argo-rollouts argocd aws bottlerocket cert-manager ci/cd docker ec2 eks external-secrets github-actions iam istio jenkins karpenter kubernetes mac nginx opa secrets-manager shell terraform