arc argo-rollouts argocd aws bottlerocket cert-manager ci/cd docker ec2 eks external-secrets gha github-actions govcloud helmfile iam istio jenkins karpenter kubernetes mac nginx opa secrets-manager shell terraform