add mylimbo-ansible-collections-global

cluster/chimera/nodes-mngt/icarus-nodes-mngt/fluxcd-kustomization.yaml

@@ -1,12 +0,0 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: myinfra-kubernetes-shared-icarus-nodes-mngt
-spec:
-  interval: 1m
-  sourceRef:
-    kind: GitRepository
-    name: myinfra-kubernetes-shared
-    namespace: chimera-limbosolutions-com
-  path: nodes-mngt/icarus-nodes-mngt
-  prune: true

cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/.env.d/.gitignore

@@ -1,2 +0,0 @@
-**
-!.gitignore

cluster/chimera/nodes-mngt/icarus-nodes-mngt/secrets/kustomization.yaml

@@ -1,18 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-secretGenerator:
-  - name: icarus-ssh
-    files:
-      - known_hosts=.env.d/icarus-known_hosts
-      - id_rsa=.env.d/icarus-ssh-ansible-id_rsa
-      - id_rsa.pub=.env.d/icarus-ssh-ansible-id_rsa.pub
-  - name: icarus-ansible
-    files:
-      - vault-pass.txt=.env.d/ansible-vault-pass.txt
-      - ansible_become_password=.env.d/ansible_become_password
-generatorOptions:
-  disableNameSuffixHash: true
-
-
-

mylimbo-ansible-collections-global/kustomization.yaml

@@ -1,8 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: icarus-nodes-mngt
 resources:
-  - fluxcd-kustomization.yaml
+  - workflowTemplates
-  - secrets
+generatorOptions:
-
+  disableNameSuffixHash: true
 

mylimbo-ansible-collections-global/workflowTemplates/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - mylimbo-ansible-collections-global-script.yaml
+generatorOptions:
+  disableNameSuffixHash: true
+

mylimbo-ansible-collections-global/workflowTemplates/mylimbo-ansible-collections-global-script.yaml

@@ -0,0 +1,61 @@
+apiVersion: argoproj.io/v1alpha1
+kind: WorkflowTemplate
+metadata:
+  name: mylimbo-ansible-collections-global
+  labels:
+    workflows.argoproj.io/archive-strategy: "false"
+  annotations:
+    workflows.argoproj.io/description: |
+      mylimbo ansible collections global
+spec:
+  entrypoint: raw-source
+  templates:
+    - name: raw-source
+      inputs:
+        parameters:
+          - name: source
+          - name: inventory_image_reference
+          - name: ansible_secret_name
+          - name: ssh_secret_name
+      script:
+        image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest 
+        source: "{{ inputs.parameters.source }}" 
+        env:
+            - name: ANSIBLE_VAULT_PASSWORD_FILE
+              value: /workspace/secrets/vault-pass.txt
+
+            - name: ANSIBLE_BECOME_PASS
+              valueFrom:
+                secretKeyRef:
+                  name: ansible_secrets
+                  key: ansible_become_password
+        resources:
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+          requests:
+            memory: "256Mi"
+            cpu: "250m"
+
+        volumeMounts:
+          - name: inventory
+            mountPath: /workspace/inventory
+            subPath: inventory
+          - name: ansible_secrets
+            mountPath: /workspace/secrets/vault-pass.txt
+            subPath: vault-pass.txt
+          - name: ssh_secrets
+            mountPath: /home/ansible/.ssh
+      volumes:
+        - name: inventory
+          image:
+            reference: "{{ inputs.parameters.inventory_image_reference }}"
+            pullPolicy: Always
+
+        - name: ansible_secrets
+          secret:
+            secretName: "{{ inputs.parameters.ansible_secret_name }}"
+
+        - name: ssh_secrets
+          secret:
+            secretName: "{{ inputs.parameters.ssh_secret_name }}"

nodes-mngt/icarus-nodes-mngt/kustomization.yaml

@@ -1,11 +1,5 @@
-###
-# Hosted on chimera
-# check directory /cluster/chimera/nodes-mngt/icarus-nodes-mngt
-# for flux requirements and deploy
-##
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: icarus-nodes-mngt
 resources:
   - infra
   - cronWorkflows
@@ -13,3 +7,4 @@ resources:
 generatorOptions:
   disableNameSuffixHash: true
 
+

nodes-mngt/icarus-nodes-mngt/workflowTemplates/icarus-ansible-script.yaml

@@ -11,57 +11,25 @@ spec:
   serviceAccountName: argo-runner
   imagePullSecrets:
     - name: oci-mylimbo-infra-icarus-credentials
-  entrypoint: raw-source
+  entrypoint: exec
+
   templates:
-    - name: raw-source
+    - name: exec
       inputs:
         parameters:
           - name: source
-      script:
+      steps:
-        image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest 
+        - - name: script-exec
-        source: "{{ inputs.parameters.source }}"
+            templateRef:
-  
+              name: limbo-ansible-collections-global
-        imagePullPolicy: Always
+              template: raw-source
-        
+            arguments:
-        env:
+              parameters:
-          - name: ANSIBLE_VAULT_PASSWORD_FILE
+                - name: source
-            value: /workspace/secrets/vault-pass.txt
+                  value: "{{ inputs.parameters.source }}"
-
+                - name: inventory_image_reference
-          - name: ANSIBLE_BECOME_PASS
+                  value: "oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest"
-            valueFrom:
+                - name: ansible_secret_name
-              secretKeyRef:
+                  value: "icarus-ansible"
-                name: icarus-ansible
+                - name: ssh_secret_name
-                key: ansible_become_password
+                  value: "icarus-ssh"
-
-        resources:
-          limits:
-            memory: "512Mi"
-            cpu: "500m"
-          requests:
-            memory: "256Mi"
-            cpu: "250m"
-
-        volumeMounts:
-
-          - name: inventory
-            mountPath: /workspace/inventory
-            subPath: inventory
-          - name: icarus-ansible-secrets
-            mountPath: /workspace/secrets/vault-pass.txt
-            subPath: vault-pass.txt
-          - name: icarus-ssh-secrets
-            mountPath: /home/ansible/.ssh
-
-      volumes:
-        - name: inventory
-          image:
-            reference: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest
-            pullPolicy: Always
-
-        - name: icarus-ansible-secrets
-          secret:
-            secretName: icarus-ansible
-
-        - name: icarus-ssh-secrets
-          secret:
-            secretName: icarus-ssh