Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Before You Install

You can install CN2 on Amazon EKS using Amazon EKS blueprints for Terraform, Helm charts, or YAML manifests.

If you're looking for a quick proof-of-concept installation, then use the Amazon EKS blueprints. Our blueprint creates an Amazon EKS cluster and then installs CN2 on that cluster using the YAML manifests that we prepopulate in the blueprint repository.

If you already have an Amazon EKS cluster, then use the Helm charts or use the YAML manifests directly. Helm charts are slightly easier to use, but YAML manifests provide you the most flexibility.

  1. Set up an AWS account and a Juniper Networks account.
    You'll need the AWS account to create an Amazon EKS cluster and you'll need the Juniper Networks account to download CN2 manifests from the Juniper Networks download site (https://support.juniper.net/support/downloads/?p=contrail-networking) and to access the container repository at https://enterprise-hub.juniper.net.
  2. Install the AWS CLI. See https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html.
  3. Configure the AWS CLI with your AWS access key and secret. See https://awscli.amazonaws.com/v2/documentation/api/latest/reference/configure/index.html.
  4. Install eksctl. See https://docs.aws.amazon.com/eks/latest/userguide/eksctl.html.
  5. Install kubectl. See https://kubernetes.io/docs/tasks/tools/.
  6. Install Helm. See https://helm.sh/docs/intro/install/.
  7. If you're planning on using Amazon EKS blueprints, then install Terraform:
    1. Install Terraform. See https://developer.hashicorp.com/terraform/tutorials/aws-get-started/install-cli.
    2. Enable AWS account permissions for running Terraform. See https://developer.hashicorp.com/terraform/tutorials/aws-get-started/aws-build.
      The policy resource set in terraform-aws-eks-blueprints/examples/eks-cluster-with-cn2/min-iam-policy.json allows all resources. We recommend you change this in a real deployment.
  8. If you're planning on using the CN2 YAML manifests directly, then download the manifests:
    1. Download the Contrail Networking manifests. See Manifests.
    2. Configure your repository login credentials in the downloaded manifests.

      Add your repository login credentials to the amazon-eks and contrail-tools manifests. See Configure Repository Credentials for one way to do this.

  9. Optionally, install contrailstatus. Contrailstatus is a kubectl plug-in you can use to query CN2 components and resources. See Manifests.
    Change permissions on the kubectl-contrailstatus executable and copy it somewhere in your path, for example /usr/local/bin.