Create a kro capability - Amazon EKS
PrerequisitesChoose your toolWhat happens when you create a kro capabilityNext steps

Help improve this page

To contribute to this user guide, choose the Edit this page on GitHub link that is located in the right pane of every page.

Create a kro capability

This topic explains how to create a kro capability on your Amazon EKS cluster.

Prerequisites

Before creating a kro capability, ensure you have:

  • An existing Amazon EKS cluster running a supported Kubernetes version (all versions in standard and extended support are supported)

  • Sufficient IAM permissions to create capability resources on EKS clusters

  • (For CLI/eksctl) The appropriate CLI tool installed and configured

Note

Unlike ACK and Argo CD, kro does not require additional IAM permissions beyond the trust policy. kro operates entirely within your cluster and does not make AWS API calls. However, you still need to provide an IAM Capability Role with the appropriate trust policy. For information about configuring Kubernetes RBAC permissions for kro, see Configure kro permissions.

Choose your tool

You can create a kro capability using the AWS Management Console, AWS CLI, or eksctl:

What happens when you create a kro capability

When you create a kro capability:

  1. EKS creates the kro capability service and configures it to monitor and manage resources in your cluster

  2. Custom Resource Definitions (CRDs) are installed in your cluster

  3. The capability assumes the IAM Capability Role you provide (used only for the trust relationship)

  4. kro begins watching for ResourceGraphDefinition resources and their instances

  5. The capability status changes from CREATING to ACTIVE

Once active, you can create ResourceGraphDefinitions to define custom APIs and create instances of those APIs.

Next steps

After creating the kro capability:

  • kro concepts - Understand kro concepts and resource composition

  • kro concepts - Learn about SimpleSchema, CEL expressions, and resource composition patterns