Creating and Configuring a Launch Configuration

1. Using the Find Services search tool, locate and browse to the EC2 Dashboard.
2. In the left navigation panel, under Auto Scaling, select Launch Configurations.
3. On the Launch Configurations page, click Create Launch Configuration.

4. On the Create Launch Configuration page, enter values for the following:
   
   1. Launch configuration name: Specify your launch configuration name.
   2. Virtual machines HW and OS: Specify the virtual machine hardware and installed operating system.

5. Under Additional Configuration Details - optional, enter values for the following (mandatory) settings:
   
   1. IAM Instance profile: Choose the instance profile name for the worker nodes from the AWS worksheet.
   2. User data: Leave as text, and then copy the contents of the script workernodes-userdata located in the aws-byok-installer-<version>/aws-scripts/ folder. In the text area, replace the <cluster name> with your own cluster name from the AWS worksheet.
   3. IP Address Type: select Do not assign a public IP address to any instances.

6. Under Storage, configure the storage for each node. Enter the following settings:
   1. Size (GiB): Change the size to minimum 50GiB or more depending on your plans for products installation and load.
   2. Scroll to the right and select Delete on termination.

7. Each resource will need to be accessible through the network, worker nodes must have the correct security groups assigned to them.
   1. Under Security Groups, choose Select an existing security group.
   2. Choose the security group created for intra-VPC communications, recorded in the AWS worksheet.

8. Create a key pair to allow cluster access as well as SSH access to the worker nodes.
9.  Under Key pair (login), choose values for the following:
   1. Key pair options: Select Choose an existing key pair
   2. Existing key pair: Choose your key pair for which you own the private part
   3. I acknowledge... : this needs to be selected in order to proceed with launch configuration creation.

10. Click Create launch configuration to create the new launch configuration.

1. Run the following command:
   aws autoscaling create-launch-configuration \
--launch-configuration-name <Launch Configuration name> \
--image-id <Launch config AMI Id> \ --key-name <Key pair name> \
--security-groups <Intra VPC Security group Id> \
--instance-type <Instance type> \
--block-device-mappings "<block device mapping>" \
--iam-instance-profile <Workernodes Instance profile ARN> \
--no-associate-public-ip-address \
--user-data file://<user data filename>

Parameters:

<Launch Configuration name>: Choose a name which helps with easier identification; in our examples we will use srgdemo-workers-launch-config. Record the chosen value in your AWS worksheet.

<Launch config AMI ID>: Run the following command to get the actual AMI ID.
# aws ec2 describe-images \--filters "Name=architecture,Values=x86_64" "Name=name,Values=amazon-eks-node-<Kubernetes version>*" | jq '.Images | map(select((.Description!=null) and (.Description | contains("GPU") | not) and (.ImageLocation | contains("gpu") | not))) | sort_by(.CreationDate) | [last]'

<Key pair name>: Use the key pair name from the AWS worksheet.

<Intra VPC Security group Id>: ID of Intra VPC security group recorded in the AWS worksheet.

<Instance type>: From Amazon EC2 Instance Types, choose your machine hardware configuration. Consider CPU, RAM, storage type, network performance, and price.
DO NOT USE the same type you used for the bastion.

<block device mapping>: Pass the value DeviceName=<root device name>,Ebs={VolumeSize=<root volume size>,VolumeType=gp2,DeleteOnTermination=true}
where:

• <root device name>: In the description obtained for AMI ID above, locate the value for key RootDeviceName.
• <root volume size>: Size depends on planned installation size; 50GB for SMALL, 100GB for MEDIUM, 256GB for LARGE; sizes refer to the sizes from ArcSight Suite metadata definition. Size is in gigabytes.

<instance profile ARN>: use the instance profile ARN you created above or created by your AWS infrastructure administrators and recorded in your AWS worksheet.

--user-data file://<user data filename>: This file needs to be modified before executing the command. Copy the file workernodes-userdata located in aws-byok-installer-<version>/scripts/ to the current working directory on the local host or on the bastion, and then edit. There is a parameter cluster name which needs to be replaced; use the value from the AWS worksheet.

Example of workernodes-userdata:

#!/bin/bash

set -o xtrace

/etc/eks/bootstrap.sh srgdemo-cluster --kubelet-extra-args \
--node-labels='Worker=label,role=loadbalancer,node.type=workerlancer,node.type=worker'

Extending labels, as shown here, during the launch configuration creation will be important for scaling up the cluster later. However, if you do not assign labels automatically, you must manually add new labels every time you add a new node.

Example:

# aws autoscaling create-launch-configuration \
--launch-configuration-name srgdemo-workers-launch-config \
--image-id ami-025291add34df213c \
--key-name srgdemo \
--security-groups sg-0ce3c569f73737b77 \
--instance-type m4.xlarge --block-device-mappings "DeviceName=/dev/xvda,Ebs={VolumeSize=15,VolumeType=gp2,DeleteOnTermination=true}" \
--iam-instance-profile arn:aws:iam::115370848038:instance-profile/srgdemo-workernodes-instance-profile \
--no-associate-public-ip-address --user-data file://workernodes-userdata