feat: patch coredns not to be deployed in a non-master node

k8s/services/kube-system/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - patch-coredns.yaml

k8s/services/kube-system/patch-coredns.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: coredns
+  namespace: kube-system
+spec:
+  template:
+    spec:
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: node-role.kubernetes.io/control-plane
+                    operator: Exists

k8s/services/renovate/sealedsecrets.yaml

@@ -1,16 +0,0 @@
----
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: secrets-renovate
-  namespace: apps-fuku
-spec:
-  encryptedData:
-    GITHUB_COM_TOKEN: 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  # yamllint disable rule:line-length
-    RENOVATE_TOKEN: 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  # yamllint disable rule:line-length
-  template:
-    metadata:
-      creationTimestamp: null
-      name: secrets-renovate
-      namespace: apps-fuku