# Provider: eks (cluster domain)

Apply only when diagnosis context `provider` maps to EKS/aws.

## Early create task suspects (order)

From `GetEKSClusterTasks`: KubernetesInfoSaver → PriorityClass → ProviderConfig
→ Guardian → DNS → NodeRole / BatchOpsRole → Namespace → StorageClass →
ServiceSG → AuditLog → TiDBCluster → ClusterProxy/Agent → TiDBGroup →
ScaleStatusTrack → Workflow → Placeholder/SelfManaged/Nodegroup → certs →
Services → O11y.

Prefer checking Guardian/APPBox Gate and Namespace/TiDBCluster before late
nodegroup/PrivateLink tasks.

## Extra intents (`when provider=eks`)

- DP/CP evidence for nodegroup / ASG issues may need AWS CLI → user-assist;
  do not invent AWS API output.
- Code: `controllers/cluster/task/eks/*`, `task/eks/extragroup/*`.