AWS refresh, added IRSA section

[darkn3rd]

Description

This is an update of AWS that has not been refreshed since Kubernetes 1.13 (before 2019). This adds IRSA section and brings content with verified steps on par with similar guides for AKS and GKE. This guide is oriented around EKS, as 95% of clusters are likely on this platform, the managed K8S solution for AWS.

Some of the changes include:

• orient documentation around EKS clusters, with eksctl (officially supported by AWS) as method to bring up a reference cluster for docs and testing.
• added snippets to create cluster with eksctl (officially support) for consistency with GKE guide.
• put kiam (project no longer supported) and kube2iam as a note under IRSA.
• folded "Create IAM Role" and "EC2 Instance Role" into sections under "Permissions to modify DNS zone". This makes the guide consistent to Azure and GKE (in PR) guides.
• use color syntax highlighting - change code blocks from console to shell with output separated in a separate code block. for more readability.
• remove fsGroup leads to errors after Kubernetes 1.13.
• update externaldns version referenced from v0.7.6 to v0.11.0
• place ingress demo after service demo, as this made more sense and is consistent with other tutorials
• updated ingress/service demos/samples with fixes, added verification steps, explanations
• updated steps, explanations, throughout guide

Not changed:

• update links to code references to use versioned, as master is no longer valid line number at time of release.

Checklist

• Unit tests updated
• End user documentation updated

[darkn3rd]

Anyone? I ran this update tutorial on new account using free tier.

@njuettner
@seanmalloy

[darkn3rd]

Any chance to look at this? I verified the steps on a new account using free tier as much as possible for a short lived EKS cluster. This bring AWS (EKS or other + Route53) close to GKE (Google) and AKS (Azure) documentation, and especially important is IRSA update, which is the only secure path recommended for AWS.

@njuettner
@seanmalloy

[seanmalloy]

I'll try to review soon.

/kind documentation

[seanmalloy]

/lgtm
/assign @njuettner @Raffo

[njuettner]

/lgtm

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: darkn3rd, njuettner

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [njuettner]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment