Installing Kasten on AWS Quickstart Guide
This quickstart guide is intended to help users get Kasten installed on an AWS EKS cluster quickly via an IAM Service Account. For more detail on IAM Roles, required permissions, and storage configuration for AWS EKS, refer to the complimentary documentation:
- Using AWS IAM Roles with Veeam Kasten
- Using Veeam Kasten with AWS EBS
- Using Veeam Kasten with AWS S3
- Using Veeam Kasten with Amazon RDS
- Using Veeam Kasten with AWS EFS
- Using Veeam Kasten with AWS Secrets Manager
- Optional KMS Permissions
Prerequisites
The following commands can be run to quickly install Kasten on an AWS EKS cluster. To perform the below steps, you will need the following binaries installed on your machine:
You will need the following information to complete the quickstart steps below:
AWS_REGION
- AWS Region where the EKS cluster has been deployedCLUSTER_NAME
- The name of the EKS cluster where Kasten is to be installedVersion
- the version of Kasten you wish to install (Refer to Release Notes for latest)
Steps
All commands were tested and confirmed working using GNU Bash v5.2.37
Add the Kasten repository to helm
helm repo add kasten https://charts.kasten.io/
Create a namespace named kasten-io
kubectl create namespace kasten-io
Associate the AWS IAM provider with the EKS cluster
eksctl utils associate-iam-oidc-provider --region=<AWS_REGION> --cluster=<CLUSTER_NAME> --approve
Create the AWS IAM Service account named k10-k10
eksctl create iamserviceaccount \
--name k10-k10 \
--namespace kasten-io \
--cluster <CLUSTER_NAME> \
--attach-policy-arn arn:aws:iam::aws:policy/AWSMarketplaceMeteringFullAccess \
--attach-policy-arn arn:aws:iam::aws:policy/AWSMarketplaceMeteringRegisterUsage \
--attach-policy-arn arn:aws:iam::aws:policy/service-role/AWSLicenseManagerConsumptionPolicy \
--approve \
--override-existing-serviceaccounts
Authenticate to the Elastic Container Registry
aws ecr get-login-password \
--region <AWS_REGION> | helm registry login \
--username AWS \
--password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com
Create a directory (if it doesn't already exist) on the local machine named awsmp-chart
and change into that directory
mkdir -p awsmp-chart && cd awsmp-chart
Pull down a local version of the Kasten helm chart
helm pull oci://709825985650.dkr.ecr.us-east-1.amazonaws.com/veeam/kasten/payg/k10 --version 8.0.5
Untar the helm chart within the awsmp-chart
directory
tar xf $(pwd)/* && find $(pwd) -maxdepth 1 -type f -delete
Perform the installation via helm using the chart for AWS EKS that is pulled locally
helm install k10 \
--namespace kasten-io ./* \
--set serviceAccount.create=false \
--set serviceAccount.name=k10-k10
Once complete, you can refer to the steps on Validating the Install.