
By Bhawani Singh10 min read
Running macOS Builds from Tekton 1 / 7Connecting a Mac build host to a private EKS cluster
A private EKS cluster drives macOS builds on a local Mac without inbound access, using an outbound SSM tunnel and disposable VMs.
Tag · 10 posts

A private EKS cluster drives macOS builds on a local Mac without inbound access, using an outbound SSM tunnel and disposable VMs.

A mutating webhook gives a Tekton build step and Docker-in-Docker sidecar one Pod-level resource budget, then verifies the limits in node cgroups.

An out-of-tree kube-scheduler plugin that reserves node capacity across a Tekton PipelineRun's full lifetime, closing a gap none of Tekton's own coschedule modes cover on their own.

A Tekton dind sidecar borrows the step container's cgroup as dockerd's --cgroup-parent, placing the containers it creates under the step's memory limit.