Eks on CuraDevOps

Amazon EKS supports up to 10 external OIDC identity providers per cluster

Tue, 25 Aug 2026 11:19:32 +0000

Platform/SRE — Plan: This GA feature removes the need for an identity broker when authenticating multiple user populations (employees, contractors, CI/CD systems) to EKS clusters. Evaluate whether your clusters could simplify their auth architecture by replacing any intermediary OIDC broker with direct per-provider associations.
CI/CD — Skip
Leader — Skip

Fri, 21 Aug 2026 11:18:28 +0000

Platform/SRE — Plan: EKS clusters created in 2018 have 10-year CAs now approaching expiry (~2028); audit cluster creation dates and schedule CA rotation this quarter — worker nodes must be replaced and external API clients updated to trust the successor CA before activation, which AWS will not do automatically.
CI/CD — Learn: Pipelines that connect directly to EKS API servers (kubectl, Helm deploys, kubeconfig-based auth) qualify as external clients under the shared-responsibility model and would need CA trust updates during any rotation; no immediate action required but worth noting when rotation is scheduled by Platform.
Leader — Skip

Thu, 13 Aug 2026 11:41:08 +0000

Platform/SRE — Plan: New GA capability lets EKS cluster admins tune scheduler, controller manager, and API server parameters — e.g. switching to MostAllocated bin-packing to reduce node count. Review the full parameter list and evaluate whether tuning fits your cluster’s resource-utilization or scaling goals this quarter.
CI/CD — Skip
Leader — Skip

Wed, 29 Jul 2026 12:56:53 +0000

Platform/SRE — Plan: For EKS clusters in air-gapped or strict-egress VPCs, this GA capability enables IRSA token validation without internet access — evaluate adding the com.amazonaws..oidc-eks VPC interface endpoint to your network baseline this quarter.
CI/CD — Skip
Leader — Skip

Wed, 29 Jul 2026 12:56:53 +0000

Platform/SRE — Learn: EKS Provisioned Control Plane clusters now get significantly faster HPA-driven scaling with no configuration changes required — worth knowing if you run large clusters with many HPA objects, but no action needed.
CI/CD — Skip
Leader — Skip

Thu, 23 Jul 2026 12:19:57 +0000

Platform/SRE — Plan: New GA capability that changes how you’d architect EKS node pools for GPU/HPC workloads — evaluate EFA-only interfaces (no IP consumption) and placement group strategies for distributed training or high-availability production services this quarter.
CI/CD — Skip
Leader — Skip