=eks-cluster-sg*"

# Verify CNI
kubectl get daemonset -n kube-system aws-node

# CNI configuration
kubectl describe daemonset -n kube-system aws-node

# Enable OIDC
eksctl utils associate-iam-oidc-provider \
  --cluster my-cluster \
  --region us-east-1

# Create IAM role for service account
eksctl create iamserviceaccount \
  --cluster my-cluster \
  --name ebs-csi-controller-sa \
  --namespace kube-system \
  --attach-policy-arn arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy

apiVersion: v1
kind: ServiceAccount
metadata:
  name: my-app
  annotations:
    eks.amazonaws.com/role-arn: arn:aws:iam::ACCOUNT_ID:role/my-app-role

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: my-app
spec:
  template:
    spec:
      serviceAccountName: my-app
      containers:
      - name: app
        image: my-app:1.0

# Install EBS CSI driver
helm repo add aws-ebs-csi-driver https://kubernetes-sigs.github.io/aws-ebs-csi-driver
helm install aws-ebs-csi-driver aws-ebs-csi-driver/aws-ebs-csi-driver \
  -n kube-system

# Create storage class
kubectl apply -f - <<EOF
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: ebs-gp3
provisioner: ebs.csi.aws.com
parameters:
  type: gp3
  iops: "3000"
  throughput: "125"
EOF

# Install EFS CSI driver
helm repo add aws-efs-csi-driver https://kubernetes-sigs.github.io/aws-efs-csi-driver
helm install aws-efs-csi-driver aws-efs-csi-driver/aws-efs-csi-driver \
  -n kube-system

# Enable logging
eksctl utils update-cluster-logging \
  --enable-types all \
  --cluster my-cluster

# Install CloudWatch agent
helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
helm install prometheus prometheus-community/kube-prometheus-stack

aws ec2 create-flow-logs \
  --resource-type VPC \
  --resource-ids vpc-xxx \
  --traffic-type ALL \
  --log-destination-type cloud-watch-logs \
  --log-group-name /aws/vpc/flowlogs

# Install AWS LB controller
helm repo add eks https://aws.github.io/eks-charts
helm install aws-load-balancer-controller eks/aws-load-balancer-controller \
  -n kube-system

# Create Ingress with NLB
kubectl apply -f - <<EOF
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: nlb-ingress
  annotations:
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/target-type: ip
spec:
  ingressClassName: alb
  rules:
  - host: myapp.example.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: web-service
            port:
              number: 80
EOF

# Use spot instances for cost savings
# Already configured in cluster-config.yaml

# Verify spot instances
kubectl get nodes -L karpenter.sh/capacity-type

# Configure cluster autoscaler
helm repo add autoscaler https://kubernetes.github.io/autoscaler
helm install cluster-autoscaler autoscaler/cluster-autoscaler \
  -n kube-system \
  --set autoDiscovery.clusterName=my-cluster \
  --set awsRegion=us-east-1