Enterprise Kubernetes, delivered

Tectonic ships with CoreOS's signature automated operations, runs multi-cloud, and is the fastest, most secure path to Kubernetes.

Creating an AWS account

You’re well on your way to getting up and running with CoreOS Tectonic. Let’s get started.

In this tutorial you will:

  • Create an Amazon Web Services (AWS) account
  • Secure your AWS access keys
  • Configure automated DNS with Amazon Route 53

Creating and configuring your AWS account

Let's create your AWS account. To begin:

  1. Go to https://aws.amazon.com and click ‘Create a Free Account’.
  2. Enter your payment information using a valid credit card.
  3. Complete the identity verification process by answering Amazon’s phone call and entering the PIN show in your browser.
  4. Select the support plan that will best serve your business needs.

After successfully creating your new AWS account, sign in to the AWS console.

Securing your AWS access keys

For your account to work with Tectonic, you must supply Tectonic with a set of security credentials that allow it to authenticate against your account. You can create those security credentials in a few easy steps.

  1. Go to your profile, click on ‘My Security Credentials’ and select ‘Create New Access Key’.
  2. Click ‘Download Key File’ and save it for later, as you use both your access Key ID and secret access key during the Tectonic installation process.

Next, return to the console to configure AWS Route 53.

Configuring AWS Route 53

Route 53 is an Amazon service that allows you to perform DNS management, traffic management, availability monitoring and domain registration. For the purpose of installing Tectonic, all you need is DNS management.

  1. Navigate to the AWS Route 53 console and click ‘Get started now’ under DNS management.
  2. Click ‘Create Hosted Zone’.

The reason you need to use a hosted zone with Tectonic is because when you go through the Tectonic installation you are required to enter in a domain that Tectonic can use. This must be a domain AWS’ Route 53 can configure into two (2) subdomains—one subdomain for the Tectonic console and one subdomain for the Kubernetes API server. So, enter a domain that you own and can manage.

Enter the domain and click 'Create'.

Upon creation, AWS provides you four (4) nameservers that you have to reconfigure in your domain nameservers register. Go to the domain provider that you purchased your domain from to configure the nameservers appropriately.

  1. Go to your domain provider’s website.
  2. Go to the DNS settings page and enter the four (4) nameservers Amazon provided you.
  3. Save your updated domain settings.

Please note that it may take anywhere from minutes to hours for the changes to take effect.

To verify which nameservers are associated with your domain, you can use a tool like Dig or nslookup. If no nameservers are returned when you look up your domain, this is likely because the changes are still pending. Here's an example command:

$ dig -t ns [example.com]

You will know the nameservers were setup correctly when the lookup yields the four (4) nameservers provided by AWS.

Next, configure an SSH key pair within EC2 by going to the AWS console and click ‘EC2’ and select ‘Key Pairs’.

Before creating the key pair, make sure you are in the correct EC2 region. You can confirm your current region by clicking on the location next to your profile.

After that, it is time to create a key pair. You'll want to:

  1. Click ‘Create Key Pair’.
  2. Enter a name in the ‘Key pair name’ field, such as “tectonic”.
  3. Click ‘Create’.

You’ll see the public key and associated fingerprint in the AWS console. You will also see that the private key has been downloaded automatically.

With an AWS account created, SSH key pair downloaded, and a Route 53 domain setup, you are now ready to install Tectonic.

NEXT: Downloading and installing Tectonic on AWS