What connect sets up on EKS
| What | What it is for |
|---|---|
The Coral agent, its webhook and a node daemon | They run inside your cluster. They read usage, size new pods as they start and make the changes your settings allow. |
An IAM role, bound with EKS Pod Identity | It lets Coral terminate instances only in this cluster’s Auto Scaling groups. If a group’s minimum size is all that keeps an emptied instance, Coral may reduce that minimum. |
The EKS Pod Identity Agent add-on, if it is missing | It gives the agent temporary credentials for that role, with no stored key. |
Karpenter, only if the cluster has no autoscaler | It launches EC2 instances when pods are waiting, and terminates spare ones itself. Connect also creates what Karpenter needs in AWS, such as its IAM roles, an SQS queue and discovery tags. |
- If connect installs Karpenter on a cluster that uses only aws-auth, it switches authentication to API_AND_CONFIG_MAP. That can’t be undone.
- With
--dry-run, zoorikctl prints every AWS command and every object it would add to the cluster, and changes nothing. - If you decline the cloud changes, the agent still installs, and pools an autoscaler runs are optimized as usual.
