148422597X Kubernetes Management Design Patterns [Vohra 2017-01-29] {E559F6BB}

Chapter 2 ■ Kubernetes on CoreOS on AWS
The key pair is created and access permissions are set as shown in Figure 2-4.
Figure 2-4. Creating the key pair
On the AWS console the kubernetes-coreos key pair should be listed, as shown in Figure 2-5.
Figure 2-5. Listing the key pair in the EC2 console
Creating a KMS Key
Next, create a KMS key, which is used to encrypt and decrypt cluster TLS assets and is identified by an
Amazon Resource Name (ARN) string. Use the aws CLI to create a KMS key for region us-east-1.
aws kms --region=us-east-1 create-key --description="kube-aws assets"
A KMS key is created as shown in Figure 2-6. Copy the KeyMetadata.Arn string arn:aws:kms:us-east-
1:672593526685:key/b7209ba2-cb87-4ccf-8401-5c6fd4fb9f9b to be used later to initialize the cluster
CloudFormation.
28