[DEVOPS-25] ⚡ Clean module accounts

Author: Diego Luisi

apps/argo-rollouts/base/kustomization.yaml

@@ -11,12 +11,3 @@ helmCharts:
       fullnameOverride: argo-rollouts
       dashboard:
         enabled: true
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: role
-                    operator: In
-                    values:
-                      - spot

apps/atlantis/overlays/ops/kustomization.yaml

@@ -12,13 +12,13 @@ helmCharts:
     repo: https://runatlantis.github.io/helm-charts
     valuesInline:
       nameOverride: atlantis
-      tolerations:
-        - key: "role"
-          operator: "Equal"
-          value: "on-demand"
-          effect: "NoSchedule"
-      nodeSelector:
-        role: "on-demand"
+      # tolerations:
+      #   - key: "role"
+      #     operator: "Equal"
+      #     value: "on-demand"
+      #     effect: "NoSchedule"
+      # nodeSelector:
+      #   role: "on-demand"
       atlantisUrl: https://atlantis.devxp-tech.io
       orgAllowlist: github.com/devxp-tech/*
       github:

apps/backstage/overlays/prd/kustomization.yaml

@@ -92,13 +92,13 @@ helmCharts:
           requests:
             cpu: 10m
             memory: 84Mi
-      tolerations:
-        - key: "role"
-          operator: "Equal"
-          value: "on-demand"
-          effect: "NoSchedule"
-      nodeSelector:
-        role: "on-demand"
+      # tolerations:
+      #   - key: "role"
+      #     operator: "Equal"
+      #     value: "on-demand"
+      #     effect: "NoSchedule"
+      # nodeSelector:
+      #   role: "on-demand"
 
   # - name: devxp-infra
   #   releaseName: devxp-infra

apps/grafana/base/kustomization.yaml

@@ -15,13 +15,13 @@ helmCharts:
       #   annotations:
       #     "eks.amazonaws.com/role-arn": "arn:aws:iam::xxxx:role/monitoring-eks-grafana-role"
       #   automountServiceAccountToken: true
-      tolerations:
-        - key: "role"
-          operator: "Equal"
-          value: "on-demand"
-          effect: "NoSchedule"
-      nodeSelector:
-        role: "on-demand"
+      # tolerations:
+      #   - key: "role"
+      #     operator: "Equal"
+      #     value: "on-demand"
+      #     effect: "NoSchedule"
+      # nodeSelector:
+      #   role: "on-demand"
       persistence:
         enabled: true
         existingClaim: grafana

apps/istio/base/kustomization.yaml

@@ -71,13 +71,13 @@ helmCharts:
           limits:
             cpu: 500m
             memory: 2Gi
-          tolerations:
-            - key: "role"
-              operator: "Equal"
-              value: "on-demand"
-              effect: "NoSchedule"
-          nodeSelector:
-            role: "on-demand"
+          # tolerations:
+          #   - key: "role"
+          #     operator: "Equal"
+          #     value: "on-demand"
+          #     effect: "NoSchedule"
+          # nodeSelector:
+          #   role: "on-demand"
       meshConfig:
         trustDomain: "cluster.local"
         accessLogFile: "/dev/stdout"

apps/karpenter/overlays/ops/nodepool.yaml

@@ -19,10 +19,10 @@ spec:
           memory.available: 5%
           nodefs.available: 10%
           nodefs.inodesFree: 10%
-      taints:
-        - key: role
-          value: on-demand
-          effect: NoSchedule
+      # taints:
+      #   - key: role
+      #     value: on-demand
+      #     effect: NoSchedule
       nodeClassRef:
         name: default
       requirements:

apps/kubecost/base/kustomization.yaml

@@ -49,13 +49,13 @@ helmCharts:
       kubecostToken: "MzEyMTg5Mzk3QHFxLmNvbQ==xm343yadf98" #aGVsbUBrdWJlY29zdC5jb20=xm343yadf98
       persistentVolume:
         storageClass: gp2
-      tolerations:
-        - key: "role"
-          operator: "Equal"
-          value: "on-demand"
-          effect: "NoSchedule"
-      nodeSelector:
-        role: "on-demand"
+      # tolerations:
+      #   - key: "role"
+      #     operator: "Equal"
+      #     value: "on-demand"
+      #     effect: "NoSchedule"
+      # nodeSelector:
+      #   role: "on-demand"
       prometheusRule:
         enabled: true
       oidc:
@@ -72,13 +72,13 @@ helmCharts:
       # Kubecost Cluster Controller for Right Sizing and Cluster Turndown
       clusterController:
         enabled: true
-        tolerations:
-          - key: "role"
-            operator: "Equal"
-            value: "on-demand"
-            effect: "NoSchedule"
-        nodeSelector:
-          role: "on-demand"
+        # tolerations:
+        #   - key: "role"
+        #     operator: "Equal"
+        #     value: "on-demand"
+        #     effect: "NoSchedule"
+        # nodeSelector:
+        #   role: "on-demand"
         actionConfigs:
           # this configures the Kubecost Namespace Turndown action
           # for more details, see documentation at https://docs.kubecost.com/using-kubecost/navigating-the-kubecost-ui/savings/savings-actions#namespace-turndown
@@ -116,10 +116,10 @@ helmCharts:
           limits:
             cpu: 500m
             memory: 1Gi
-        tolerations:
-          - key: "role"
-            operator: "Equal"
-            value: "on-demand"
-            effect: "NoSchedule"
-        nodeSelector:
-          role: "on-demand"
+        # tolerations:
+        #   - key: "role"
+        #     operator: "Equal"
+        #     value: "on-demand"
+        #     effect: "NoSchedule"
+        # nodeSelector:
+        #   role: "on-demand"

apps/loki/overlays/ops/kustomization.yaml

@@ -46,13 +46,13 @@ helmCharts:
           maxUnavailable: 2
         zoneAwareReplication:
           enabled: false
-        tolerations:
-          - key: "role"
-            operator: "Equal"
-            value: "on-demand"
-            effect: "NoSchedule"
-        nodeSelector:
-          role: "on-demand"
+        # tolerations:
+        #   - key: "role"
+        #     operator: "Equal"
+        #     value: "on-demand"
+        #     effect: "NoSchedule"
+        # nodeSelector:
+        #   role: "on-demand"
         extraEnv:
           - name: JAEGER_AGENT_HOST
             value: otel-collector.observability.svc.cluster.local

apps/tempo/base/kustomization.yaml

@@ -14,13 +14,13 @@ helmCharts:
         annotations:
           "eks.amazonaws.com/role-arn": "arn:aws:iam::239468932737:role/tempo-lgseksd1-sa"
         automountServiceAccountToken: true
-      tolerations:
-        - key: "role"
-          operator: "Equal"
-          value: "on-demand"
-          effect: "NoSchedule"
-      nodeSelector:
-        role: "on-demand"
+      # tolerations:
+      #   - key: "role"
+      #     operator: "Equal"
+      #     value: "on-demand"
+      #     effect: "NoSchedule"
+      # nodeSelector:
+      #   role: "on-demand"
       serviceMonitor:
         enabled: true
       tempo: