reduce CPU pressure

[eddiewebb]

this reduces Nginx, argo, kargo, and EKS addon cpu requests. a combination of helm change, terrafor, and akuity kustomizations are used

[github-actions]

AWS Core

OpenTofu Format and Style 🖌success

OpenTofu Plan 📖 success

Show Plan

data.aws_region.current: Reading...
aws_iam_policy.demo_gha_policy: Refreshing state... [id=arn:aws:iam::218691292270:policy/sedemo-iac-pipeline-role-policy]
data.aws_caller_identity.current: Reading...
aws_iam_openid_connect_provider.gha: Refreshing state... [id=arn:aws:iam::218691292270:oidc-provider/token.actions.githubusercontent.com]
aws_iam_policy.demo_policy: Refreshing state... [id=arn:aws:iam::218691292270:policy/sedemo-iac-operator-role-policy]
data.aws_region.current: Read complete after 0s [id=us-west-2]
data.aws_caller_identity.current: Read complete after 0s [id=218691292270]
aws_iam_role.demo_role: Refreshing state... [id=sedemo-iac-operator-role]
aws_iam_role.demo_gha_role: Refreshing state... [id=sedemo-iac-pipeline-role]
aws_iam_role_policy_attachment.gha_attachment: Refreshing state... [id=sedemo-iac-pipeline-role/arn:aws:iam::218691292270:policy/sedemo-iac-pipeline-role-policy]
aws_iam_role_policy_attachment.fe_eks: Refreshing state... [id=sedemo-iac-operator-role/arn:aws:iam::218691292270:policy/sedemo-iac-operator-role-policy]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.

EKS Primary Cluster

OpenTofu Format and Style 🖌failure

OpenTofu Plan 📖 success

Show Plan

data.terraform_remote_state.arad_aws_state: Reading...
module.eks.data.aws_iam_policy_document.assume_role_policy[0]: Reading...
data.aws_availability_zones.available: Reading...
data.aws_region.current: Reading...
module.eks.data.aws_caller_identity.current[0]: Reading...
data.aws_route53_zone.root_demo_domain_zone: Reading...
data.aws_caller_identity.current: Reading...
module.eks.module.eks_managed_node_group["default"].data.aws_iam_policy_document.assume_role_policy[0]: Reading...
module.vpc.aws_vpc.this[0]: Refreshing state... [id=vpc-0fbf91497bbb443b6]
module.eks.aws_cloudwatch_log_group.this[0]: Refreshing state... [id=/aws/eks/sedemo-primary/cluster]
data.aws_region.current: Read complete after 0s [id=us-west-2]
module.eks.data.aws_iam_policy_document.assume_role_policy[0]: Read complete after 0s [id=2830595799]
module.eks.module.eks_managed_node_group["default"].data.aws_iam_policy_document.assume_role_policy[0]: Read complete after 0s [id=2560088296]
module.eks.data.aws_partition.current[0]: Reading...
module.eks.data.aws_partition.current[0]: Read complete after 0s [id=aws]
module.eks.module.kms.data.aws_caller_identity.current[0]: Reading...
module.eks.module.kms.data.aws_partition.current[0]: Reading...
module.eks.module.kms.data.aws_partition.current[0]: Read complete after 0s [id=aws]
module.eks.module.eks_managed_node_group["default"].aws_iam_role.this[0]: Refreshing state... [id=default-eks-node-group-20251111192150921200000002]
module.eks.aws_iam_role.this[0]: Refreshing state... [id=sedemo-primary-cluster-20251111192150921000000001]
module.eks.data.aws_caller_identity.current[0]: Read complete after 0s [id=218691292270]
module.eks.data.aws_iam_session_context.current[0]: Reading...
module.eks.data.aws_iam_session_context.current[0]: Read complete after 0s [id=arn:aws:sts::218691292270:assumed-role/sedemo-iac-pipeline-role/GitHubActions]
data.aws_caller_identity.current: Read complete after 0s [id=218691292270]
aws_iam_policy.irsa_policy_eso: Refreshing state... [id=arn:aws:iam::218691292270:policy/sedemo-primary-irsa-policy-external-secrets]
module.eks.module.eks_managed_node_group["default"].aws_iam_role_policy_attachment.this["AmazonEC2ContainerRegistryReadOnly"]: Refreshing state... [id=default-eks-node-group-20251111192150921200000002/arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly]
module.eks.module.eks_managed_node_group["default"].aws_iam_role_policy_attachment.this["AmazonEKSWorkerNodePolicy"]: Refreshing state... [id=default-eks-node-group-20251111192150921200000002/arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy]
module.eks.module.eks_managed_node_group["default"].aws_iam_role_policy_attachment.this["AmazonEKS_CNI_Policy"]: Refreshing state... [id=default-eks-node-group-20251111192150921200000002/arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy]
module.eks.aws_iam_role_policy_attachment.this["AmazonEKSClusterPolicy"]: Refreshing state... [id=sedemo-primary-cluster-20251111192150921000000001/arn:aws:iam::aws:policy/AmazonEKSClusterPolicy]
module.eks.module.kms.data.aws_caller_identity.current[0]: Read complete after 0s [id=218691292270]
module.eks.module.kms.data.aws_iam_policy_document.this[0]: Reading...
module.eks.module.kms.data.aws_iam_policy_document.this[0]: Read complete after 0s [id=1682338805]
module.eks.module.kms.aws_kms_key.this[0]: Refreshing state... [id=baf78981-bbd2-4ed3-a92a-9e108d662aff]
data.aws_route53_zone.root_demo_domain_zone: Read complete after 0s [id=Z06080061D8PFBX2D8WN4]
data.aws_availability_zones.available: Read complete after 0s [id=us-west-2]
data.terraform_remote_state.arad_aws_state: Read complete after 1s
module.eks.module.kms.aws_kms_alias.this["cluster"]: Refreshing state... [id=alias/eks/sedemo-primary]
module.eks.aws_iam_policy.cluster_encryption[0]: Refreshing state... [id=arn:aws:iam::218691292270:policy/sedemo-primary-cluster-ClusterEncryption20251111192222740700000006]
module.eks.aws_iam_role_policy_attachment.cluster_encryption[0]: Refreshing state... [id=sedemo-primary-cluster-20251111192150921000000001/arn:aws:iam::218691292270:policy/sedemo-primary-cluster-ClusterEncryption20251111192222740700000006]
module.vpc.aws_default_network_acl.this[0]: Refreshing state... [id=acl-084eb75bc9f14e5b2]
module.vpc.aws_default_security_group.this[0]: Refreshing state... [id=sg-00bc5fcc757caa567]
module.vpc.aws_default_route_table.default[0]: Refreshing state... [id=rtb-08fead377724c72f4]
module.vpc.aws_subnet.public[0]: Refreshing state... [id=subnet-07ecc6a49ba22a686]
module.vpc.aws_internet_gateway.this[0]: Refreshing state... [id=igw-014d59df50b2e06c5]
module.vpc.aws_subnet.public[1]: Refreshing state... [id=subnet-08a6c091f2dbe3a60]
module.vpc.aws_route_table.public[0]: Refreshing state... [id=rtb-0572ed744e9398a50]
module.eks.aws_security_group.cluster[0]: Refreshing state... [id=sg-0227a2cd27eca4855]
module.eks.aws_security_group.node[0]: Refreshing state... [id=sg-0dbcf967188bd3683]
module.vpc.aws_route.public_internet_gateway[0]: Refreshing state... [id=r-rtb-0572ed744e9398a501080289494]
module.eks.aws_security_group_rule.node["egress_all"]: Refreshing state... [id=sgrule-629314194]
module.eks.aws_security_group_rule.node["ingress_cluster_10251_webhook"]: Refreshing state... [id=sgrule-3802785280]
module.eks.aws_security_group_rule.cluster["ingress_nodes_443"]: Refreshing state... [id=sgrule-2240607105]
module.eks.aws_security_group_rule.node["ingress_cluster_9443_webhook"]: Refreshing state... [id=sgrule-3527264655]
module.eks.aws_security_group_rule.node["ingress_self_coredns_udp"]: Refreshing state... [id=sgrule-3716668753]
module.eks.aws_security_group_rule.node["ingress_cluster_4443_webhook"]: Refreshing state... [id=sgrule-1820500467]
module.eks.aws_security_group_rule.node["ingress_cluster_kubelet"]: Refreshing state... [id=sgrule-3605051003]
module.eks.aws_security_group_rule.node["ingress_cluster_8443_webhook"]: Refreshing state... [id=sgrule-3063740996]
module.eks.aws_security_group_rule.node["ingress_cluster_6443_webhook"]: Refreshing state... [id=sgrule-2780874341]
module.eks.aws_security_group_rule.node["ingress_cluster_443"]: Refreshing state... [id=sgrule-3178046303]
module.eks.aws_security_group_rule.node["ingress_nodes_ephemeral"]: Refreshing state... [id=sgrule-2725958526]
module.eks.aws_security_group_rule.node["ingress_self_coredns_tcp"]: Refreshing state... [id=sgrule-2044231358]
module.vpc.aws_route_table_association.public[1]: Refreshing state... [id=rtbassoc-06b3a2a2bec249324]
module.vpc.aws_route_table_association.public[0]: Refreshing state... [id=rtbassoc-0bf2709ef97d1f762]
module.eks.aws_eks_cluster.this[0]: Refreshing state... [id=sedemo-primary]
module.eks.aws_eks_access_entry.this["sso_admin_access"]: Refreshing state... [id=sedemo-primary:arn:aws:iam::218691292270:role/aws-reserved/sso.amazonaws.com/us-east-2/AWSReservedSSO_PowerUserAccess_8de5f1934424d9c6]
module.eks.aws_eks_access_entry.this["pipeline_eks_access"]: Refreshing state... [id=sedemo-primary:arn:aws:iam::218691292270:role/sedemo-iac-pipeline-role]
module.eks.aws_eks_access_entry.this["fieldeng_eks_access"]: Refreshing state... [id=sedemo-primary:arn:aws:iam::218691292270:role/sedemo-iac-operator-role]
module.eks.data.aws_eks_addon_version.this["kube-proxy"]: Reading...
module.eks.data.aws_eks_addon_version.this["coredns"]: Reading...
module.eks.data.aws_eks_addon_version.this["vpc-cni"]: Reading...
aws_iam_role.eks_service_account_role: Refreshing state... [id=sedemo-primary-irsa-role-external-secrets]
module.eks.data.tls_certificate.this[0]: Reading...
module.eks.aws_ec2_tag.cluster_primary_security_group["purpose"]: Refreshing state... [id=sg-017102217399269b0,purpose]
module.eks.aws_ec2_tag.cluster_primary_security_group["owner"]: Refreshing state... [id=sg-017102217399269b0,owner]
module.eks.aws_ec2_tag.cluster_primary_security_group["cost_center"]: Refreshing state... [id=sg-017102217399269b0,cost_center]
module.eks.data.aws_eks_addon_version.this["coredns"]: Read complete after 0s [id=coredns]
module.eks.aws_ec2_tag.cluster_primary_security_group["iac"]: Refreshing state... [id=sg-017102217399269b0,iac]
module.eks.aws_ec2_tag.cluster_primary_security_group["Team"]: Refreshing state... [id=sg-017102217399269b0,Team]
module.eks.aws_ec2_tag.cluster_primary_security_group["critical_until"]: Refreshing state... [id=sg-017102217399269b0,critical_until]
