aws_eks_node_group is missing way to configure taints on nodes

[lzecca78]

I am trying to add taints to node_group, but is currently missing a parameter that allow that.
Is there a workaround for that or the only way is to change approach and discard the aws_eks_node_group resource making manually asg and so on?

[aviau]

Is this even possible with the EKS API?

The CreateNodeGroup API is documented here:

• https://docs.aws.amazon.com/eks/latest/APIReference/API_CreateNodegroup.html

The eks boostrap script supports setting taints, however:

• https://aws.amazon.com/blogs/opensource/improvements-eks-worker-node-provisioning/

EKS node groups are backed by AutoScaling Groups, which are available from the aws_eks_node_group attributes.

Autoscaling groups are backed by launch configurations, which contain User data scripts.

User data scripts created by EKS contain code that calls /etc/eks/bootstrap.sh.

As a workaroud until this is fully implemented in the CreateNodeGroup API, I think that it would be possible to find that launch template from the eks_node_group and manage it with terraform?

I don't want to go around breaking everything but I really need this feature.

Edit: Related AWS discussion: aws/containers-roadmap#864

[bflad]

Hi folks 👋 As mentioned in the excellent comment above, this is not directly supported in the EKS API, therefore it is not something we would implement in the Terraform AWS Provider aws_eks_node_group resource. To follow the upstream issue on this, please see aws/containers-roadmap#864. When that support is potentially implemented, we can revisit adding this functionality within the Terraform AWS Provider. 👍

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!