Skip to main content

Ignition Cloud Edition

Ignition Cloud Edition now has a container offering on AWS Marketplace! This page will give you guidance on how to successfully deploy Ignition Cloud Edition using the Ignition Helm Chart.

Please start with the Deploying on AWS EKS tutorial for general information on deploying Ignition on EKS.

Image Selection​

In order to use Ignition Cloud Edition on AWS EKS, you must pull the image from the AWS Marketplace ECR registry.

Helm Chart Value Overrides
image:
  registry: "709825985650.dkr.ecr.us-east-1.amazonaws.com"
  repository: "inductive-automation/ignition-cloud-edition"
tip

Stuck in ImagePullBackoff? Make sure you've subscribed to the "Ignition Cloud Edition (Container)" product in your AWS account. This is required to be able to pull the image from the AWS Marketplace ECR registry.

Licensing​

For Ignition Cloud Edition to license correctly, you'll need to allow Ignition to submit usage records to the AWS Marketplace Metering API. This can be done by associating an IAM role with the service account that Ignition will use.

Creating an Ignition Service Account​

We'll use IAM Roles for Service Accounts (IRSA) to associate an IAM role with the Ignition service account. The IAM role will need to have the AWSMarketplaceMeteringFullAccess policy attached to it.

warning

At this time, Pod Identity Association cannot be used with AWS Marketplace Metering submissions, please use IRSA as described below.

See the Creating an Ignition Service account on EKS using IRSA guide for detailed configuration steps. Use POLICY_ARN=arn:aws:iam::aws:policy/AWSMarketplaceMeteringFullAccess when creating the service account to ensure the correct policy is attached to the IAM role.

Service Account in Helm Chart Values​

We don't want the Helm Chart to attempt to create the service account on our behalf since we're managing it externally. Use the following value overrides to specify the service account name and disable automatic creation:

Helm Chart Value Overrides
serviceAccount:
  create: false
  # set the name to be the IGNITION_SERVICE_ACCOUNT_NAME used above
  name: "ignition"

Deploying Ignition Cloud Edition​

Let's review the requirements for deploying Ignition Cloud Edition on AWS EKS:

  • IAM Roles for Service Accounts (IRSA) is configured in your cluster and you've created an IAM role and attached policy as described in the Licensing section above.
  • You've got a namespace and service account with an eks.amazonaws.com/role-arn annotation referencing the ARN of the IAM role you created for AWS Marketplace Metering access.
  • You've configured the image overrides in your values file to pull the Ignition Cloud Edition image from the AWS Marketplace ECR registry.
  • You've configured the service account overrides in your values file to reference the service account you created for Ignition.

At this point, you're now ready to deploy Ignition Cloud Edition on AWS EKS using the Ignition Helm Chart!