EKS operations

Category	✅ Supported
Clusters	29
Helpers	1
Nodegroups	6
Fargate	4
Tags	3
Addons	7

Operation	Status	Notes	AWS Docs
CreateCluster	✅ Supported	Stores cluster metadata including roleArn, version, resourcesVpcConfig, kubernetesNetworkConfig, encryptionConfig, logging and accessConfig; describe returns inline tags. logging, accessConfig and encryptionConfig are recorded and echoed only — the k3s control plane enforces none of them	docs
DescribeCluster	✅ Supported		docs
DescribeClusterVersions	✅ Supported	Returns synthetic supported Kubernetes version catalog	docs
ListClusters	✅ Supported		docs
CreateAccessEntry	✅ Supported	Stores cluster principal access entry metadata and persists inline tags	docs
DescribeAccessEntry	✅ Supported	Returns stored access entry metadata for a cluster principal ARN with inline tags	docs
UpdateAccessEntry	✅ Supported	Updates stored access entry username/groups for a cluster principal ARN	docs
DeleteAccessEntry	✅ Supported	Deletes stored access entry metadata for a cluster principal ARN	docs
ListAccessEntries	✅ Supported	Returns stored principal ARNs for cluster access entries	docs
AssociateAccessPolicy	✅ Supported	Associates a policy ARN with a stored access entry principal	docs
ListAccessPolicies	✅ Supported	Returns synthetic managed EKS access policy catalog	docs
ListAssociatedAccessPolicies	✅ Supported	Lists associated policy ARNs and access scopes for a stored access entry principal	docs
DisassociateAccessPolicy	✅ Supported	Disassociates a policy ARN from a stored access entry principal	docs
ListIdentityProviderConfigs	✅ Supported	Returns stored identity provider config summaries	docs
DescribeIdentityProviderConfig	✅ Supported	Returns the stored OIDC config nested under identityProviderConfig.oidc, with its ARN, status and inline tags	docs
AssociateIdentityProviderConfig	✅ Supported	Stores OIDC identity provider metadata, persists inline tags, and records an update entry	docs
DisassociateIdentityProviderConfig	✅ Supported	Removes stored identity provider metadata, clears inline tags, and records an update entry	docs
CreatePodIdentityAssociation	✅ Supported	Creates and stores pod identity association metadata for a cluster service account, persists inline tags, and rejects duplicate namespace/service-account bindings	docs
ListPodIdentityAssociations	✅ Supported	Returns stored pod identity associations for a cluster	docs
DescribePodIdentityAssociation	✅ Supported	Returns stored pod identity association details by association ID with inline tags	docs
UpdatePodIdentityAssociation	✅ Supported	Updates stored pod identity association role ARN by association ID	docs
DeletePodIdentityAssociation	✅ Supported	Deletes stored pod identity association metadata by association ID	docs
ListUpdates	✅ Supported	Lists recorded update IDs for a cluster	docs
ListInsights	✅ Supported	Returns synthetic health/readiness insight summaries for a cluster; honours the modeled category/kubernetesVersion/status filter and maxResults/nextToken paging	docs
DescribeInsight	✅ Supported	Returns synthetic health/readiness insight detail by insight ID	docs
UpdateClusterConfig	✅ Supported	Updates stored cluster logging, resourcesVpcConfig, and kubernetesNetworkConfig; records an update entry	docs
UpdateClusterVersion	✅ Supported	Updates stored cluster version metadata	docs
DescribeUpdate	✅ Supported	Returns previously recorded cluster/nodegroup update status by update ID	docs
DeleteCluster	✅ Supported	Deletes cluster metadata and nodegroups	docs

Operation	Status	Notes	AWS Docs
UpdateKubeconfig	✅ Supported	Emulator extension, not an AWS API operation — aws eks update-kubeconfig is a CLI-side command that calls DescribeCluster and writes the file locally, so no SDK calls this. Overcast returns the generated kubeconfig YAML instead (503 until a live cluster’s endpoint/CA are ready)	cli

Operation	Status	Notes	AWS Docs
CreateNodegroup	✅ Supported	Stores full nodegroup metadata including instanceTypes, amiType, capacityType, diskSize, taints, labels, scalingConfig, updateConfig, launchTemplate, and releaseVersion	docs
UpdateNodegroupVersion	✅ Supported	Updates stored nodegroup version, releaseVersion and launchTemplate; records an update entry. No body member is required, matching the model	docs
UpdateNodegroupConfig	✅ Supported	Updates stored nodegroup labels, taints, scalingConfig, and updateConfig; records an update entry	docs
DescribeNodegroup	✅ Supported		docs
ListNodegroups	✅ Supported		docs
DeleteNodegroup	✅ Supported	Deletes nodegroup metadata	docs

Operation	Status	Notes	AWS Docs
ListFargateProfiles	✅ Supported	Lists stored profiles; always includes synthetic “default” profile	docs
DescribeFargateProfile	✅ Supported	Returns stored or synthetic default profile	docs
CreateFargateProfile	✅ Supported	Stores Fargate profile metadata including podExecutionRoleArn, subnets, and selectors	docs
DeleteFargateProfile	✅ Supported	Removes stored Fargate profile metadata	docs

Operation	Status	Notes	AWS Docs
ListTagsForResource	✅ Supported	Returns tags for any EKS resource ARN	docs
TagResource	✅ Supported	Adds tags to an EKS resource by ARN	docs
UntagResource	✅ Supported	Removes tags from an EKS resource by ARN	docs

Operation	Status	Notes	AWS Docs
CreateAddon	✅ Supported	Stores add-on metadata including addonVersion, configurationValues, and serviceAccountRoleArn; describe returns inline tags. addonName is validated against the same catalog DescribeAddonVersions publishes and an unpublished name is rejected as InvalidParameterException (#1692)	docs
DescribeAddon	✅ Supported		docs
ListAddons	✅ Supported		docs
UpdateAddon	✅ Supported	Updates stored add-on version/configuration/service account role and records an update entry; resolveConflicts is echoed into the update’s params but not enforced	docs
DeleteAddon	✅ Supported	Removes add-on metadata	docs
DescribeAddonConfiguration	✅ Supported	Returns the synthetic configuration schema for the requested add-on and version; both query members are required, and an uncatalogued version is a ResourceNotFoundException	docs
DescribeAddonVersions	✅ Supported	Returns the synthetic version catalog for vpc-cni, coredns, kube-proxy, aws-ebs-csi-driver and eks-pod-identity-agent, filtered by the addonName/kubernetesVersion/types/publishers/owners query members and paged by maxResults/nextToken. This is the same catalog CreateAddon validates addonName against	docs