node-mngt: icarus, CronWorkflow crictl-prune, WorkflowTemplate icarus-ansible-script

2026-09-26 08:52:07 +00:00
1 parent 2d1f8d12ed
commit 8d517c62cd
@@ -0,0 +1,67 @@
+apiVersion: argoproj.io/v1alpha1
+kind: WorkflowTemplate
+metadata:
+  name: icarus-ansible-script
+  labels:
+    workflows.argoproj.io/archive-strategy: "false"
+  annotations:
+    workflows.argoproj.io/description: |
+      icarus ansible script
+spec:
+  serviceAccountName: argo-runner
+  imagePullSecrets:
+    - name: oci-mylimbo-infra-icarus-credentials
+  entrypoint: raw-source
+  templates:
+    - name: raw-source
+      inputs:
+        parameters:
+          - name: source
+      script:
+        image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest 
+        source: "{{ inputs.parameters.source }}"
+  
+        imagePullPolicy: Always
+        
+        env:
+          - name: ANSIBLE_VAULT_PASSWORD_FILE
+            value: /workspace/secrets/vault-pass.txt
+
+          - name: ANSIBLE_BECOME_PASS
+            valueFrom:
+              secretKeyRef:
+                name: icarus-ansible
+                key: ansible_become_password
+
+        resources:
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+          requests:
+            memory: "256Mi"
+            cpu: "250m"
+
+        volumeMounts:
+
+          - name: inventory
+            mountPath: /workspace/inventory
+            subPath: inventory
+          - name: icarus-ansible-secrets
+            mountPath: /workspace/secrets/vault-pass.txt
+            subPath: vault-pass.txt
+          - name: icarus-ssh-secrets
+            mountPath: /home/ansible/.ssh
+
+      volumes:
+        - name: inventory
+          image:
+            reference: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest
+            pullPolicy: Always
+
+        - name: icarus-ansible-secrets
+          secret:
+            secretName: icarus-ansible
+
+        - name: icarus-ssh-secrets
+          secret:
+            secretName: icarus-ssh