Versions Compared

Version Old Version 17 New Version Current
Changes made by

Yajing Wang

Yajing Wang

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Scroll Documents: Update page title prefix

The x-install tool is the newest Exostellar installer designed to simplify the setup process. It offers a variety of subcommands to provision a sandbox environment, install Exostellar products, and verify post-installation readiness.

Prerequisites

Before using the x-install tool, ensure that your environment meets the following requirements:

  • Terraform: Version 1.8+

  • kubectl: Version 1.28+

  • Helm: Version 3.14.2+

  • AWS CLI

  • AWS Authentication, Credentials, and Credentials: Region
    Please properly configure AWS authentication and default region in your local environment.

Expand
titleAWS Authentication and Credentials Setup Methods

You can set up credentials using various methods such as command-line options, environment variables, assume role, credentials files, configuration files, etc.

  • Command-line Options

    Code Block
    languagebash
    aws configure sso
    Code Block
    languagebash
    aws s3 ls --profile profile1

  • Environment Variables

    Code Block
    languagebash
    export AWS_ACCESS_KEY_ID="AWS_ACCESS_KEY_ID_XXX"<AccessKeyId>
export AWS_SECRET_ACCESS_KEY="AWS_SECRET_ACCESS_KEY_XXX"<SecretAccessKey>
export AWS_SESSION_TOKEN="AWS_SESSION_TOKEN_XXX"<SessionToken>

  • Assume role

    Code Block
    aws sts assume-role \
    --role-arn arn:aws:iam::123456789012:role/xaccounts3access \
    --role-session-name s3-access-example

  • Credentials and Configuration File:
    Update in ~/.aws/credentials and ~/.aws/config

    Code Block
    languagebash
    aws configure

...

Info

Please ensure the default region is set for deployment. If not set above, use the following command:

Code Block
languagebash
aws configure set default.region us-east-2

Ensure the account has the following IAM permissions

...

:

{ "Version": "
Expand
titleIAM Permissions for the AWS Account
Code Block
- Standalone Flow

When working with standalone flow i.e., deploying everything from scratch using the create-standalone command, use the following IAM policy.

Please add your AWS account ID and cluster name to the policy below.

