🔒 Add external-secret

devxp-tech · Sep 9, 2024 · 97e5e82 · 97e5e82
1 parent d13267e
commit 97e5e82
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/apps/karpenter/base/kustomization.yaml b/apps/karpenter/base/kustomization.yaml
@@ -13,7 +13,7 @@ helmCharts:
       dnsPolicy: Default
       serviceAccount:
         annotations:
-          eks.amazonaws.com/role-arn: arn:aws:iam::239468932737:role/KarpenterController-20240806113626522400000006
+          eks.amazonaws.com/role-arn: arn:aws:iam::239468932737:role/vex-dev-usea1-eks-karpenter-controller
       # Failed to watch *v1.Lease: failed to list *v1.Lease: leases.coordination.k8s.io is forbidden: User "system:serviceaccount:karpenter:karpenter" cannot list resource "leases" in API group "coordination.k8s.io" in the namespace "kube-node-lease"
       additionalClusterRoleRules:
         - apiGroups: ["coordination.k8s.io"]
@@ -43,6 +43,7 @@ helmCharts:
       settings:
         clusterName: vex-dev-usea1-eks
         clusterEndpoint: https://DDC166ECE3AF805DA19B0CC5502AF3C0.gr7.us-east-1.eks.amazonaws.com
-        defaultInstanceProfile: Karpenter-vex-dev-usea1-eks-20240806114336084400000001
+        defaultInstanceProfile: vex-dev-usea1-eks-karpenter-node-role
+        interruptionQueue: vex-dev-usea1-eks-karpenter
         featureGates:
           spotToSpotConsolidation: true
diff --git a/apps/karpenter/overlays/ops/ec2nodeclass.yaml b/apps/karpenter/overlays/ops/ec2nodeclass.yaml
@@ -16,7 +16,7 @@ spec:
       volumeSize: 50Gi
       volumeType: gp3
   detailedMonitoring: true
-  role: Karpenter-vex-dev-usea1-eks-20240806113626522400000005 #KarpenterNodeRole-vex-dev-usea1-eks
+  role: vex-dev-usea1-eks-karpenter-node-role
   securityGroupSelectorTerms:
   - tags:
       karpenter.sh/discovery: vex-dev-usea1-eks