#how-to
How-to guides 26
- Updated 2026-10-29
OpenVPN
Note The OpenVPN component in the SKsycrapers platform is considered deprecated and will be removed during the course of 2025. We recommend using Tailscale or Wireguard instead for secure VPN connectivity to your environment: Refer to our Tailscale setup …
- Updated 2026-10-29
Tailscale ACL File
Structure The policy file uses HuJSON format (JSON with comments) and includes several key sections: 1. Groups Define groups of users for easier access management: { "groups": { "group:devops": [ "alice@example.com", …
- Updated 2026-10-29
Tailscale Capabilities
Running on the Tailscale Kubernetes Operator gives you more than subnet routing to your VPC. This page covers the extra capabilities you can use and how to turn them on. All of these are opt-in per cluster. Skyscrapers enables the building blocks …
- Updated 2026-10-29
Tailscale Setup
Overview This guide explains how to set up Tailscale integration with Skyscrapers-managed EKS clusters. Tailscale provides secure VPN connectivity to your Kubernetes clusters, enabling private network access to cluster resources and advertised routes. The …
- Updated 2026-10-29
Connect your AWS accounts to Aikido
Aikido can scan your AWS accounts for misconfigurations: public buckets, security groups open to the world, unencrypted resources, risky IAM policies and more. To do that, Aikido’s scanner signs in to each account through an IAM role that trusts …
- Updated 2026-10-29
Connect your cluster to Aikido
Aikido can scan your Kubernetes cluster for misconfigurations and, optionally, the container images it runs for vulnerabilities. To do that, the Aikido Kubernetes agent runs in your cluster and reports to your Aikido workspace. We install, configure and …
- Updated 2026-10-29
Argo Workflows
Argo Workflows runs multi-step jobs on your cluster: data pipelines, batch processing, scheduled jobs, anything you can describe as a series of containers. We run Argo for you, one installation per cluster, and set up a namespace per team with access and …
- Updated 2026-10-27
Cluster Portal
The Cluster Portal is a web application that runs on your own cluster. It lets you change your cluster definition through a form instead of editing YAML by hand, and it shows what the platform does for you: what runs on the cluster, the platform updates …
- Updated 2026-10-27
General coding guidelines
Basically, you should always adhere to a language’s specific coding practices: Concourse Docker Helm Terragrunt / OpenTofu We also specify some guidelines around using Git However, we also define a set of standard practices, described below. Although …
- Updated 2026-10-21
Grafana Cloud
If you use a Grafana Cloud stack, your cluster can forward your applications’ OpenTelemetry traces and metrics to it. Your applications send to an endpoint inside the cluster, and the cluster forwards to Grafana Cloud. The Grafana Cloud tokens stay …
- Updated 2026-10-19
Bitbucket Pipelines runners
You can run self-hosted Bitbucket Pipelines runners on your Kubernetes cluster, scaled on demand by Atlassian’s runners-autoscaler. The autoscaler registers runners in your Bitbucket workspace or repository, starts a runner Job on the cluster for …
- Updated 2026-10-19
GitHub Actions runner controller
You can dynamically deploy Github self-hosted runners on the Kubernetes clusters using the gha-runner-scale-set-controller. The controller allows developers to define either organization or repository runners, and it automatically handles the registration …