Code Block
languagejson
{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Action": [
				"ssmautoscaling:ListAssociationsCompleteLifecycleAction",
				"ec2autoscaling:RunInstancesCreateAutoScalingGroup",
				"ec2autoscaling:DescribeSubnetsDeleteAutoScalingGroup",
				"ec2autoscaling:DescribeKeyPairsEnableMetricsCollection",
				"ec2autoscaling:DescribeVpcsPutNotificationConfiguration",
				"ec2autoscaling:DescribeSecurityGroupsUpdateAutoScalingGroup"
			],
				"Resource"ec2:DescribeSecurityGroupRules" "*"
		},
		{
			"ec2:AuthorizeSecurityGroupIngressEffect": "Allow",
				"Action"ec2:CreateTags", [
				"ec2:CreateSecurityGroupAllocateAddress",
				"snsec2:ListTopicsAssignPrivateIpAddresses",
				"s3ec2:CreateBucketAssociateRouteTable",
				"iamec2:AttachRolePolicyAttachInternetGateway",
				"iamec2:CreateRoleAttachNetworkInterface",
				"iamec2:ListRolesAuthorizeSecurityGroupEgress",
				"iamec2:TagRoleAuthorizeSecurityGroupIngress",
				"iamec2:PutRolePolicyCreateFleet",
				"iamec2:CreateInstanceProfileCreateInternetGateway",
				"iamec2:AddRoleToInstanceProfileCreateLaunchTemplate",
				"iamec2:PassRoleCreateLaunchTemplateVersion",
				"ec2:DescribeInstancesCreateNatGateway",
				"ec2:DescribeInstanceTypesCreateNetworkAclEntry",
				"ec2:RunInstancesCreateNetworkInterface",
				"ec2:DescribeImagesCreateNetworkInterfacePermission",
				"ec2:DescribeImageAttributeCreateRoute",
				"ec2:DescribeAvailabilityZonesCreateRouteTable",
				"ec2:DescribeAccountAttributesCreateSecurityGroup",
				"ec2:DescribeRouteTablesCreateSubnet",
				"ec2:DescribeNetworkAclsCreateTags",
				"ec2:DescribeInstanceStatusCreateVpc",
				"ec2:DescribeAddressesDeleteInternetGateway",
				"ec2:DescribeDhcpOptionsDeleteLaunchTemplate",
				"ec2:DescribeSnapshotsDeleteNatGateway",
				"ec2:DescribeVolumesDeleteNetworkAclEntry",
				"ec2:DescribeVolumeStatusDeleteNetworkInterface",
				"ec2:DescribeVolumesModificationsDeleteRoute",
				"cloudwatchec2:DescribeAlarmsDeleteRouteTable",
				"cloudwatchec2:ListMetricsDeleteSecurityGroup",
				"iamec2:ListUsersDeleteSubnet",
				"iamec2:ListAccessKeysDeleteTags",
				"iamec2:CreateAccessKeyDeleteVpc",
				"ec2:AuthorizeSecurityGroupEgressDescribeAddresses",
				"iamec2:ListPolicyVersionsDescribeAddressesAttribute",
				"eksec2:ListClustersDescribeAvailabilityZones",
				"eksec2:DescribeClusterDescribeDhcpOptions",
				"eksec2:ListNodegroupsDescribeImages",
				"eksec2:DescribeNodegroupDescribeInstanceAttribute",
				"eksec2:DescribeAddonDescribeInstances",
				"eksec2:ListAddonsDescribeInstanceTypes",
				"eksec2:DescribeIdentityProviderConfigDescribeInternetGateways",
				]"ec2:DescribeLaunchTemplates",
				"Resource": "*"
		}ec2:DescribeLaunchTemplateVersions",
		{
			"Effect"ec2: DescribeNatGateways"Allow",
				"Action": [ec2:DescribeNetworkAcls",
				"s3ec2:PutObjectDescribeNetworkInterfaces",
				"s3ec2:GetObjectDescribeRouteTables",
			]	"ec2:DescribeSecurityGroupRules",
				"Resource"ec2: "arn:aws:s3:::cf-template*"
		}DescribeSecurityGroups",
		{
