From 36226b300bba7dad7a4e1e59c4b81d38c2472fb7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?M=C3=A1rcio=20Fernandes?= <marcio.fernandes@outlook.pt>
Date: Sun, 20 Sep 2026 00:38:24 +0000
Subject: [PATCH] add icarus nodes-mngt

---
 cluster/chimera/kustomization.yaml            |  1 +
 .../fluxcd-kustomization.yaml                 | 12 +++
 .../icarus-nodes-mngt/kustomization.yaml      |  8 ++
 .../secrets/.env.d/.gitignore                 |  2 +
 .../secrets/kustomization.yaml                | 26 ++++++
 cluster/chimera/nodes-mngt/kustomization.yaml |  6 ++
 .../icarus-nodes-mngt/cronjobs/cri-prune.yaml | 87 +++++++++++++++++++
 .../cronjobs/kustomization.yaml               |  7 ++
 .../icarus-nodes-mngt/kustomization.yaml      | 13 +++
 9 files changed, 162 insertions(+)
 create mode 100644 cluster/chimera/nodes-mngt/icarus-nodes-mngt/fluxcd-kustomization.yaml
 create mode 100644 cluster/chimera/nodes-mngt/icarus-nodes-mngt/kustomization.yaml
 create mode 100644 cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/.env.d/.gitignore
 create mode 100644 cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/kustomization.yaml
 create mode 100644 cluster/chimera/nodes-mngt/kustomization.yaml
 create mode 100644 nodes-mngt/icarus-nodes-mngt/cronjobs/cri-prune.yaml
 create mode 100644 nodes-mngt/icarus-nodes-mngt/cronjobs/kustomization.yaml
 create mode 100644 nodes-mngt/icarus-nodes-mngt/kustomization.yaml

diff --git a/cluster/chimera/kustomization.yaml b/cluster/chimera/kustomization.yaml
index 3a0b9a7..01eb7cc 100644
--- a/cluster/chimera/kustomization.yaml
+++ b/cluster/chimera/kustomization.yaml
@@ -3,6 +3,7 @@ kind: Kustomization
 resources:
   - monitoring
   - repos
+  - nodes-mngt
 generatorOptions:
   disableNameSuffixHash: true
 
