Metadata-Version: 2.5
Name: datus-eks-plugin
Version: 0.1.0
Summary: Datus plugin: inspect Amazon EKS and authenticate Kubernetes clients without the AWS CLI
Author: Datus
License-Expression: Apache-2.0
Keywords: aws,cli,datus,eks,kubernetes,plugin
Requires-Python: >=3.12
Requires-Dist: datus-aws-common>=0.1
Provides-Extra: dev
Requires-Dist: jinja2>=3.1; extra == 'dev'
Requires-Dist: pytest>=8.0; extra == 'dev'
Description-Content-Type: text/markdown

# datus-eks-plugin

Inspect Amazon EKS and provide short-lived Kubernetes authentication without
invoking the AWS CLI. The plugin is independently configured under
`agent.plugins.eks` and can be used directly or as the credential provider for
`datus-k8s-plugin`.

```yaml
agent:
  plugins:
    eks:
      datus-dev:
        default: true
        cluster: datus-dev-eks-cluster
        region: us-east-1
        role_arn: arn:aws:iam::123456789012:role/datus-dev-eks-operator

    k8s:
      datus-dev:
        default: true
        provider: eks
        namespace: analytics
        allowed_namespaces: analytics,analytics-staging
```

The k8s profile defaults `provider_profile` to its own profile name, so the
example resolves the `eks.datus-dev` profile automatically. No kubeconfig or
`aws` executable is needed in provider mode.

## Commands

```bash
datus eks clusters list
datus eks clusters describe
datus eks nodegroups list
datus eks addons list
datus eks access-entries list
datus eks fargate-profiles list
datus eks updates list
datus eks insights list
datus eks auth whoami
```

`datus eks kubernetes cluster` and `datus eks kubernetes credential` are
machine-facing JSON commands consumed by the k8s plugin. The credential command
is denied to the Agent's bash tool in both normal and auto modes so bearer
tokens are not surfaced in model-visible output.

All EKS operational commands in this first version are read-only.