			"Sid": "Statement1ec2:DescribeSnapshots",
				"Effect": "Allowec2:DescribeSubnets",
				"Action": [ec2:DescribeTags",
				"eksec2:CreateClusterDescribeVolumes",
				"eksec2:DescribeClusterDescribeVpcAttribute",
				"eksec2:DeleteClusterDescribeVpcs",
				"eksec2:ListClustersDetachInternetGateway",
				"eksec2:UpdateClusterConfigDetachNetworkInterface",
				"eksec2:UpdateClusterVersionDisassociateAddress",
				"eksec2:CreateNodegroupDisassociateRouteTable",
				"eksec2:DescribeNodegroupModifyInstanceAttribute",
				"eksec2:ListNodegroupsModifyLaunchTemplate",
				"eksec2:UpdateNodegroupConfigModifyNetworkInterfaceAttribute",
				"eksec2:UpdateNodegroupVersionModifySubnetAttribute",
				"eksec2:DescribeAddonVersionsModifyVpcAttribute",
				"eksec2:CreateAddonReleaseAddress",
				"eksec2:DeleteAddonRevokeSecurityGroupEgress",
				"eksec2:DescribeAddonRevokeSecurityGroupIngress",
				"eksec2:ListAddonsRunInstances",
				"eksec2:UpdateAddonTerminateInstances",
				"eks:AccessKubernetesApi"],
				"eks:ListAccessPolicies"Resource": "*"
		},
		{
			"eks:ListAccessEntriesEffect": "Allow",
			"Action": [
				"eks:ListIdentityProviderConfigsAssociateAccessPolicy",
				"eks:DescribeAccessEntryCreateAccessEntry",
				"eks:ListPodIdentityAssociationsCreateAddon",
				"eks:ListAssociatedAccessPoliciesCreateCluster",
				"eks:CreateAccessEntryCreateNodegroup",
				"eks:AssociateAccessPolicyDeleteAccessEntry",
			],
			"Resource"eks: "*"
		}DeleteAddon",
		{
			"Effect": "Alloweks:DeleteCluster",
				"Action": [eks:DeleteNodegroup",
				"iameks:DeleteRolePolicyDescribeAccessEntry",
				"iameks:DeleteRoleDescribeAddon",
				"iameks:GetRoleDescribeAddonVersions",
				"iameks:ListPoliciesDescribeCluster",
				"iameks:ListAttachedRolePoliciesDescribeNodegroup",
				"iameks:CreateServiceLinkedRoleDisassociateAccessPolicy",
				"iameks:RemoveRoleFromInstanceProfileListAssociatedAccessPolicies",
				"iameks:DeleteInstanceProfileListNodegroups",
				"iameks:ListEntitiesForPolicyTagResource",
				"iam:GetInstanceProfile"],
				"Resource"iam:ListInstanceProfiles" "*"
		},
		{
			"Effect"iam:ListInstanceProfilesForRole "Allow",
				"Action"iam:ListOpenIDConnectProviders", [
				"iamevents:GetOpenIDConnectProviderPutRule",
				"iamevents:GetRolePolicyPutTargets"
			],
				"Resource"ec2:RevokeSecurityGroupIngress" "*"
		},
		{
			"Effect"ec2:DeleteSecurityGroup "Allow",
				"Action"ec2:StopInstances", [
				"ec2iam:TerminateInstancesAddRoleToInstanceProfile",
				"ec2iam:DescribeVpcAttributeAttachRolePolicy",
				"ec2iam:DescribeTagsCreateInstanceProfile",
				"ec2iam:DescribeNetworkInterfacesCreateOpenIDConnectProvider",
				"cloudformationiam:DeleteStackCreatePolicy",
				"ec2iam:RevokeSecurityGroupEgressCreateRole",
				"iam:ListRolePoliciesDeleteInstanceProfile",
				"iam:CreatePolicyDeleteOpenIDConnectProvider",
				"iam:GetPolicyDeletePolicy",
				"ec2iam:DescribeInstanceAttributeDeleteRole",
				"iam:GetPolicyVersionDeleteRolePolicy",
			],
			"Resource": "*"
		}iam:DetachRolePolicy",
		{
			"Sid"iam: GetInstanceProfile"AdditionalPermissions",
