Creating an Amazon EFS for EKS by using the AWS CLI

export region="us-east-2" # replace with region where you have created your cluster
export MyEfsSecurityGroup="reza-efs-sec" # replace with your unique Sec ID
export MyEFSName="reza-gi" # replace with your unique EFS file name
export cluster_name="gi-eks"  # replace with your EKS cluster name

echo Get the VPC ID from the EKS cluster
vpc_id=$(aws eks describe-cluster \
    --name ${cluster_name} \
    --region ${region} \ --query "cluster.resourcesVpcConfig.vpcId" \
    --output text)

echo Create EFS and get FileSystemId
file_system_id=$(aws efs create-file-system \
    --region ${region} \
    --performance-mode generalPurpose \
    --encrypted \
    --query 'FileSystemId' \
    --output text)

echo Tag the EFS
aws efs create-tags \
    --file-system-id ${file_system_id} \
    --tags Key=Name,Value=${MyEFSName}

echo Create Security Group and get SecurityGroupId
security_group_id=$(aws ec2 create-security-group \
    --group-name --region ${region} \ ${MyEfsSecurityGroup} \
    --description "My EFS security group" \
    --vpc-id ${vpc_id} \
    --output text)

echo Retrieve VPC CIDR range and authorize inbound traffic for NFS
cidr_range=$(aws ec2 describe-vpcs \
    --region ${region} \--vpc-ids ${vpc_id} \
    --query "Vpcs[].CidrBlock" \
    --output text \
    --region ${region})

aws ec2 authorize-security-group-ingress \
    --group-id ${security_group_id} \
    --protocol tcp \
    --port 2049 \
    --cidr ${cidr_range}

echo Get Subnet IDs as an array
subnet_ids=($(aws ec2 describe-subnets \
    --filters "Name=vpc-id,Values=${vpc_id}" \
    --query "Subnets[*].SubnetId" \
    --output text))

echo Create Mount Targets in each Subnet
for subnet_id in "${subnet_ids[@]}"; do
    echo "Creating mount target for subnet: ${subnet_id}"
    aws efs create-mount-target \
        --file-system-id ${file_system_id} \
        --subnet-id ${subnet_id} \
        --security-groups ${security_group_id}
done

echo $cidr_range

aws ec2 describe-security-groups --group-ids $security_group_id

aws efs describe-mount-targets --file-system-id $file_system_id

file_system_id=$(aws efs describe-file-systems --region ${region} | jq -r --arg name "${MyEFSName}" '.FileSystems[] | select(.Name==$name) | .FileSystemId')
echo ${file_system_id}

Create a file named efs.yaml and update these parameters:

• Change the storage_class_name to efs-sc.
• Replace the fileSsystemId parameter with the output of echo ${file_system_id}.

oc apply -f efs.yaml

Sample EFS storage class manifest:

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: ${storage_class_name}
parameters:
  directoryPerms: "777"
  fileSystemId: ${file_system_id}
  gid: "0"
  provisioningMode: efs-ap
  uid: "0"
provisioner: efs.csi.aws.com
reclaimPolicy: Delete
volumeBindingMode: Immediate

oc get sc
NAME              PROVISIONER             RECLAIMPOLICY   VOLUMEBINDINGMODE      ALLOWVOLUMEEXPANSION   AGE
efs-sc            efs.csi.aws.com         Delete          Immediate              false                  123m
gp2 (default)     kubernetes.io/aws-ebs   Delete          WaitForFirstConsumer   false                  39h

kubectl patch storageclass gp2 -p '{"metadata": {"annotations":{"storageclass.kubernetes.io/is-default-class":"true"}}}'

Parameters: directoryPerms=777,fileSystemId=fs-005891f4dab28cd06,gid=0,provisioningMode=efs-ap,uid=0

For example:

oc describe sc efs-sc 
Provisioner:           efs.csi.aws.com 
Parameters: 
directoryPerms=777,fileSystemId=fs-088163fcae75a1740,gid=0,provisioningMode=efs-ap,uid=0 
AllowVolumeExpansion:  <unset> 
MountOptions:          <none> 
ReclaimPolicy:         Delete 
VolumeBindingMode:     Immediate 
Events:                <none>