Technologies
Explanation 13
- Updated 2026-11-02
Service Mesh
Istio We use Istio as service mesh. We offer this as an optional feature, so let us know if you want to enable it. You can check if Istio is installed in your cluster with the following command: kubectl get pods -n istio-system We also deploy Kiali, …
- Updated 2026-10-29
Tailscale Data and Logging
Overview A common question when adopting Tailscale is: what does Tailscale itself see? This page summarizes what stays private, what metadata the Tailscale coordination server stores, and what is logged. It is based on Tailscale’s own documentation: …
- Updated 2026-09-01
Karpenter
Introduction Karpenter is an open-source cluster autoscaler that automatically provisions new nodes in response to unschedulable pods. Karpenter evaluates the aggregate resource requirements of the pending pods and chooses the optimal instance type to run …
- Updated 2026-09-01
Monitoring
Overview Be default, we use a Prometheus, Alertmanager and Grafana stack for a complete monitoring setup of both our clusters and applications running on them. We make use of the CoreOS operator principle: by deploying prometheus-operator we define new …
- Updated 2026-09-01
VPC CNI
Network Policies VPC CNI VPC CNI Overview The VPC CNI (Container Network Interface) plugin is the default networking plugin for Amazon EKS clusters. The CNI plugin allows Kubernetes Pods to have the same IP address as they do on the VPC network. More …
- Updated 2026-07-16
Grant Skyscrapers access to your AWS account
In order to provide Skyscrapers with access to your AWS account(s), you can use this documentation to configure your accounts with the necessary permissions and trust relationship towards Skyscrapers. This will allow Skyscrapers engineers to assume these …
How-to guides 24
- Updated 2026-10-29
OpenVPN
Note The OpenVPN component in the SKsycrapers platform is considered deprecated and will be removed during the course of 2025. We recommend using Tailscale or Wireguard instead for secure VPN connectivity to your environment: Refer to our Tailscale setup …
- Updated 2026-10-29
Tailscale ACL File
Structure The policy file uses HuJSON format (JSON with comments) and includes several key sections: 1. Groups Define groups of users for easier access management: { "groups": { "group:devops": [ "alice@example.com", …
- Updated 2026-10-29
Tailscale Capabilities
Running on the Tailscale Kubernetes Operator gives you more than subnet routing to your VPC. This page covers the extra capabilities you can use and how to turn them on. All of these are opt-in per cluster. Skyscrapers enables the building blocks …
- Updated 2026-10-29
Tailscale Setup
Overview This guide explains how to set up Tailscale integration with Skyscrapers-managed EKS clusters. Tailscale provides secure VPN connectivity to your Kubernetes clusters, enabling private network access to cluster resources and advertised routes. The …
- Updated 2026-10-29
Connect your AWS accounts to Aikido
Aikido can scan your AWS accounts for misconfigurations: public buckets, security groups open to the world, unencrypted resources, risky IAM policies and more. To do that, Aikido’s scanner signs in to each account through an IAM role that trusts …
- Updated 2026-10-29
Connect your cluster to Aikido
Aikido can scan your Kubernetes cluster for misconfigurations and, optionally, the container images it runs for vulnerabilities. To do that, the Aikido Kubernetes agent runs in your cluster and reports to your Aikido workspace. We install, configure and …
Tutorials 1
- Updated 2026-05-12
What is Kubernetes?
This page is mainly created for Skyscrapers customers that are currently being onboarded to the platform. It assumes no prior knowledge for Kubernetes. It should technically be a much lighter and digestible version of the kubernetes documentation, with our …
Reference 2
- Updated 2026-10-29
Service Definition: Tailscale Add-on
DevOps-as-a-Service supports two VPN options for reaching your Kubernetes clusters and AWS VPC, and you choose the one that fits your team: WireGuard is included in DOaaS as a basic, cost-conscious option with basic functionality. The Tailscale Add-on …
- Updated 2026-10-29
Tailscale Deployment
Add under spec.vpn.tailscale in the cluster definition: spec: vpn: tailscale: enabled: true oauthClientID: your-oauth-client-id oauthClientSecretPayload: kms-encrypted-secret replicas: 2 extraRoutes: - "192.168.248.0/24" resources: requests: cpu: …