Configuring containerd on EKS

Question

Hi all. We've been trying to enter this user data in our template for our managed node groups on eks but the containerd-config.toml file is always the default setup by eks, does eks overwrite what we do or does the file not get edited? We have set a txt to display any error but that file isn't saved on the node either. Any idea what's happening?

#!/bin/bash
echo '[plugins."io.containerd.grpc.v1.cri".registry.configs."PRIVATE-REGISTRY".tls]
      insecure_skip_verify = true
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."PRIVATE-REGISTRY"]
      endpoint = ["PRIVATE-REGISTRY"]' | sudo tee -a /etc/containerd/config.toml 2>&1 | tee containerd.txt

sudo systemctl restart containerd 
sudo containerd config dump | tee containerd.txt

Answer

Seems like EKS is overwriting the file. This might happen because EKS uses - **EKS optimized Amazon Linux AMI**.  This AMI uses Amazon Linux 2 as its base image and has additional components. One such component is containerd. As this AMI is regularly updated, there is a chance that your changes will be lost.

**Links**
https://aws.amazon.com/eks/faqs/#:~:text=Q%3A%20How%20do%20I%20update%20my%20worker%20nodes%3F

https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html

To avoid this issue, you can create **Custom AMI** and use it for your cluster. This can solve your problem

Configuring containerd on EKS

Contenus pertinents