From 73696719576b2a8dd0d7d886ce8e2429f8cd337f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?M=C3=A1rcio=20Fernandes?= Date: Sat, 26 Sep 2026 21:23:27 +0000 Subject: [PATCH] add mylimbo-ansible-collections-global --- .../fluxcd-kustomization.yaml | 12 ---- .../secrets/.env.d/.gitignore | 2 - .../secrets/kustomization.yaml | 18 ----- .../kustomization.yaml | 7 +- .../workflowTemplates/kustomization.yaml | 7 ++ ...mbo-ansible-collections-global-script.yaml | 61 +++++++++++++++++ .../icarus-nodes-mngt/kustomization.yaml | 7 +- .../icarus-ansible-script.yaml | 68 +++++-------------- 8 files changed, 90 insertions(+), 92 deletions(-) delete mode 100644 cluster/chimera/nodes-mngt/icarus-nodes-mngt/fluxcd-kustomization.yaml delete mode 100644 cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/.env.d/.gitignore delete mode 100644 cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/kustomization.yaml rename {cluster/chimera/nodes-mngt/icarus-nodes-mngt => mylimbo-ansible-collections-global}/kustomization.yaml (51%) create mode 100644 mylimbo-ansible-collections-global/workflowTemplates/kustomization.yaml create mode 100644 mylimbo-ansible-collections-global/workflowTemplates/mylimbo-ansible-collections-global-script.yaml diff --git a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/fluxcd-kustomization.yaml b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/fluxcd-kustomization.yaml deleted file mode 100644 index 2ca69d8..0000000 --- a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/fluxcd-kustomization.yaml +++ /dev/null @@ -1,12 +0,0 @@ -apiVersion: kustomize.toolkit.fluxcd.io/v1 -kind: Kustomization -metadata: - name: myinfra-kubernetes-shared-icarus-nodes-mngt -spec: - interval: 1m - sourceRef: - kind: GitRepository - name: myinfra-kubernetes-shared - namespace: chimera-limbosolutions-com - path: nodes-mngt/icarus-nodes-mngt - prune: true diff --git a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/.env.d/.gitignore b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/.env.d/.gitignore deleted file mode 100644 index d29675e..0000000 --- a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/.env.d/.gitignore +++ /dev/null @@ -1,2 +0,0 @@ -** -!.gitignore \ No newline at end of file diff --git a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/kustomization.yaml b/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/kustomization.yaml deleted file mode 100644 index 201f480..0000000 --- a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/kustomization.yaml +++ /dev/null @@ -1,18 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -secretGenerator: - - name: icarus-ssh - files: - - known_hosts=.env.d/icarus-known_hosts - - id_rsa=.env.d/icarus-ssh-ansible-id_rsa - - id_rsa.pub=.env.d/icarus-ssh-ansible-id_rsa.pub - - name: icarus-ansible - files: - - vault-pass.txt=.env.d/ansible-vault-pass.txt - - ansible_become_password=.env.d/ansible_become_password -generatorOptions: - disableNameSuffixHash: true - - - diff --git a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/kustomization.yaml b/mylimbo-ansible-collections-global/kustomization.yaml similarity index 51% rename from cluster/chimera/nodes-mngt/icarus-nodes-mngt/kustomization.yaml rename to mylimbo-ansible-collections-global/kustomization.yaml index 308f4af..f6fc214 100644 --- a/cluster/chimera/nodes-mngt/icarus-nodes-mngt/kustomization.yaml +++ b/mylimbo-ansible-collections-global/kustomization.yaml @@ -1,8 +1,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization -namespace: icarus-nodes-mngt resources: - - fluxcd-kustomization.yaml - - secrets - + - workflowTemplates +generatorOptions: + disableNameSuffixHash: true diff --git a/mylimbo-ansible-collections-global/workflowTemplates/kustomization.yaml b/mylimbo-ansible-collections-global/workflowTemplates/kustomization.yaml new file mode 100644 index 0000000..9051616 --- /dev/null +++ b/mylimbo-ansible-collections-global/workflowTemplates/kustomization.yaml @@ -0,0 +1,7 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - mylimbo-ansible-collections-global-script.yaml +generatorOptions: + disableNameSuffixHash: true + diff --git a/mylimbo-ansible-collections-global/workflowTemplates/mylimbo-ansible-collections-global-script.yaml