Technologies
Explanation 14
- Updated 2026-09-01
Karpenter
Introduction Karpenter is an open-source cluster autoscaler that automatically provisions new nodes in response to unschedulable pods. Karpenter evaluates the aggregate resource requirements of the pending pods and chooses the optimal instance type to run …
- Updated 2026-09-01
Monitoring
Overview Be default, we use a Prometheus, Alertmanager and Grafana stack for a complete monitoring setup of both our clusters and applications running on them. We make use of the CoreOS operator principle: by deploying prometheus-operator we define new …
- Updated 2026-09-01
VPC CNI
Network Policies VPC CNI VPC CNI Overview The VPC CNI (Container Network Interface) plugin is the default networking plugin for Amazon EKS clusters. The CNI plugin allows Kubernetes Pods to have the same IP address as they do on the VPC network. More …
- Updated 2026-07-28
Tailscale
Overview Tailscale is a modern mesh VPN solution built on WireGuard that Skyscrapers uses to provide secure access to customer Kubernetes clusters and AWS VPCs. While Tailscale is often positioned as a mesh VPN with peer-to-peer connections, Skyscrapers …
- Updated 2026-07-16
Grant Skyscrapers access to your AWS account
In order to provide Skyscrapers with access to your AWS account(s), you can use this documentation to configure your accounts with the necessary permissions and trust relationship towards Skyscrapers. This will allow Skyscrapers engineers to assume these …
- Updated 2026-07-10
MongoDB Atlas
We standardise on MongoDB Atlas service four our customer’s MongoDB clusters. Atlas is a fully-managed service to deploy, manage and monitor MongoDB clusters. It’s multi-cloud, so you can choose from various cloud providers to deploy your …
How-to guides 17
- Updated 2026-09-07
Use AWS Secrets Manager secrets in Kubernetes
It is possible to automatically mount and use secrets from AWS Secrets Manager in EKS workloads. This documentation page will show you how. Note that this feature is optional for our EKS platform, and it’s disabled by default. If you’d like to …
- Updated 2026-09-04
Terragrunt
Welcome! If you’re here, it means you’re interested in contributing to our infrastructure as code. We encourage and support your involvement. Should you have any questions or need further clarification, please don’t hesitate to reach out …
- Updated 2026-09-01
How-to use the ECR Pull-Through Cache
This guide covers how to enable the ECR Pull-Through Cache for your clusters. The default tier (quay.io and registry.k8s.io) is fully managed by Skyscrapers; there is nothing for you to do. The opt-in tiers (docker.io, ghcr.io, registry.gitlab.com) require …
- Updated 2026-09-01
Kube-green Setup
Introduction This guide shows how to enable kube-green on your cluster and configure sleep schedules to automatically scale down workloads during off-hours. For background on what kube-green is and how it works, see the explanation page. Enabling …
- Updated 2026-09-01
Tailscale ACL File
Structure The policy file uses HuJSON format (JSON with comments) and includes several key sections: 1. Groups Define groups of users for easier access management: { "groups": { "group:devops": [ "alice@example.com", …
- Updated 2026-09-01
Tailscale Capabilities
Running on the Tailscale Kubernetes Operator gives you more than subnet routing to your VPC. This page covers the extra capabilities you can use and how to turn them on. All of these are opt-in per cluster. Skyscrapers enables the building blocks …
Tutorials 1
- Updated 2026-05-12
What is Kubernetes?
This page is mainly created for Skyscrapers customers that are currently being onboarded to the platform. It assumes no prior knowledge for Kubernetes. It should technically be a much lighter and digestible version of the kubernetes documentation, with our …
Reference 2
- Updated 2026-09-01
Tailscale Deployment
Add under spec.vpn.tailscale in the cluster definition: spec: vpn: tailscale: enabled: true oauthClientID: your-oauth-client-id oauthClientSecretPayload: kms-encrypted-secret replicas: 2 extraRoutes: - "192.168.248.0/24" resources: requests: cpu: …
- Updated 2026-07-10
Service Definition: Tailscale Add-on
DevOps-as-a-Service supports two VPN options for reaching your Kubernetes clusters and AWS VPC, and you choose the one that fits your team: WireGuard is included in DOaaS as a basic, cost-conscious option with basic functionality. The Tailscale Add-on …