Eks Upgrade Check

What it does

When your agent uses it

• Someone asks can I upgrade my cluster?
• Is my cluster ready for 1.32?
• Are we good to go to 1.33?
• What is blocking my upgrade?

Example prompts

• “can I upgrade my cluster?”
• “is my cluster ready for 1.32?”
• “are we good to go to 1.33?”
• “/eks-upgrade-check”

Requirements

• Python 3
• Pre-approved tools (allowed-tools): Bash, Read, Write, Grep, Glob, WebFetch, WebSearch

Workflow steps

2 steps, taken from the step headings in SKILL.md.

1. 1Pre-flight
2. 2Calculate Score & Generate Report

What it can do on your machine

Read from SKILL.md and the folder at commit 723cdc0. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves these tools, so the agent can use them without asking each time:

  • Bash
  • Read
  • Write
  • Grep
  • Glob
  • WebFetch
  • WebSearch

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Ships script files (Python), which the agent can run.

  Shell commands in SKILL.md call:

  • aws
  • python3

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md. Its commands use aws, which can reach the network depending on how they are called.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Eks Upgrade Check loads about 2.4k tokens when it runs, and up to ~20k if it reads all its reference files. Until then it costs about 169 tokens; SKILL.md has 1,106 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~169

When it runs · the whole SKILL.md, loaded when a task matches

~2.4k

With references · SKILL.md plus every file in references/, read only if the agent opens them

~20k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

• WarningMentions a credentials file (SSH keys, cloud or package-manager tokens)SKILL.md:57

  ls configured** — `aws configure` or `~/.aws/credentials` with EKS access

• NotePre-approves every shell command (allowed-tools: Bash)SKILL.md

  allowed-tools: Bash, Read, Write, Grep, Glob, WebFetch, WebSearch

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from aws-samples/appmod-blueprints at commit 723cdc0, republished under its MIT licence (© aws-samples). 1,106 words, ~2,396 tokens.

name

eks-upgrade-check

description

Assess EKS cluster upgrade readiness — run automated checks across 8 areas (version, breaking changes, deprecated APIs, add-on compatibility, node readiness, workload risks, AWS Insights, upgrade plan), calculate a 0-100 readiness score with a hard-blocker override, and generate a markdown/HTML report with prioritized remediation. Use this skill whenever someone asks "can I upgrade my cluster?", "is my cluster ready for 1.32?", "are we good to go to 1.33?", "what is blocking my upgrade?", or "should we move to the next version?" — even if they do not say "readiness" or "score". Falls back to AWS CLI and kubectl when the EKS MCP server is unavailable.

allowed-tools

Bash, Read, Write, Grep, Glob, WebFetch, WebSearch

export AWS_PROFILE=your-profile-name
export AWS_REGION=your-region

© aws-samples, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 13 other files (references) in .kiro/skills/eks-upgrade-check of aws-samples/appmod-blueprints.

• SKILL.md
• .vendor-sha
• LICENSE
• UPSTREAM.md
• data/oss_addon_registry.json
• references/addon-compatibility.md
• references/breaking-changes.md
• references/deprecated-apis.md
• references/node-readiness.md
• references/report-generation.md
• references/upgrade-insights.md
• references/version-validation.md
• references/workload-risks.md
• tools/md_to_html.py

Open the folder on GitHubat commit 723cdc0