Management Cluster — AWS
Template Metadata
| Field | Value |
|---|---|
| Repository | konstructio/konstruct-templates |
| Branch / Rev | main |
| Path | cluster-templates/aws/project-cluster/ |
| Format | Flat YAML (Argo CD Applications) |
| Description | AWS management cluster with EKS infrastructure, Crossplane, CI runners, and full GitOps platform services |
Summary
The AWS management cluster template provisions a per-organization management cluster on EKS. It includes infrastructure provisioning via Crossplane, a full set of platform services (cert-manager, ingress, DNS, secrets), monitoring, Atlantis for Terraform PR automation, CI runners, and Argo CD for downstream workload cluster management.
The Terraform driving the infrastructure lives in the sibling terraform/aws/modules/workload-project-cluster and terraform/aws/modules/project-bootstrap modules, referenced by URL from the chart's values.yaml.
Sync Wave Deployment Order
| Wave | App Name | Source | Version | Namespace | Description |
|---|---|---|---|---|---|
| 0 | provider-config | gitops repository | HEAD | crossplane-system | Crossplane ProviderConfig for AWS |
| 10 | infrastructure | gitops repository | HEAD | (cluster) | Crossplane infrastructure Workspace |
| 15 | infrastructure-bootstrap | gitops repository | HEAD | (cluster) | In-cluster bootstrap Workspace |
| 20 | argocd-connection | — | — | — | Cluster secret + Argo CD connection registration |
| 30 | argocd | gitops repository | HEAD | argocd | Argo CD on the management cluster |
| 30 | cert-manager | charts.jetstack.io | v1.14.4 | cert-manager | Certificate management |
| 30 | crossplane | charts.crossplane.io/stable | 1.17.0 | crossplane-system | Crossplane controller |
| 30 | external-dns | kubernetes-sigs.github.io/external-dns | 1.14.4 | external-dns | DNS record automation |
| 30 | external-secrets-operator | charts.external-secrets.io | 0.19.2 | external-secrets-operator | External Secrets Operator |
| 30 | ingress-nginx | kubernetes.github.io/ingress-nginx | 4.12.1 | ingress-nginx | NGINX ingress controller |
| 30 | reloader | stakater.github.io/stakater-charts | v1.0.10 | reloader | ConfigMap/Secret reload watcher |
| 35 | cluster-secret-store | gitops repository | HEAD | external-secrets-operator | ClusterSecretStore for AWS SSM |
| 35 | kube-prometheus-stack | prometheus-community.github.io/helm-charts | 68.3.0 | monitoring | Prometheus and Grafana monitoring stack |
| 40 | cert-issuers | gitops repository | HEAD | cert-manager | ClusterIssuer resources |
| 40 | crossplane-components | gitops repository | HEAD | crossplane-system | Crossplane providers and compositions |
| 40 | secrets | gitops repository | HEAD | argocd | ExternalSecret resources |
| 45 | environment | gitops repository | HEAD | argocd | Environment app-of-apps |
| 50 | actions-runner-controller | actions-runner-controller.github.io | 0.20.2 | github-runner | GitHub Actions Runner Controller |
| 50 | actions-runner-controller-components | gitops repository | HEAD | github-runner | Runner deployment components |
| 50 | atlantis | runatlantis.github.io/helm-charts | 6.9.3 | atlantis | Terraform pull-request automation |
| 50 | atlantis-components | gitops repository | HEAD | atlantis | Atlantis configuration components |
| 100 | registry | gitops repository | HEAD | argocd | App-of-apps for the organization's cluster fleet |