eks-deployment

Deploy Spring Boot banking workloads to AWS EKS with Helm and eksctl.

Updated Feb 25, 2026
One-click install
npx skills add https://github.com/zenobiuszeto/banking-strawman-capabilities --skill eks-deployment
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: eks-deployment
Source: https://github.com/zenobiuszeto/banking-strawman-capabilities/tree/main/skills/eks-deployment
Command: npx skills add https://github.com/zenobiuszeto/banking-strawman-capabilities --skill eks-deployment

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deploying a cloud-native, Spring Boot banking platform to AWS EKS requires coordinating cluster bootstrap, IAM/IRSA, secrets, ingress/tls, autoscaling, storage, and safe Helm rollouts; this Skill encapsulates those operational patterns to minimize downtime and security risk during production deployments.

Core Features & Use Cases

  • Cluster bootstrap: eksctl cluster configuration for managed node groups, addons (vpc-cni, coredns, kube-proxy), and CloudWatch logging to create a resilient multi-AZ cluster.
  • Pod-level IAM & secret management: IRSA setup and External Secrets Operator integration with AWS Secrets Manager for least-privilege access and automated secret sync.
  • Ingress, TLS & DNS: AWS Load Balancer Controller (ALB) with ACM certificates and ExternalDNS annotations for automated Route53 records and WAF integration.
  • Resilience & autoscaling: Helm-driven deployments with HPA, PodDisruptionBudget, Cluster Autoscaler / Karpenter guidance, topology spread and taints/labels for AZ spreading and workload isolation.
  • CI/CD & safe rollouts: Helm values production overrides, atomic upgrades, rollout verification, and a deploy script for GitHub Actions to enforce health checks and automatic rollback.
  • Use Case: Safely deploy and operate the banking platform in production with zero-downtime upgrades, secure secret access, and automated TLS and DNS management.

Quick Start

Deploy the banking platform to a production EKS cluster by applying the provided eksctl cluster.yaml, installing External Secrets and the AWS Load Balancer Controller, and performing a Helm upgrade --install of the helm/banking-platform chart with the production values file.

Frequently Asked Questions about eks-deployment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy a Spring Boot application to EKS with zero-downtime Helm rollouts?

You can achieve zero-downtime EKS deployment by using Helm atomic upgrades with rollout verification and health checks, ensuring automatic rollback if production upgrades fail.

How does IRSA work with External Secrets Operator for Kubernetes pod-level IAM?

IRSA works with External Secrets Operator by granting least-privilege pod-level IAM access to AWS Secrets Manager, automating secure secret synchronization directly into your EKS workloads.

What is the best way to configure ALB ingress with ACM certificates for EKS?

Configuring ALB ingress with ACM certificates for EKS involves using the AWS Load Balancer Controller with ExternalDNS annotations to automate Route53 records and WAF integration for TLS.

Can I use eksctl to bootstrap a multi-AZ EKS cluster with managed node groups and addons?

Yes, you can use eksctl cluster configuration to bootstrap a resilient multi-AZ EKS cluster with managed node groups, essential addons like vpc-cni, and CloudWatch logging.

How do I set up HPA and PodDisruptionBudget for EKS autoscaling?

Setting up HPA and PodDisruptionBudget for EKS autoscaling involves Helm-driven deployments combined with topology spread and taints to ensure AZ spreading and workload isolation.

Does EKS deployment support GitHub Actions CI/CD pipelines?

Yes, EKS deployment supports GitHub Actions CI/CD by using a deploy script to enforce health checks, atomic Helm upgrades, and automatic rollback during the pipeline execution.