				"Effect"iam: GetOpenIDConnectProvider"Allow",
				"Action": [iam:GetPolicy",
				"iam:DetachRolePolicyGetPolicyVersion",
				"ec2iam:CreateVpcGetRole",
				"ec2iam:DeleteVpcGetRolePolicy",
				"ec2iam:CreateSubnetListAttachedRolePolicies",
				"ec2iam:DeleteSubnetListInstanceProfilesForRole",
				"ec2iam:CreateRouteTableListPolicyVersions",
				"ec2iam:CreateRouteListRolePolicies",
				"ec2iam:AssociateRouteTablePutRolePolicy",
				"ec2iam:ReplaceRouteTableAssociationRemoveRoleFromInstanceProfile",
				"ec2iam:DeleteRouteTableTagInstanceProfile",
				"ec2iam:CreateInternetGatewayTagOpenIDConnectProvider",
				"ec2iam:AttachInternetGatewayTagRole"
			],
				"Resource"ec2:AllocateAddress" "*"
		},
		{
			"Effect"ec2:ReleaseAddress "Allow",
				"Action"ec2:CreateNatGateway", [
				"ec2iam:DeleteNatGatewayPassRole",
				"cloudformation:UpdateStack"],
				"Resource"cloudformation:DeleteChangeSet", [
				"cloudformation:DescribeChangeSetarn:aws:iam::<account-id>:role/<cluster-name>*",
				"cloudformation:ExecuteChangeSet",
				"cloudtrail:DescribeTrails"arn:aws:iam::<account-id>:role/terraform-*"
			]
		},
		{
			"Effect"cloudtrail:GetTrailStatus "Allow",
				"Action"cloudtrail:GetEventSelectors", [
				"logskms:DescribeLogGroupsCreateAlias",
				"logskms:DescribeLogStreamsCreateGrant",
				"logskms:GetLogEventsCreateKey",
				"logskms:FilterLogEventsDeleteAlias",
				"iamkms:GetUserPolicyEnableKeyRotation",
				"iamkms:GetGroupPolicyListAliases",
				"iamkms:GetPolicyVersionRetireGrant",
				"ec2kms:CreateLaunchTemplateScheduleKeyDeletion",
				"ec2kms:DescribeLaunchTemplatesTagResource",
				"ec2:DescribeInternetGateways"],
				"ec2:ModifyVpcAttribute",Resource": "*"
		},
		"ec2:ModifySubnetAttribute",{
				"Effect"ec2:DescribeNatGateways "Allow",
				"Action"ec2:DescribeInstanceTypeOfferings", [
				"ec2logs:DescribeEgressOnlyInternetGatewaysCreateLogGroup",
				"ec2logs:DescribeLaunchTemplateVersionsCreateLogStream",
				"ec2logs:DeleteLaunchTemplateDeleteLogGroup",
				"ekslogs:TagResourceDescribeLogGroups",
				"elasticloadbalancinglogs:CreateLoadBalancerListTagsForResource",
				"elasticloadbalancinglogs:DescribeLoadBalancersPutRetentionPolicy",
				"elasticloadbalancinglogs:DeleteLoadBalancerTagResource",
				"elasticloadbalancing:CreateTargetGroup"],
				"Resource"elasticloadbalancing:DescribeTargetGroups" "*"
		},
		{
			"Effect"elasticloadbalancing:RegisterTargets "Allow",
				"Action"autoscaling:CreateAutoScalingGroup", [
				"autoscalingaws-marketplace:UpdateAutoScalingGroupListEntities",
				"autoscaling:DeleteAutoScalingGroup"],
				"Resource"autoscaling:DescribeAutoScalingGroups" "*"
		},
		{
			"Effect"autoscaling:DescribeScalingActivities "Allow",
				"cloudformation:DescribeChangeSet",
				"cloudformation:ExecuteChangeSet",
				"s3:CreateBucket",Action": [
				"s3ssm:DeleteBucketRegisterManagedInstance",
				"s3:ListBucket",
				"s3:GetBucketLocation",
				"s3:GetBucketPolicy",
				"s3:PutBucketPolicy"
			ssm:UpdateInstanceInformation"
			],
			"Resource": "*"
		}
	]
}