module.eks.aws_ec2_tag.cluster_primary_security_group["data_classification"]: Refreshing state... [id=sg-017102217399269b0,data_classification]
module.eks.data.aws_eks_addon_version.this["vpc-cni"]: Read complete after 0s [id=vpc-cni]
module.eks.data.aws_eks_addon_version.this["kube-proxy"]: Read complete after 0s [id=kube-proxy]
aws_iam_role_policy_attachment.irsa_secrets: Refreshing state... [id=sedemo-primary-irsa-role-external-secrets/arn:aws:iam::218691292270:policy/sedemo-primary-irsa-policy-external-secrets]
module.eks.time_sleep.this[0]: Refreshing state... [id=2025-11-11T19:33:05Z]
module.eks.aws_eks_addon.before_compute["vpc-cni"]: Refreshing state... [id=sedemo-primary:vpc-cni]
module.eks.aws_eks_access_policy_association.this["pipeline_eks_access_namespace_policy"]: Refreshing state... [id=sedemo-primary#arn:aws:iam::218691292270:role/sedemo-iac-pipeline-role#arn:aws:eks::aws:cluster-access-policy/AmazonEKSAdminPolicy]
module.eks.aws_eks_access_policy_association.this["fieldeng_eks_access_admin_policy"]: Refreshing state... [id=sedemo-primary#arn:aws:iam::218691292270:role/sedemo-iac-operator-role#arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy]
module.eks.aws_eks_access_policy_association.this["fieldeng_eks_access_namespace_policy"]: Refreshing state... [id=sedemo-primary#arn:aws:iam::218691292270:role/sedemo-iac-operator-role#arn:aws:eks::aws:cluster-access-policy/AmazonEKSAdminPolicy]
module.eks.aws_eks_access_policy_association.this["sso_admin_access_namespace_policy"]: Refreshing state... [id=sedemo-primary#arn:aws:iam::218691292270:role/aws-reserved/sso.amazonaws.com/us-east-2/AWSReservedSSO_PowerUserAccess_8de5f1934424d9c6#arn:aws:eks::aws:cluster-access-policy/AmazonEKSAdminPolicy]
module.eks.aws_eks_access_policy_association.this["pipeline_eks_access_admin_policy"]: Refreshing state... [id=sedemo-primary#arn:aws:iam::218691292270:role/sedemo-iac-pipeline-role#arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy]
module.eks.aws_eks_access_policy_association.this["sso_admin_access_admin_policy"]: Refreshing state... [id=sedemo-primary#arn:aws:iam::218691292270:role/aws-reserved/sso.amazonaws.com/us-east-2/AWSReservedSSO_PowerUserAccess_8de5f1934424d9c6#arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy]
module.eks.data.tls_certificate.this[0]: Read complete after 0s [id=f97f646c2cd14cc0db0f757f0fccc96abbbe2af5]
module.eks.module.eks_managed_node_group["default"].module.user_data.null_resource.validate_cluster_service_cidr: Refreshing state... [id=5379422231627766317]
module.eks.module.eks_managed_node_group["default"].data.aws_ssm_parameter.ami[0]: Reading...
module.eks.aws_iam_openid_connect_provider.oidc_provider[0]: Refreshing state... [id=arn:aws:iam::218691292270:oidc-provider/oidc.eks.us-west-2.amazonaws.com/id/7F08F2E347A55192C0B80AD9E96F647F]
module.eks.module.eks_managed_node_group["default"].aws_launch_template.this[0]: Refreshing state... [id=lt-020badef43ed61817]
module.eks.module.eks_managed_node_group["default"].data.aws_ssm_parameter.ami[0]: Read complete after 1s [id=/aws/service/eks/optimized-ami/1.34/amazon-linux-2023/x86_64/standard/recommended/release_version]
module.eks.module.eks_managed_node_group["default"].aws_eks_node_group.this[0]: Refreshing state... [id=sedemo-primary:default-2025111119331203410000000a]
module.eks.aws_eks_addon.this["coredns"]: Refreshing state... [id=sedemo-primary:coredns]
module.eks.aws_eks_addon.this["kube-proxy"]: Refreshing state... [id=sedemo-primary:kube-proxy]
helm_release.nginx_ingress: Refreshing state... [id=ingress-nginx]
data.kubernetes_service_v1.nginx_ingress: Reading...
data.kubernetes_service_v1.nginx_ingress: Read complete after 1s [id=ingress-nginx/ingress-nginx-controller]
data.aws_elb.nginx_ingress: Reading...
aws_route53_record.records["*."]: Refreshing state... [id=Z06080061D8PFBX2D8WN4_*_CNAME]
data.aws_elb.nginx_ingress: Read complete after 1s [id=a1e1866182f2849afbb3697aa4826fc9]
aws_route53_record.landing_global_record: Refreshing state... [id=Z06080061D8PFBX2D8WN4_akpdemoapps.link_A_sedemo-primary]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
Releasing state lock. This may take a few moments...

Pusher: @eddiewebb, Action: pull_request, Workflow: AWS IAC