eks

The AWS EKS skill provides specialized cloud engineering support for managing Amazon Elastic Kubernetes Service. It is designed for DevOps engineers, cloud architects, and platform developers who need to automate the full lifecycle of Kubernetes clusters on AWS. The skill delivers deep architectural knowledge, command-line interface patterns, and best practices for balancing security with operational efficiency, effectively acting as an expert assistant for complex container orchestration tasks.

• Full cluster lifecycle management including provisioning via AWS CLI and eksctl with support for public, private, and fully private VPC configurations.

• Configuration expertise for Managed Node Groups, Self-managed nodes, and Fargate serverless compute to optimize cluster cost and performance.

• Implementation guidance for IAM Roles for Service Accounts (IRSA) to enforce least-privilege security between Kubernetes pods and AWS services.

• Automated deployment patterns for operational add-ons such as CoreDNS, VPC CNI, kube-proxy, and the EBS CSI driver.

• Infrastructure-as-Code (IaC) integration and workload deployment strategies for Kubernetes manifests, including service exposure via Network Load Balancers (NLB).

• Use this skill to initialize clusters, attach policies to service accounts, or debug connectivity issues between your cluster and other AWS services.

• Inputs typically involve cluster name, subnet identifiers, instance types, and security requirements; outputs provide syntactically correct shell commands, Kubernetes YAML templates, and troubleshooting steps.

• Practical constraints include monitoring API server endpoint access, VPC subnet tagging requirements (e.g., for load balancers), and specific versioning compatibility for add-ons.

• The skill helps resolve common 'Access Denied' errors, OIDC provider configuration issues, and networking bottlenecks within the VPC CNI plugin.

• Ideal for scaling containerized microservices and managing hybrid or multi-region EKS environments with standardized, production-ready configurations.