...

titlex-install Download Options

...

Platform

...

Architecture

...

File

...

Release Date

...

macOS

...

ARM64

...

View file
namex-install-darwin-arm64-.0.0.10.tar.gz

...

...

macOS

...

x86_64

...

View file
namex-install-darwin-x86_64-.0.0.10.tar.gz

...

...

Linux

...

ARM64

...

View file
namex-install-linux-arm64-.0.0.10.tar.gz

...

...

Linux

...

i386

...

View file
namex-install-linux-i386-.0.0.10.tar.gz

...

...

Linux

...

x86_64

...

View file
namex-install-linux-x86_64-.0.0.10.tar.gz

...

...

Windows

...

ARM64

...

View file
namex-install-windows-arm64-.0.0.10.zip

...

...

Windows

...

i386

...

View file
namex-install-windows-i386-.0.0.10.zip

...

...

Windows

...

x86_64

...

View file
namex-install-windows-x86_64-.0.0.10.zip

...

Installation Steps

1. Create a Standalone Stack

Use the following command to create a standalone stack:

(Please modify the stack name, VPC CIDR, SSH key pair, and region to suit your environment.)

Code Block
x-install create-standalone \
  --stack-name=xio-standalone \
  --vpc-cidr=10.0.0.0/16 \
  --ssh-key-pair-name=my-dev-key \
  --region=us-east-2

  • The new VPC and EKS cluster will inherit the stack name.

  • The VPC will be assigned the CIDR block 10.0.0.0/16.

  • The EC2 SSH key pair, my-dev-key, will be used to access the Exostellar Management Server.

2. Verify Post-Installation Readiness

After the standalone stack is successfully created, use the following command to check if the stack is ready:

Code Block
languagebash
x-install post-install --stack-name=xio-standalone --ssh-private-key-file=my-dev-key.pem --ssh-username=rocky
Info

It might take a few attempts for post-install to pass all system units and containers readiness checks, due to infrastructure readiness latency.

3. Add an X-Compute Node to the Standalone EKS Cluster

To add an X-Compute node to the newly created standalone EKS cluster, first SSH into the Exostellar Management Server:

Code Block
ssh -i "my-dev-key.pem" rocky@<management-server-public-ip>

On the server, run the following command to add a new node to the EKS cluster:

Code Block
languagebash
eks-node-cli add -n node-00 -c 1 -m 4096 -p pool-a -r az1 -k xio-standalone
Tip

The new node can be verified using the kubectl command:

Code Block
kubectl get node -l eks.amazonaws.com/nodegroup=x-compute

Please ensure ~/.kube/config is set up properly. It takes a couple of minutes for the x-compute node to boot and show up.

The output should display the new nodes as ready:

Code Block
NAME
 Expand
titleIAM Permissions for the AWS Account - Using an Existing Cluster
When working with existing EKS clusters, use the following IAM policy.
Please add your AWS account ID and cluster name to the policy below.
 Code Block
languagejson
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "aws-marketplace:ListEntities"
			],
			"Resource": "*"
		},
		{
			"Effect": "Allow",
			"Action": [
                "ec2:ModifyInstanceAttribute",
                "ec2:AuthorizeSecurityGroupEgress",
                "ec2:AuthorizeSecurityGroupIngress",
                "ec2:CreateSecurityGroup",
                "ec2:CreateTags",
                "ec2:DeleteSecurityGroup",
                "ec2:DescribeDhcpOptions",
                "ec2:DescribeImages",
                "ec2:DescribeInstanceAttribute",
                "ec2:DescribeInstances",
                "ec2:DescribeInstanceTypes",
                "ec2:DescribeInternetGateways",
                "ec2:DescribeNatGateways",
                "ec2:DescribeNetworkInterfaces",
                "ec2:DescribeRouteTables",
                "ec2:DescribeSecurityGroups",
                "ec2:DescribeSnapshots",
                "ec2:DescribeSubnets",
                "ec2:DescribeTags",
                "ec2:DescribeVolumes",
                "ec2:DescribeVpcAttribute",
                "ec2:DescribeVpcs",
                "ec2:RevokeSecurityGroupEgress",
                "ec2:RunInstances",
                "ec2:TerminateInstances"
			],
			"Resource": "*"
		},
		{
			"Effect": "Allow",
			"Action": [
                "eks:DescribeCluster",
                "eks:DescribeNodegroup",
                "eks:ListNodegroups"
			],
			"Resource": "*"
		},
		{
			"Effect": "Allow",
			"Action": [
                "iam:AddRoleToInstanceProfile",
                "iam:AttachRolePolicy",
                "iam:CreateInstanceProfile",
                "iam:CreateRole",
                "iam:DeleteInstanceProfile",
                "iam:DeleteRole",
                "iam:DeleteRolePolicy",
                "iam:DetachRolePolicy",
                "iam:GetInstanceProfile",
                "iam:GetPolicy",
                "iam:GetPolicyVersion",
                "iam:GetRole",
                "iam:GetRolePolicy",
                "iam:ListAttachedRolePolicies",
                "iam:ListInstanceProfilesForRole",
                "iam:ListRolePolicies",
                "iam:PutRolePolicy",
                "iam:RemoveRoleFromInstanceProfile",
                "iam:TagInstanceProfile",
                "iam:TagRole"
			],
			"Resource": "*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"iam:PassRole"
			],
			"Resource": [
				"arn:aws:iam::<account-id>:role/<cluster-name>*",
				"arn:aws:iam::<account-id>:role/terraform-*"
			]
		}
    ]
}
 Expand
titleSSH Key Creation
Use the following command to create a new SSH key pair:
 Code Block
languagebash
aws ec2 create-key-pair --key-name 'my-dev-key' --query 'KeyMaterial' --output text --region us-east-2 > my-dev-key.pem
Modify the permission to secure the key:
 Code Block
languagebash
chmod 400 my-dev-key.pem
  • x-install tool: Version 0.0.15+
 Expand
titlex-install Download Options
Platform
Architecture
File
Release Date
macOS
ARM64
 View file
namex-install-darwin-arm64-.0.0.15.tar.gz
 
