{"id":49024,"date":"2025-04-08T06:24:29","date_gmt":"2025-04-08T06:24:29","guid":{"rendered":"https:\/\/www.devopsschool.com\/blog\/?p=49024"},"modified":"2025-04-08T06:24:29","modified_gmt":"2025-04-08T06:24:29","slug":"aws-tutorials-aws-gateway-api-controller-setup-verification-checklist-on-eks","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/aws-tutorials-aws-gateway-api-controller-setup-verification-checklist-on-eks\/","title":{"rendered":"AWS Tutorials: AWS Gateway API Controller Setup Verification Checklist on EKS"},"content":{"rendered":"\n

\u2705 AWS Gateway API Controller Setup Verification Checklist for Kubernetes Gateway API (EKS)<\/strong><\/p>\n\n\n\n

This guide ensures a full production-ready setup for AWS Gateway API Controller integrated with Amazon VPC Lattice and Kubernetes Gateway API. It includes installation, configuration, network validation, and health check debugging.<\/p>\n\n\n\n

\n\n\n\n

\u2705 AWS Gateway API Controller Setup Verification Checklist<\/h1>\n\n\n\n
\n\n\n\n

\ud83d\udce6 A. Cluster & Core Setup<\/strong><\/h2>\n\n\n\n
Checkpoint<\/th>Command<\/th>Expected Output<\/th><\/tr><\/thead>
\u2705 EKS cluster is running<\/td>kubectl get nodes<\/code><\/td>Shows Ready nodes<\/td><\/tr>
\u2705 Correct context set<\/td>kubectl config current-context<\/code><\/td>Matches your EKS cluster<\/td><\/tr>
\u2705 Kubernetes version<\/td>kubectl version --short<\/code><\/td>Server >= 1.24<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83e\uddf1 B. Kubernetes Gateway API Installed<\/strong><\/h2>\n\n\n\n
Checkpoint<\/th>Command<\/th>Expected Output<\/th><\/tr><\/thead>
\u2705 Gateway CRDs installed<\/td>`kubectl get crds<\/td>grep gateway.networking.k8s.io`<\/td><\/tr>
\u2705 Gateway API version supported<\/td>kubectl get gatewayclass<\/code><\/td>Returns valid list<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83d\udd0c C. AWS Gateway API Controller Installed<\/strong><\/h2>\n\n\n\n
Checkpoint<\/th>Command<\/th>Expected Output<\/th><\/tr><\/thead>
\u2705 Controller pods running<\/td>kubectl get pods -n aws-application-networking-system<\/code><\/td>Pods show Running<\/code><\/td><\/tr>
\u2705 Helm chart installed<\/td>helm list -n aws-application-networking-system<\/code><\/td>Includes gateway-api-controller<\/code><\/td><\/tr>
\u2705 GatewayClass registered<\/td>kubectl get gatewayclass<\/code><\/td>Name: amazon-vpc-lattice<\/code>, Controller: application-networking.k8s.aws\/gateway-api-controller<\/code><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83d\udd10 D. IAM \/ IRSA \/ Permissions<\/strong><\/h2>\n\n\n\n
Checkpoint<\/th>Command<\/th>Expected Output<\/th><\/tr><\/thead>
\u2705 OIDC provider enabled<\/td>eksctl utils associate-iam-oidc-provider ...<\/code><\/td>OIDC provider is associated<\/td><\/tr>
\u2705 IAM policy created<\/td>`aws iam list-policies<\/td>grep VPCLatticeControllerIAMPolicy`<\/td><\/tr>
\u2705 IAM role for controller exists<\/td>kubectl describe sa -n aws-application-networking-system<\/code><\/td>Linked with correct role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83c\udf10 E. VPC Lattice-Specific Setup<\/strong><\/h2>\n\n\n\n
Checkpoint<\/th>Command<\/th>Expected Output<\/th><\/tr><\/thead>
\u2705 CRDs installed<\/td>`kubectl get crds<\/td>grep servicenetwork`<\/td><\/tr>
\u2705 ServiceNetwork<\/code> exists<\/td>kubectl get servicenetworks.application-networking.k8s.aws<\/code><\/td>my-hotel<\/code> or similar<\/td><\/tr>
\u2705 Gateway references Service Network<\/td>kubectl get servicenetworkattachments.application-networking.k8s.aws<\/code><\/td>Shows status Active<\/code><\/td><\/tr>
\u2705 Gateway programmed<\/td>kubectl get gateway <name> -o yaml<\/code><\/td>status.Programmed: True<\/code><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83e\uddea F. DNS + Public Access<\/strong><\/h2>\n\n\n\n
Checkpoint<\/th>Command<\/th>Expected Output<\/th><\/tr><\/thead>
\u2705 VPC Lattice service DNS created<\/td>aws vpc-lattice list-services<\/code> + get-service<\/code><\/td>Shows dnsEntry.domainName<\/code><\/td><\/tr>
\u2705 DNS reachable<\/td>nslookup <lattice-dns-name><\/code> or dig<\/code><\/td>Resolves to public IP<\/td><\/tr>
\u2705 TLS termination (optional)<\/td>Check if tls.mode: Terminate<\/code> & ACM cert used<\/td>HTTPS enabled<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\ud83d\udee0\ufe0f G. Readiness for Sample App<\/strong><\/h2>\n\n\n\n
Checkpoint<\/th>Notes<\/th><\/tr><\/thead>
\u2705 Deployment<\/code> and Service<\/code> manifest ready<\/td>Your app must have a Kubernetes Service<\/code> pointing to the Pod<\/code><\/td><\/tr>
\u2705 GRPCRoute<\/code> or HTTPRoute<\/code> ready<\/td>Should match the Gateway and backend service<\/td><\/tr>
\u2705 Port and Protocols correct<\/td>gRPC \u2192 port: 443<\/code>, protocol: GRPC<\/code>, TLS: Passthrough<\/code> or Terminate<\/code><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n

\u2705 You’re Now Production Ready!<\/h3>\n\n\n\n

Your AWS Gateway API Controller setup is now complete, secure, and operational with VPC Lattice. Perfect for gRPC, HTTP, and future service-to-service connectivity.<\/p>\n","protected":false},"excerpt":{"rendered":"

\u2705 AWS Gateway API Controller Setup Verification Checklist for Kubernetes Gateway API (EKS) This guide ensures a full production-ready setup for AWS Gateway API Controller integrated with Amazon VPC Lattice… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[2],"tags":[],"class_list":["post-49024","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/49024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=49024"}],"version-history":[{"count":1,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/49024\/revisions"}],"predecessor-version":[{"id":49025,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/49024\/revisions\/49025"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=49024"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=49024"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=49024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}