b/mylimbo-ansible-collections-global/workflowTemplates/mylimbo-ansible-collections-global-script.yaml new file mode 100644 index 0000000..d22bc21 --- /dev/null +++ b/mylimbo-ansible-collections-global/workflowTemplates/mylimbo-ansible-collections-global-script.yaml @@ -0,0 +1,61 @@ +apiVersion: argoproj.io/v1alpha1 +kind: WorkflowTemplate +metadata: + name: mylimbo-ansible-collections-global + labels: + workflows.argoproj.io/archive-strategy: "false" + annotations: + workflows.argoproj.io/description: | + mylimbo ansible collections global +spec: + entrypoint: raw-source + templates: + - name: raw-source + inputs: + parameters: + - name: source + - name: inventory_image_reference + - name: ansible_secret_name + - name: ssh_secret_name + script: + image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest + source: "{{ inputs.parameters.source }}" + env: + - name: ANSIBLE_VAULT_PASSWORD_FILE + value: /workspace/secrets/vault-pass.txt + + - name: ANSIBLE_BECOME_PASS + valueFrom: + secretKeyRef: + name: ansible_secrets + key: ansible_become_password + resources: + limits: + memory: "512Mi" + cpu: "500m" + requests: + memory: "256Mi" + cpu: "250m" + + volumeMounts: + - name: inventory + mountPath: /workspace/inventory + subPath: inventory + - name: ansible_secrets + mountPath: /workspace/secrets/vault-pass.txt + subPath: vault-pass.txt + - name: ssh_secrets + mountPath: /home/ansible/.ssh + volumes: + - name: inventory + image: + reference: "{{ inputs.parameters.inventory_image_reference }}" + pullPolicy: Always + + - name: ansible_secrets + secret: + secretName: "{{ inputs.parameters.ansible_secret_name }}" + + - name: ssh_secrets + secret: + secretName: "{{ inputs.parameters.ssh_secret_name }}" diff --git a/nodes-mngt/icarus-nodes-mngt/kustomization.yaml b/nodes-mngt/icarus-nodes-mngt/kustomization.yaml index 61b8999..935f46d 100644 --- a/nodes-mngt/icarus-nodes-mngt/kustomization.yaml +++ b/nodes-mngt/icarus-nodes-mngt/kustomization.yaml @@ -1,11 +1,5 @@ -### -# Hosted on chimera -# check directory /cluster/chimera/nodes-mngt/icarus-nodes-mngt -# for flux requirements and deploy -## apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization -namespace: icarus-nodes-mngt resources: - infra - cronWorkflows @@ -13,3 +7,4 @@ resources: generatorOptions: disableNameSuffixHash: true + diff --git a/nodes-mngt/icarus-nodes-mngt/workflowTemplates/icarus-ansible-script.yaml b/nodes-mngt/icarus-nodes-mngt/workflowTemplates/icarus-ansible-script.yaml index 962ba35..d13d3c2 100644 --- a/nodes-mngt/icarus-nodes-mngt/workflowTemplates/icarus-ansible-script.yaml +++ b/nodes-mngt/icarus-nodes-mngt/workflowTemplates/icarus-ansible-script.yaml @@ -11,57 +11,25 @@ spec: serviceAccountName: argo-runner imagePullSecrets: - name: oci-mylimbo-infra-icarus-credentials - entrypoint: raw-source + entrypoint: exec + templates: - - name: raw-source + - name: exec inputs: parameters: - name: source - script: - image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest - source: "{{ inputs.parameters.source }}" - - imagePullPolicy: Always - - env: - - name: ANSIBLE_VAULT_PASSWORD_FILE - value: /workspace/secrets/vault-pass.txt - - - name: ANSIBLE_BECOME_PASS - valueFrom: - secretKeyRef: - name: icarus-ansible - key: ansible_become_password - - resources: - limits: - memory: "512Mi" - cpu: "500m" - requests: - memory: "256Mi" - cpu: "250m" - - volumeMounts: - - - name: inventory - mountPath: /workspace/inventory - subPath: inventory - - name: icarus-ansible-secrets - mountPath: /workspace/secrets/vault-pass.txt - subPath: vault-pass.txt - - name: icarus-ssh-secrets - mountPath: /home/ansible/.ssh - - volumes: - - name: inventory - image: - reference: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest - pullPolicy: Always - - - name: icarus-ansible-secrets - secret: - secretName: icarus-ansible - - - name: icarus-ssh-secrets - secret: - secretName: icarus-ssh + steps: + - - name: script-exec + templateRef: + name: limbo-ansible-collections-global + template: raw-source + arguments: + parameters: + - name: source + value: "{{ inputs.parameters.source }}" + - name: inventory_image_reference + value: "oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest" + - name: ansible_secret_name + value: "icarus-ansible" + - name: ssh_secret_name + value: "icarus-ssh"