macOS
x86_64
 View file
namex-install-darwin-x86_64-.0.0.15.tar.gz
Linux
ARM64
 View file
namex-install-linux-arm64-.0.0.15.tar.gz
Linux
i386
 View file
namex-install-linux-i386-.0.0.15.tar.gz
Linux
x86_64
 View file
namex-install-linux-x86_64-.0.0.15.tar.gz
Windows
ARM64
 View file
namex-install-windows-arm64-.0.0.15.zip
Windows
i386
 View file
namex-install-windows-i386-.0.0.15.zip
Windows
x86_64 
 View file
namex-install-windows-x86_64-.0.0.15.zip
 
 Info
For macOS users, please grant x-install permissions by clicking the “Allow Anyway” button in the Security settings. This button is available for about an hour after you try to open the app. You can access the Security settings by choosing Apple Menu > System Settings, then clicking Privacy & Security in the sidebar. 
Installation Steps
Creating a Sandbox EKS Cluster and Deploying the Management Server
1. Create a Standalone Stack
Navigate to the directory where x-install is downloaded and use the following command to create a standalone stack, customizing the cluster name, VPC CIDR, SSH key pair, and region to suit your environment:
 Code Block
languagebash
x-install create-standalone \
  --cluster=xio-standalone \
  --vpc-cidr=10.0.0.0/16 \
  --ssh-key-pair-name=my-dev-key \
  --region=us-east-2
  • The new VPC and EKS cluster will inherit the stack name.
  • The VPC will be assigned the CIDR block 10.0.0.0/16.
  • The EC2 SSH key pair, my-dev-key, will be used to access the Exostellar Management Server.
By default, x-install auto-detects the latest Management Server AMI in the region within the AWS account. To specify a version or custom AMI ID, use --mgmt-server-ami-id:
 Code Block
languagebash
x-install create-standalone \
  --cluster=xio-standalone \
  --vpc-cidr=10.0.0.0/16 \
  --ssh-key-pair-name=my-dev-key \
  --region=us-east-2 \
  --mgmt-server-ami-id=ami-053b51fb9abf27xxx
2. Verify Post-Installation Readiness
After the standalone stack is successfully created, use the following command to check if the stack is ready:
 Code Block
languagebash
x-install post-install --cluster=xio-standalone --ssh-private-key-file=my-dev-key.pem --ssh-username=rocky
 Info
It might take a few attempts for post-install to pass all system units and containers readiness checks, due to infrastructure readiness latency.
Deploying the Management Server into an Existing EKS Cluster
1. Add Necessary IAM Permissions
Ensure all required IAM resources are present by running:
 Code Block
languagebash
x-install apply-iam --cluster xio-standalone --region us-east-2
2. Check the Target Environment
Verify the existing EKS cluster meets installation prerequisites:
 Code Block
languagebash
x-install precheck --cluster xio-standalone --region us-east-2 --ssh-key-pair-name=my-dev-key.pem
 Info
Please refer to this for the IAM roles required for the cluster’s node group.
3. Install the Management Server 
Deploy the Management Server into the existing EKS Cluster:
 Code Block
languagebash
x-install apply --cluster xio-standalone
4. Integrate the Management Server with the Existing EKS Cluster
Run the following command to complete the integration:
 Code Block
languagebash
x-install eksconfig --cluster xio-standalone
To update the integration configurations:
 Code Block
languagebash
