patch-eks-system-tolerations

Patches system pods to tolerate the SUNK lock taint in EKS clusters.

7|Updated Jul 9, 2026
One-click install
npx skills add https://github.com/coreweave/sunk-anywhere --skill patch-eks-system-tolerations
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: patch-eks-system-tolerations
Source: https://github.com/coreweave/sunk-anywhere/tree/main/skills/eks/patch-eks-system-tolerations
Command: npx skills add https://github.com/coreweave/sunk-anywhere --skill patch-eks-system-tolerations

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill addresses issues caused by the non-configurable NoExecute taint applied to nodes in EKS when running SUNK compute pods, which can lead to eviction of critical system components.

Core Features & Use Cases

  • Taint Tolerance Patching: Modifies DaemonSets and infrastructure pods to survive the SUNK lock taint.
  • Post-Deployment: Run after initial SUNK deployment or EKS upgrades to maintain pod stability.
  • Fixing Network and Storage Issues: Corrects pod networking and EBS volume attachment failures.

Quick Start

Execute the 'patch-eks-tolerations.sh' script to update tolerations on EKS system pods.

Frequently Asked Questions about patch-eks-system-tolerations

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does EKS evict system pods like aws-node and kube-proxy after SUNK deployment?

EKS evicts system pods because SUNK applies a non-configurable NoExecute taint to nodes. Without matching tolerations, critical components like aws-node and kube-proxy are evicted, causing network and storage failures.

How do I add tolerations to EKS system pods for a SUNK lock taint?

You can add tolerations to EKS system pods by executing the patch-eks-tolerations.sh script. This modifies DaemonSets and infrastructure pods such as ebs-csi-node and cert-manager to tolerate the SUNK lock taint and prevent eviction.

When should I patch EKS system pod tolerations for SUNK compute workloads?

Patch EKS system pod tolerations immediately after initial SUNK deployment or following EKS upgrades. This ensures critical system components maintain pod stability and continue operating despite the SUNK lock taint.

Can I configure the NoExecute taint on EKS nodes running SUNK compute pods?

The NoExecute taint applied by SUNK on EKS nodes is non-configurable. To keep system pods running, you must patch the pods with tolerations rather than attempting to remove or modify the taint itself.

Does patching taint tolerations fix EBS volume attachment failures in EKS?

Yes, patching taint tolerations fixes EBS volume attachment failures by ensuring the ebs-csi-node DaemonSet tolerates the SUNK lock taint. This prevents eviction and maintains storage connectivity for compute workloads.