Amazon EKS
User Guide

Amazon EKS-Optimized AMI

The Amazon EKS-optimized AMI is built on top of Amazon Linux 2, and is configured to serve as the base image for Amazon EKS worker nodes. The AMI is configured to work with Amazon EKS out of the box, and it includes Docker, kubelet, and the AWS IAM Authenticator.

Note

You can track security or privacy events for Amazon Linux 2 at the Amazon Linux Security Center or subscribe to the associated RSS feed. Security and privacy events include an overview of the issue, what packages are affected, and how to update your instances to correct the issue.

The AMI IDs for the latest Amazon EKS-optimized AMI (with and without GPU support) are shown in the following table.

Note

The Amazon EKS-optimized AMI with GPU support only supports P2 and P3 instance types. Be sure to specify these instance types in your worker node AWS CloudFormation template. Because this AMI includes third-party software that requires an end user license agreement (EULA), you must subscribe to the AMI in the AWS Marketplace and accept the EULA before you can use the AMI in your worker node groups. To subscribe to the AMI, visit the AWS Marketplace.

Kubernetes version 1.11

Region Amazon EKS-optimized AMI with GPU support
US West (Oregon) (us-west-2) ami-0c28139856aaf9c3b ami-06045aa686f46dd58
US East (N. Virginia) (us-east-1) ami-0eeeef929db40543c ami-0558da965e2fc68b0
US East (Ohio) (us-east-2) ami-0484545fe7d3da96f ami-0c3afad2ea917168e
EU (Frankfurt) (eu-central-1) ami-032ed5525d4df2de3 ami-0939712219b80b525
EU (Stockholm) (eu-north-1) ami-0154b2479ba20f8bb ami-18bf3666
EU (Ireland) (eu-west-1) ami-098fb7e9b507904e7 ami-014969e8d07b2fc9f
EU (London) (eu-west-2) ami-0d69ab00cb41d6eda ami-0bb14a7e038ad534c
EU (Paris) (eu-west-3) ami-018ebb030cf6ae00b ami-0a3db0dbd972b38f2
Asia Pacific (Tokyo) (ap-northeast-1) ami-07fdc9272ce5b0ce5 ami-0880d3b662781d6d6
Asia Pacific (Seoul) (ap-northeast-2) ami-091e0e1906e653417 ami-0c3db49d90afa0f1e
Asia Pacific (Mumbai) (ap-south-1) ami-0b6f791fc54125a8a ami-00b37b9a91efc5fff
Asia Pacific (Singapore) (ap-southeast-1) ami-038d55c26bf01998f ami-0c903ead334faa6a3
Asia Pacific (Sydney) (ap-southeast-2) ami-0e07b5081bb77d540 ami-02d7e0f064bd7d8e0

Kubernetes version 1.10

Region Amazon EKS-optimized AMI with GPU support
US West (Oregon) (us-west-2) ami-0e7ee8863c8536cce ami-02e0b615d7749e016
US East (N. Virginia) (us-east-1) ami-09a7630ca9ee4ee22 ami-00cce60e4c241de4c
US East (Ohio) (us-east-2) ami-02a8a05e480e902e2 ami-0bbfeb020c5ec10ee
EU (Frankfurt) (eu-central-1) ami-0b8d223ce03e6fabc ami-0c1746c6d5d61b4d3
EU (Stockholm) (eu-north-1) ami-09be5053dbb1a515d ami-63aa231d
EU (Ireland) (eu-west-1) ami-0103822d44fc52f97 ami-08d23ed2de9320c90
EU (London) (eu-west-2) ami-017c4d847b606e125 ami-0f136e808b9365a1c
EU (Paris) (eu-west-3) ami-0c7fc5c0784b58207 ami-0b6c4fac3cdcc191d
Asia Pacific (Tokyo) (ap-northeast-1) ami-0e831f9f650f2f8ab ami-061f5b653b1a98557
Asia Pacific (Seoul) (ap-northeast-2) ami-0378f1fac83cbf438 ami-0a8159b97b9a7e078
Asia Pacific (Mumbai) (ap-south-1) ami-0ac369c3b2206d2ea ami-03ba4c3cea82ce746
Asia Pacific (Singapore) (ap-southeast-1) ami-0fa3f3282eb89b795 ami-02aa3e8ad27163456
Asia Pacific (Sydney) (ap-southeast-2) ami-01d0ab2e9506b8db0 ami-0679fa5d74309eb79

Important

These AMIs require the latest AWS CloudFormation worker node template. You cannot use these AMIs with a previous version of the worker node template; they will fail to join your cluster. Be sure to upgrade any existing AWS CloudFormation worker stacks with the latest template (URL shown below) before you attempt to use these AMIs.

https://amazon-eks.s3-us-west-2.amazonaws.com/cloudformation/2019-02-11/amazon-eks-nodegroup.yaml

The AWS CloudFormation worker node template launches your worker nodes with Amazon EC2 user data that triggers a specialized bootstrap script that allows them to discover and connect to your cluster's control plane automatically. For more information, see Launching Amazon EKS Worker Nodes.

Amazon EKS-Optimized AMI Build Scripts

Amazon Elastic Container Service for Kubernetes (Amazon EKS) has open-sourced the build scripts that are used to build the Amazon EKS-optimized AMI. These build scripts are now available on GitHub.

The Amazon EKS-optimized AMI is built on top of Amazon Linux 2, specifically for use as a worker node in Amazon EKS clusters. You can use this repository to view the specifics of how the Amazon EKS team configures kubelet, Docker, the AWS IAM Authenticator for Kubernetes, and more.

The build scripts repository includes a HashiCorp Packer template and build scripts to generate an AMI. These scripts are the source of truth for Amazon EKS-optimized AMI builds, so you can follow the GitHub repository to monitor changes to our AMIs. For example, perhaps you want your own AMI to use the same version of Docker that the EKS team uses for the official AMI.

The GitHub repository also contains the specialized bootstrap script that runs at boot time to configure your instance's certificate data, control plane endpoint, cluster name, and more.

Additionally, the GitHub repository contains our Amazon EKS worker node AWS CloudFormation templates. These templates make it easier to spin up an instance running the Amazon EKS-optimized AMI and register it with a cluster.

For more information, see the repositories on GitHub at https://github.com/awslabs/amazon-eks-ami.