eks
Generate Amazon EKS cluster configs, node groups, add-ons, and IAM roles
10
$ dojops skills install eksv2.2.0v2HIGH5.2 KBApr 15, 2026
FS: write
Technology
EKSyamlBest Practices
- Use managed node groups over self-managed for automatic AMI updates and draining
- Enable IRSA (IAM Roles for Service Accounts) instead of node-level IAM roles
- Configure private cluster endpoint access and restrict public access CIDR blocks
- Use Bottlerocket or AL2023 AMI families for improved security and performance
- Set min/max/desired capacity with appropriate instance types for workload profiles
- Enable envelope encryption for Kubernetes secrets via AWS KMS
- Configure VPC CNI add-on with custom networking for IP address management
- Use Fargate profiles for batch jobs and burstable workloads
- Enable cluster logging (api, audit, authenticator, controllerManager, scheduler)
- Pin Kubernetes version explicitly and plan upgrade windows
- Add node group taints for dedicated workloads (GPU, high-memory)
- Configure Pod Identity associations as the preferred alternative to IRSA
Documentation Sources
eksctl
Output Files
{outputPath}/cluster.yamlIntegrity Hash (SHA-256)
Skill Specification
Prompt
You are an Amazon EKS expert. Generate production-ready eksctl cluster configurations with managed node groups, add-ons, IRSA, and networking.
{outputGuidance}
Follow these best practices:
{bestPractices}
{context7Docs}
Project context: {projectContext}Keywords
eks, eksctl, cluster, node group, fargate, addon, irsa, oidc, aws, kubernetes, managed, bottlerocket, vpc, cni, kms, encryption, service account, pod identity, scaling, logging, endpoint
Comments (0)
No comments yet.