$ cd ~
$ git clone https://github.com/terraform-providers/terraform-provider-aws.git
$ cd terraform-provider-aws/examples/eks-getting-started

$ cat variables.tf

variable "aws_region" {
  default = "ap-northeast-2"
}

variable "cluster-name" {
  default = "terraform-eks-demo"
  type    = string
}

$ terraform init

$ terraform plan

$ terraform apply

Do you want to perform these actions?
Terraform will perform the actions described above.
Only 'yes' will be accepted to approve.

Enter a value: 

$ terraform output kubeconfig

$ mkdir ~/.kube/
$ terraform output kubeconfig > ~/.kube/config

$ terraform output config_map_aws_auth > configmap.yml
$ kubectl apply -f configmap.yml

$ cat eks-worker-nodes.tf 

...(생략)

  scaling_config {
    desired_size = 1
    max_size     = 1
    min_size     = 1
  }

...(생략)

  scaling_config {
    desired_size = 2
    max_size     = 10
    min_size     = 2
  }

$ terraform plan


An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_eks_node_group.demo will be updated in-place

...(생략)
      ~ scaling_config {
          ~ desired_size = 1 -> 2
          ~ max_size     = 1 -> 10
          ~ min_size     = 1 -> 2
        }
...(생략)
`
Plan: 0 to add, 1 to change, 0 to destroy.

------------------------------------------------------------------------

Note: You didn't specify an "-out" parameter to save this plan, so Terraform
can't guarantee that exactly these actions will be performed if
"terraform apply" is subsequently run.

$ terraform apply

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: 

$ kubectl get nodes -o wide

NAME                                            STATUS     ROLES    AGE   VERSION              INTERNAL-IP   EXTERNAL-IP    OS-IMAGE         KERNEL-VERSION                  CONTAINER-RUNTIME
ip-10-0-0-72.ap-northeast-2.compute.internal    Ready   <none>   19s   v1.17.9-eks-4c6976   10.0.0.72     3.35.0.241     Amazon Linux 2   4.14.186-146.268.amzn2.x86_64   docker://19.3.6
ip-10-0-1-172.ap-northeast-2.compute.internal   Ready      <none>   10m   v1.17.9-eks-4c6976   10.0.1.172    15.165.7.203   Amazon Linux 2   4.14.186-146.268.amzn2.x86_64   docker://19.3.6

$ helm install my-nginx stable/nginx-ingress --set rbac.create=true

WARNING: This chart is deprecated
NAME: my-nginx
LAST DEPLOYED: Fri Aug 28 17:38:11 2020
NAMESPACE: default
STATUS: deployed
REVISION: 1
TEST SUITE: None

$ kubectl get pod

NAME                                                     READY   STATUS    RESTARTS   AGE
my-nginx-nginx-ingress-controller-78b6584d64-p48nb       1/1     Running   0          3m4s
my-nginx-nginx-ingress-default-backend-ddfb86755-bsrkv   1/1     Running   0          3m4s

$ cat > airflow-manifest.yaml <<EOF
ingress:
  enabled: true
  web:
    path: "/"
    annotations:
      kubernetes.io/ingress.class: "nginx"
EOF

$ helm install airflow stable/airflow -f airflow-manifest.yaml

$ kubectl get pod

NAME                                                     READY   STATUS    RESTARTS   AGE
airflow-flower-7f54c64f55-ftspp                          1/1     Running   0          3m25s
airflow-postgresql-0                                     1/1     Running   0          3m25s
airflow-redis-master-0                                   1/1     Running   0          3m25s
airflow-scheduler-6c6f977b-q98n2                         1/1     Running   2          3m25s
airflow-web-7d977d5c47-ktwf6                             1/1     Running   2          3m25s
airflow-worker-0                                         1/1     Running   0          3m25s
my-nginx-nginx-ingress-controller-78b6584d64-p48nb       1/1     Running   0          27m
my-nginx-nginx-ingress-default-backend-ddfb86755-bsrkv   1/1     Running   0          27m

$ aws elb describe-load-balancers | grep DNSName

      "DNSName": "a9a7fff789cd84a7f881ex57fwe0f14e-1133921978.ap-northeast-2.elb.amazonaws.com",

$ helm uninstall airflow
$ helm uninstall my-nginx

$ terraform destroy

$ sudo apt-get update && sudo apt-get install -y gnupg software-properties-common curl
$ curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -
$ sudo apt-add-repository "deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main"
$ sudo apt-get update && sudo apt-get install terraform

$ curl https://baltocdn.com/helm/signing.asc | sudo apt-key add -
$ sudo apt-get install apt-transport-https --yes
$ echo "deb https://baltocdn.com/helm/stable/debian/ all main" | sudo tee /etc/apt/sources.list.d/helm-stable-debian.list
$ sudo apt-get update
$ sudo apt-get install helm

$ helm repo add stable https://kubernetes-charts.storage.googleapis.com/
$ helm repo update

$ curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
$ sudo apt-get update
$ sudo apt-get install -y apt-transport-https ca-certificates curl
$ sudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
$ echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
$ sudo apt-get update
$ sudo apt-get install -y kubectl

$ curl -o aws-iam-authenticator https://amazon-eks.s3.us-west-2.amazonaws.com/1.17.7/2020-07-08/bin/linux/amd64/aws-iam-authenticator
$ chmod +x ./aws-iam-authenticator
$ mkdir -p $HOME/bin && mv ./aws-iam-authenticator $HOME/bin/aws-iam-authenticator && export PATH=$PATH:$HOME/bin
$ echo 'export PATH=$PATH:$HOME/bin' >> ~/.bashrc

$ echo 'export PATH=$PATH:$HOME/bin' >> ~/.zshrc

$ cat ~/.aws/config

[default]
aws_secret_access_key = AAAAAAAAAAAAAAAAAAAAAAA/BBBBBBBBBBBBBBB
region = ap-northeast-2
aws_access_key_id = CCCCCCCCCCCCCCCCCCCCC