🔒 Add external-secret

Author: diegoluisi

apps/karpenter/base/kustomization.yaml

@@ -24,13 +24,14 @@ helmCharts:
       serviceMonitor:
         enabled: true
       replicas: 1
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: karpenter.sh/nodepool
-                    operator: DoesNotExist
+      # nodeSelector:
+      #   karpenter.sh/controller: 'true'
+      tolerations:
+        - key: CriticalAddonsOnly
+          operator: Exists
+        - key: karpenter.sh/controller
+          operator: Exists
+          effect: NoSchedule
       controller:
         resources:
           requests:

apps/karpenter/overlays/ops/nodepool.yaml

@@ -42,7 +42,7 @@ spec:
           values: ['4095'] # 4 * 1024 -1
         - key: karpenter.k8s.aws/instance-category
           operator: In
-          values: ["c", "t", "r"]
+          values: ["c", "m", "r"]
         - key: topology.kubernetes.io/zone
           operator: In
           values: ["us-east-1a", "us-east-1b", "us-east-1c"]
@@ -97,7 +97,7 @@ spec:
           values: ['4095'] # 4 * 1024 -1
         - key: karpenter.k8s.aws/instance-category
           operator: In
-          values: ["c", "t", "r"]
+          values: ["c", "m", "r"]
         - key: topology.kubernetes.io/zone
           operator: In
           values: ["us-east-1a", "us-east-1b", "us-east-1c"]