fix(helm): remove duplicate nodeSelector, add hook for CA issuer ordering

Author: waleedlatif1

helm/sim/templates/cert-manager-issuers.yaml

@@ -69,13 +69,17 @@ spec:
 # 3. CA ClusterIssuer
 # This is the issuer that should be used by applications to obtain certificates.
 # It signs certificates using the root CA created above.
+# Uses post-install hook to ensure Certificate is ready before this issuer is created.
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: {{ .Values.certManager.caIssuer.name }}
   labels:
     {{- include "sim.labels" . | nindent 4 }}
     app.kubernetes.io/component: cert-manager
+  annotations:
+    "helm.sh/hook": post-install,post-upgrade
+    "helm.sh/hook-weight": "1"
 spec:
   ca:
     secretName: {{ .Values.certManager.rootCA.secretName }}

helm/sim/templates/gpu-device-plugin.yaml

@@ -112,8 +112,4 @@ spec:
             limits:
               cpu: 50m
               memory: 50Mi
-  {{- if .Values.nodeSelector }}
-      nodeSelector:
-        {{- toYaml .Values.nodeSelector | nindent 8 }}
-  {{- end }}
 {{- end }}