Technologies
Explanation 12
- Updated 2026-05-15
Tailscale
Overview Tailscale is a modern mesh VPN solution built on WireGuard that Skyscrapers uses to provide secure access to customer Kubernetes clusters and AWS VPCs. While Tailscale is often positioned as a mesh VPN with peer-to-peer connections, Skyscrapers …
- Updated 2026-05-12
Dynamic, whitelabel-style Ingress to your application
If your application allows for end-customers to use their custom domain, we’ve offered Caddy to provide on-demand SSL certificates for a while. However with our Kubernetes reference solution there is a more native and scalable solution through the …
- Updated 2026-05-12
Explanation of Kubernetes
Walk-through of the Skyscrapers’ Kubernetes cluster Here you’ll find user-level documentation of our Kubernetes reference solution. You’ll learn how to access the cluster, how to deploy applications and services and how to monitor them. …
- Updated 2026-05-12
Grant Skyscrapers access to your AWS account
In order to provide Skyscrapers with access to your AWS account(s), you can use this documentation to configure your accounts with the necessary permissions and trust relationship towards Skyscrapers. This will allow Skyscrapers engineers to assume these …
- Updated 2026-05-12
Helm
Overview Helm is a package manager for Kubernetes, providing a simple and efficient way to manage Kubernetes applications. It allows users to define, install, and upgrade even the most complex Kubernetes applications. Helm uses a packaging format called …
- Updated 2026-05-12
Karpenter
Introduction Karpenter is an open-source cluster autoscaler that automatically provisions new nodes in response to unschedulable pods. Karpenter evaluates the aggregate resource requirements of the pending pods and chooses the optimal instance type to run …
How-to guides 15
- Updated 2026-06-02
How-to use the ECR Pull-Through Cache
This guide covers how to enable the ECR Pull-Through Cache for your clusters. The default tier (quay.io and registry.k8s.io) is fully managed by Skyscrapers; there is nothing for you to do. The opt-in tiers (docker.io, ghcr.io, registry.gitlab.com) require …
- Updated 2026-05-28
Wireguard VPN
Introduction This page describes how to use the Wireguard VPN add-on to securely connect to your Kubernetes cluster and AWS VPC. While we recommend using Tailscale as full-fledged solution, we also provide Wireguard as a simple, cheaper and self-managed …
- Updated 2026-05-15
Tailscale Setup
Overview This guide explains how to set up Tailscale integration with Skyscrapers-managed EKS clusters. Tailscale provides secure VPN connectivity to your Kubernetes clusters, enabling private network access to cluster resources and advertised routes. The …
- Updated 2026-05-12
AWS Load Balancer Controller
Introduction This page describes how to use the AWS Load Balancer Controller as Ingress Controller in your Kubernetes cluster. The ALB controller provisions AWS Application Load Balancers for your Kubernetes Ingress resources. Pre-requisites First …
- Updated 2026-05-12
Cert-Manager
Let’s Encrypt certificates SSL certificates can be automatically fetched and setup for applications deployed on the Kubernetes cluster via cert-manager. We deploy a letsencrypt-prod ClusterIssuer by default, which uses dns01 validation via Route 53. …
- Updated 2026-05-12
Concourse usage
Login with fly fly can be used to access multiple Concourse servers, to accomplish that it has the concept of targets. Each target represents a different Concourse setup, and you need to provide the alias of such target to all the fly commands with the -t …
Tutorials 1
- Updated 2026-05-12
What is Kubernetes?
This page is mainly created for Skyscrapers customers that are currently being onboarded to the platform. It assumes no prior knowledge for Kubernetes. It should technically be a much lighter and digestible version of the kubernetes documentation, with our …
Reference 1
- Updated 2026-05-12
Tailscale Deployment
Add under spec.tailscale in the cluster definition: spec: tailscale: enabled: true oauth_client_id: your-oauth-client-id oauth_client_secret_payload: kms-encrypted-secret replicas: 2 extra_routes: - "192.168.248.0/24" cpu_requests: "100m" …