arc argo-rollouts argocd aws bottlerocket cert-manager ci/cd docker ec2 eks external-secrets gha github-actions iam istio jenkins karpenter kubernetes mac nginx opa secrets-manager shell terraform