Deploying add-ons

In the previous section, we created a fully private EKS cluster, but to deploy an application or add-on, we need to understand and implement the following things:

• Since this is a private EKS cluster, the cluster can only pull images from Amazon ECR via an endpoint. So, to deploy anything on the EKS cluster, we need to push the Docker images in ECR.
• We need to set up IRSA via OIDC, which is an important component to configure the service account with permissions defined in the IAM role.
• We need to install Cluster Autoscaler to scale the worker node in case the number of Pods increases, due to more traffic to existing Pods, and needs extra worker nodes to run on.
• We need to configure the Amazon EBS CSI driver for the storage class, which manages the life cycle of Amazon EBS volumes for persistent volumes.

So, in this section, we will implement the preceding points in sequence.

Creating copies of container images in ECR

Since our cluster...