EKS Nodegroup gets failed through cloudformation stack

d.udhayashankar · January 19, 2025, 2:43pm

Hi Team ,

Nodegroup creation gets failed through cloudformation stack , as mentioned in the below document. But still i am getting below error. Can you please help on this .

Link:

github.com

kodekloudhub/certified-kubernetes-administrator-course/blob/master/managed-clusters/eks/console/docs/06-nodes.md

# Add Cluster Nodes

Now we will add some *unmanaged* nodes to the cluster. AWS Playground does not support managed node groups.

1. Create an SSH keypair for the nodes to use
    1. Navigate to the EC2 console by typing `ec2` in the search box at the top, and then selecting it from the list.
    1. Scroll down the menu on the left until you see `Key Pairs`, then click that to enter the key pairs console.
    1. Click the orange `Create key pair` button at the top right
    1. Fill out the form using `node-key-pair` as name, `RSA` as key pair type and `.pem` as private key format

        ![](../images/06-key-pair.png)

    1. Press the `Create key pair` button

1. Navigate to the CloudFormation console, again using the search box. CloudFormation is AWS's native Infrastructure as Code, and we will use a pre-prepared template to define worker nodes.
    1. Press the orange `Create stack` button
    1. Select Choose an existing template from Amazon S3 URL and use the following URL: `https://s3.us-west-2.amazonaws.com/amazon-eks/cloudformation/2022-12-23/amazon-eks-nodegroup.yaml`

        ![](../images/06-create-stack.png)

This file has been truncated. show original

Error:
Resource handler returned message: “User: arn:aws:iam::975050354644:user/kk_labs_user_441162 is not authorized to perform: iam:RemoveRoleFromInstanceProfile on resource: instance profile test-nodegroup-stack-NodeInstanceProfile-iHszkap7eZCv because no identity-based policy allows the iam:RemoveRoleFromInstanceProfile action (Service: Iam, Status Code: 403, Request ID: 6c89d8ae-f1be-4168-a7e2-8a91813b2b24)” (RequestToken: a68f9e6d-82d6-4e55-4218-08558f190647, HandlerErrorCode: GeneralServiceException)

Alistair_KodeKloud · January 19, 2025, 3:45pm

You would be better off to build it following the terraform instructions here, which will work.

In the real world, nobody ever builds a cluster via the console - you would always use Infrastructure as Code, as you would for any cloud resources.