AWS / Amazon EKS
DevOpsGenie is purpose-built for Amazon Elastic Kubernetes Service (EKS). This section covers everything you need to deploy, configure, and operate production-grade Kubernetes workloads on AWS — from VPC architecture to IAM, Karpenter, and multi-account federation.
Why EKS
Amazon EKS manages the Kubernetes control plane — API server, etcd, scheduler — across three availability zones with automatic upgrades and patching. You own the data plane: the EC2 node groups or Fargate profiles where your workloads run.
DevOpsGenie builds on top of EKS with:
- Opinionated Terraform modules for VPC, EKS, IAM, and add-ons
- Karpenter for node lifecycle and bin-packing autoscaling
- IRSA for least-privilege, pod-level AWS API access
- AWS Load Balancer Controller for ALB/NLB from Kubernetes Ingress/Service objects
AWS-Specific Architecture
AWS Account
├── VPC (3 AZs)
│ ├── Public Subnets → NAT Gateways, ALBs
│ ├── Private Subnets → EKS nodes, pods (VPC-CNI)
│ └── Isolated Subnets → RDS, ElastiCache (optional)
│
├── EKS Cluster
│ ├── Managed Control Plane (AWS-managed, HA across 3 AZs)
│ ├── System Node Group → Platform add-ons (m6i.xlarge)
│ └── Workload Node Group → Karpenter-managed (multi-instance-type)
│
├── Supporting Services
│ ├── ECR → Private container registry
│ ├── Secrets Manager → Runtime secrets via External Secrets Operator
│ ├── ACM → TLS certificates
│ ├── Route 53 → DNS management
│ └── CloudWatch Logs → Control plane log destination
Supported AWS Regions
DevOpsGenie is tested in all AWS regions that support EKS. Recommended regions for production:
| Region | Code | Notes |
|---|---|---|
| US East (N. Virginia) | us-east-1 | Largest, all services available |
| US West (Oregon) | us-west-2 | Full feature parity |
| EU West (Ireland) | eu-west-1 | GDPR-friendly |
| EU Central (Frankfurt) | eu-central-1 | Data residency in Germany |
| AP Southeast (Singapore) | ap-southeast-1 | APAC primary |
Supported EKS Versions
DevOpsGenie supports the three most recent EKS minor versions. Support for each new version is added within 30 days of EKS GA.
| Kubernetes Version | EKS Support Status |
|---|---|
| 1.30 | ✅ Supported |
| 1.29 | ✅ Supported |
| 1.28 | ✅ Supported |
| 1.27 | ⚠️ Extended support only |
Run devopsgenie cluster upgrade --dry-run to preview compatibility before upgrading.
Prerequisites
- AWS CLI v2 configured with sufficient permissions
- Terraform ≥ 1.6
- kubectl ≥ 1.27
- Helm ≥ 3.12
- An AWS account with a quota increase request approved for
m6iinstances (recommended)
Next Steps
- EKS Cluster Setup — provision your first cluster with Terraform
- IAM & IRSA — configure least-privilege access for every workload
- Karpenter Autoscaling — replace Cluster Autoscaler with Karpenter