eks

The AWS EKS skill provides deep operational expertise for managing Amazon Elastic Kubernetes Service. Designed for cloud engineers and DevOps practitioners, this skill covers the full lifecycle of Kubernetes on AWS, from initial cluster provisioning to complex workload configuration. It assists in navigating the nuances of control plane management, various node group types including Managed, Self-managed, and Fargate, and the intricate security requirements of IAM Roles for Service Accounts (IRSA). Whether you are setting up networking with VPC CNI, managing add-ons like CoreDNS, or deploying containerized applications, this tool provides actionable patterns and command-line references.

• Full cluster lifecycle management including AWS CLI and eksctl implementation strategies.

• Expert guidance on configuring IRSA (IAM Roles for Service Accounts) for granular pod-level AWS permissions.

• Configuration and optimization of Managed Node Groups, Fargate profiles, and self-managed EC2 worker node architectures.

• Detailed patterns for installing and upgrading cluster add-ons such as VPC CNI, EBS CSI, and kube-proxy.

• Guidance on VPC networking, subnet tagging for load balancer integration, and private endpoint security.

• Streamlined deployment workflows for Kubernetes manifests, including service accounts, deployments, and AWS service integrations.

• Input expectations include cluster names, VPC subnets, IAM role ARNs, and Kubernetes namespace identifiers.

• Outputs typically consist of structured AWS CLI commands, eksctl configuration snippets, and Kubernetes manifest templates.

• Constraints include maintaining adherence to AWS-managed control plane limitations and regional availability.

• Users should provide specific intent, such as 'create a private cluster', 'configure IRSA for S3 access', or 'troubleshoot node group scaling', to receive the most accurate configuration context.

• Designed for use with Claude Code to automate repetitive IaC tasks, reducing manual errors in Kubernetes cluster maintenance and ensuring security best practices are followed.