diff --git a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/fluxcd-kustomization.yaml b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/fluxcd-kustomization.yaml
new file mode 100644
index 0000000..2ca69d8
--- /dev/null
+++ b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/fluxcd-kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: myinfra-kubernetes-shared-icarus-nodes-mngt
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: myinfra-kubernetes-shared
+    namespace: chimera-limbosolutions-com
+  path: nodes-mngt/icarus-nodes-mngt
+  prune: true
diff --git a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/kustomization.yaml b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/kustomization.yaml
new file mode 100644
index 0000000..308f4af
--- /dev/null
+++ b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/kustomization.yaml
@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: icarus-nodes-mngt
+resources:
+  - fluxcd-kustomization.yaml
+  - secrets
+
+
diff --git a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/.env.d/.gitignore b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/.env.d/.gitignore
new file mode 100644
index 0000000..d29675e
--- /dev/null
+++ b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/.env.d/.gitignore
@@ -0,0 +1,2 @@
+**
+!.gitignore
\ No newline at end of file
diff --git a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/kustomization.yaml b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/kustomization.yaml
new file mode 100644
index 0000000..153726c
--- /dev/null
+++ b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/kustomization.yaml
@@ -0,0 +1,26 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+secretGenerator:
+
+  - name: icarus-ssh
+    files:
+      - known_hosts=.env.d/icarus-known_hosts
+      - id_rsa=.env.d/icarus-ssh-ansible-id_rsa
+      - id_rsa.pub=.env.d/icarus-ssh-ansible-id_rsa.pub
+  - name: ansible-icarus-host-vars
+    files:
+      - main.yaml=.env.d/ansible-icarus-host-vars.yaml
+  - name: ansible-all-group-vars
+    files:
+      - main.yaml=.env.d/ansible-all-group-vars.yaml
+
+  - name: ansible-inventory
+    files:
+      - inventory=.env.d/ansible-inventory
+
+generatorOptions:
+  disableNameSuffixHash: true
+
+
+
diff --git a/cluster/chimera/nodes-mngt/kustomization.yaml b/cluster/chimera/nodes-mngt/kustomization.yaml
new file mode 100644
index 0000000..b5e1e6c
--- /dev/null
+++ b/cluster/chimera/nodes-mngt/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - icarus-nodes-mngt
+
+
diff --git a/nodes-mngt/icarus-nodes-mngt/cronjobs/cri-prune.yaml b/nodes-mngt/icarus-nodes-mngt/cronjobs/cri-prune.yaml
new file mode 100644
index 0000000..3418e29
--- /dev/null
+++ b/nodes-mngt/icarus-nodes-mngt/cronjobs/cri-prune.yaml
@@ -0,0 +1,87 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: cri-prune
+spec:
+  schedule: "0 16 * * 0" #every sunday at 4pm
+  jobTemplate:
+    spec:
+      backoffLimit: 1
+      template:
+        spec:
+          restartPolicy: Never
+
+          initContainers:
+            - name: fix-ssh
+              image: alpine
+              command:
+                - sh
+                - -c
+                - |
+                  mkdir -p /home/ansible/.ssh
+                  cp /tmp/ssh/* /home/ansible/.ssh/
+                  chown 1000:1000 /home/ansible/.ssh/*
+                  chmod 600 /home/ansible/.ssh/id_rsa
+                  chmod 644 /home/ansible/.ssh/id_rsa.pub
+                  chmod 644 /home/ansible/.ssh/known_hosts
+                  
+              volumeMounts:
+                - name: icarus-ssh
+                  mountPath: /tmp/ssh
+                - name: home
+                  mountPath: /home/ansible
+
+          containers:
+            - name: cri-prune
+              image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest
+              imagePullPolicy: IfNotPresent
+              resources:
+                limits:
+                  memory: "512Mi"
+                  cpu: "500m"
+                requests:
+                  memory: "256Mi"
+                  cpu: "250m"
+               
+               
+                # command: ["tail", "-f", "/dev/null"]
+              
+              args: 
+                
+                - ansible-playbook mylimbo.globals.k3s.crictl_prune
+              
+              volumeMounts:
+
+                - name: home
+                  mountPath: /home/ansible
+      
+                - name: ansible-inventory
+                  mountPath: /workspace/inventory
+                  subPath: inventory
+                
+                - name: ansible-all-group-vars
+                  mountPath: /workspace/group_vars/all
+
+                - name: ansible-icarus-host-vars
+                  mountPath: /workspace/host_vars/icarus
+
+          volumes:
+            - name: home
+              emptyDir: {}
+
+            - name: icarus-ssh
+              secret:
+                secretName: icarus-ssh
+                defaultMode: 0400
+
+            - name: ansible-inventory
+              secret:
+                secretName: ansible-inventory
+                
+            - name: ansible-all-group-vars
+              secret:
+                secretName: ansible-group-vars
+
+            - name: ansible-icarus-host-vars
+              secret:
+                secretName: ansible-icarus-host-vars
\ No newline at end of file
diff --git a/nodes-mngt/icarus-nodes-mngt/cronjobs/kustomization.yaml b/nodes-mngt/icarus-nodes-mngt/cronjobs/kustomization.yaml
new file mode 100644
index 0000000..ec65773
--- /dev/null
+++ b/nodes-mngt/icarus-nodes-mngt/cronjobs/kustomization.yaml
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: monitoring
+resources:
+  - cri-prune.yaml
+generatorOptions:
+  disableNameSuffixHash: true
\ No newline at end of file
diff --git a/nodes-mngt/icarus-nodes-mngt/kustomization.yaml b/nodes-mngt/icarus-nodes-mngt/kustomization.yaml
new file mode 100644
index 0000000..67e5977
--- /dev/null
+++ b/nodes-mngt/icarus-nodes-mngt/kustomization.yaml
@@ -0,0 +1,13 @@
+###
+# Hosted on chimera
+# check directory /cluster/chimera/nodes-mngt/icarus-nodes-mngt
+# for requirements and deploy
+##
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: icarus-nodes-mngt
+resources:
+  - cronjobs
+generatorOptions:
+  disableNameSuffixHash: true
+