apiVersion: argoproj.io/v1alpha1
kind: WorkflowTemplate
metadata:
  name: icarus-ansible-script
  labels:
    workflows.argoproj.io/archive-strategy: "false"
  annotations:
    workflows.argoproj.io/description: |
      icarus ansible script
spec:
  serviceAccountName: argo-runner
  imagePullSecrets:
    - name: oci-mylimbo-infra-icarus-credentials
  entrypoint: raw-source
  templates:
    - name: raw-source
      inputs:
        parameters:
          - name: source
      script:
        image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest 
        source: "{{ inputs.parameters.source }}"
  
        imagePullPolicy: Always
        
        env:
          - name: ANSIBLE_VAULT_PASSWORD_FILE
            value: /workspace/secrets/vault-pass.txt

          - name: ANSIBLE_BECOME_PASS
            valueFrom:
              secretKeyRef:
                name: icarus-ansible
                key: ansible_become_password

        resources:
          limits:
            memory: "512Mi"
            cpu: "500m"
          requests:
            memory: "256Mi"
            cpu: "250m"

        volumeMounts:

          - name: inventory
            mountPath: /workspace/inventory
            subPath: inventory
          - name: icarus-ansible-secrets
            mountPath: /workspace/secrets/vault-pass.txt
            subPath: vault-pass.txt
          - name: icarus-ssh-secrets
            mountPath: /home/ansible/.ssh

      volumes:
        - name: inventory
          image:
            reference: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest
            pullPolicy: Always

        - name: icarus-ansible-secrets
          secret:
            secretName: icarus-ansible

        - name: icarus-ssh-secrets
          secret:
            secretName: icarus-ssh