Real-world EKS
Cheat sheet
61 / 69

The aws, eksctl and kubectl commands you will use weekly on EKS.

cluster and access
aws eks list-clusters
aws eks describe-cluster --name N
aws eks update-kubeconfig --name N
aws eks create-access-entry \
  --cluster-name N --principal-arn ARN
aws eks associate-access-policy ...
aws eks update-cluster-config \
  --name N --logging '{...}'
aws eks list-insights --cluster-name N
eksctl get cluster
nodes and add-ons
aws eks list-nodegroups --cluster-name N
aws eks update-nodegroup-version ...
aws eks describe-addon-versions \
  --kubernetes-version V
aws eks update-addon --cluster-name N \
  --addon-name A --resolve-conflicts PRESERVE
aws eks describe-addon ... --query addon.health
kubectl get nodepools,nodeclaims
kubectl logs -n kube-system \
  -l app.kubernetes.io/name=karpenter
identity and network
aws eks create-pod-identity-association ...
aws eks list-pod-identity-associations \
  --cluster-name N
kubectl get sa,securitygrouppolicy -A
kubectl get ingress,gateway,httproute -A
kubectl -n kube-system get ds aws-node
kubectl describe node X | grep -i pods
aws ec2 describe-subnets \
  --query 'Subnets[].AvailableIpAddressCount'

Prefer IaC for changes

Use the CLI to inspect and for emergencies. Make changes through Terraform so they are reviewed and repeatable.

Flags evolve

Check aws eks help for your CLI version; subcommands and options change.