x-install eksconfig --cluster xio-standalone --override-existing-params
Adding X-Compute Nodes to the EKS Cluster via eks-node-cli
1. Access the Management Server
SSH into the Exostellar Management Server using:
 Code Block
languagebash
ssh -i "my-dev-key.pem" rocky@<management-server-public-ip>
2. Add a New Node
Run this command on the server to add a new node to the EKS cluster:
 Code Block
languagebash
eks-node-cli add -n node-00 -c 1 -m 4096 -p pool-a -r az1 -k xio-standalone
 Tip
The new node can be verified using the kubectl command:
 Code Block
kubectl get node -l eks.amazonaws.com/nodegroup=x-compute
The output should display the new nodes as ready:
 Code Block
NAME                                          STATUS   ROLES    AGE     VERSION
ip-10-0-39-220.us-west-1.x-compute.internal   Ready    <none>   4m17s   v1.29.3-eks-ae9a62a
Please ensure ~/.kube/config is set up properly. It takes a couple of minutes for the x-compute node to boot and show up.
By default, the EKS token used to access the standalone EKS cluster expired after 60 minutes. Following that, all attempts to access the cluster will fail with Unauthorized errors.
To generate a new EKS token and use it with your existing kubeconfig file, run:
 Code Block
languagebash
x-install update-kubeconfig --cluster=xio-standalone
Adding X-Compute Nodes to the EKS Cluster via Exostellar Karpenter
Reference deployment example: 
 Code Block
languagebash
cat <<EOF | kubectl apply -f -
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx
spec:
  selector:
    matchLabels:
      app: nginx
  replicas: 2
  template:
    metadata:
      labels:
        app: nginx
    spec:
      tolerations:
      - key: "exokarpenter.sh/x-compute"
        operator: "Exists"
        effect: "NoSchedule"
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: exokarpenter.sh/nodepool
                operator: In
                values:
                - pool-a
      containers:
      - name: nginx
        image: nginx:1.14.2
    STATUS   ROLES ports:
  AGE     VERSION ip-10-0-39-220.us-west-1.x-compute.internal   Ready- containerPort: 80
        resources:
          <none>  requests:
4m17s   v1.29.3-eks-ae9a62a
By default, the EKS token used to access the standalone EKS cluster expired after 60 minutes. Following that, all attempts to access the cluster will fail with Unauthorized errors.
To generate a new EKS token and use it with your existing kubeconfig file, run:
 Code Block
languagebash
x-install update-kubeconfig --stack-name=xio-standalone
4. Clean Up
...
              cpu: 1
EOF
Cleaning Up
The entire standalone stack can be deleted with the destroy command:
 Code Block
languagebash
x-install destroy --stack-name cluster=xio-standalone
 Info
In some cases, Terraform might time out during the destroy process. If this happens, simply re-run the command to allow Terraform to reconcile its final state.
At this time, all controllers and workers EC2 instances need to be manually terminated.
Additional Help and Support
To explore other subcommands, use the following command for a list of available options:
 Code Block
x-install --help
 Info
If you encounter any issues, please take a screenshot of your x-install output and download your ~/.xio/ folder. Then, submit both to Exostellar Customer Support for further assistance.