add mylimbo-ansible-collections-global

nodes-mngt/icarus-nodes-mngt/kustomization.yaml

@@ -1,11 +1,5 @@
-###
-# Hosted on chimera
-# check directory /cluster/chimera/nodes-mngt/icarus-nodes-mngt
-# for flux requirements and deploy
-##
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: icarus-nodes-mngt
 resources:
   - infra
   - cronWorkflows
@@ -13,3 +7,4 @@ resources:
 generatorOptions:
   disableNameSuffixHash: true
 
+

nodes-mngt/icarus-nodes-mngt/workflowTemplates/icarus-ansible-script.yaml

@@ -11,57 +11,25 @@ spec:
   serviceAccountName: argo-runner
   imagePullSecrets:
     - name: oci-mylimbo-infra-icarus-credentials
-  entrypoint: raw-source
+  entrypoint: exec
+
   templates:
-    - name: raw-source
+    - name: exec
       inputs:
         parameters:
           - name: source
-      script:
-        image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest 
-        source: "{{ inputs.parameters.source }}"
-  
-        imagePullPolicy: Always
-        
-        env:
-          - name: ANSIBLE_VAULT_PASSWORD_FILE
-            value: /workspace/secrets/vault-pass.txt
-
-          - name: ANSIBLE_BECOME_PASS
-            valueFrom:
-              secretKeyRef:
-                name: icarus-ansible
-                key: ansible_become_password
-
-        resources:
-          limits:
-            memory: "512Mi"
-            cpu: "500m"
-          requests:
-            memory: "256Mi"
-            cpu: "250m"
-
-        volumeMounts:
-
-          - name: inventory
-            mountPath: /workspace/inventory
-            subPath: inventory
-          - name: icarus-ansible-secrets
-            mountPath: /workspace/secrets/vault-pass.txt
-            subPath: vault-pass.txt
-          - name: icarus-ssh-secrets
-            mountPath: /home/ansible/.ssh
-
-      volumes:
-        - name: inventory
-          image:
-            reference: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest
-            pullPolicy: Always
-
-        - name: icarus-ansible-secrets
-          secret:
-            secretName: icarus-ansible
-
-        - name: icarus-ssh-secrets
-          secret:
-            secretName: icarus-ssh
+      steps:
+        - - name: script-exec
+            templateRef:
+              name: limbo-ansible-collections-global
+              template: raw-source
+            arguments:
+              parameters:
+                - name: source
+                  value: "{{ inputs.parameters.source }}"
+                - name: inventory_image_reference
+                  value: "oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest"
+                - name: ansible_secret_name
+                  value: "icarus-ansible"
+                - name: ssh_secret_name
+                  value: "icarus-ssh"