apiVersion: argoproj.io/v1alpha1
kind: WorkflowTemplate
metadata:
  name: mylimbo-ansible-collections-global
  labels:
    workflows.argoproj.io/archive-strategy: "false"
  annotations:
    workflows.argoproj.io/description: |
      mylimbo ansible collections global
spec:
  entrypoint: raw-source
  templates:
    - name: raw-source
      inputs:
        parameters:
          - name: source
          - name: inventory_image_reference
          - name: ansible_secret_name
          - name: ssh_secret_name
      script:
        image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest 
        source: "{{ inputs.parameters.source }}" 
        env:
            - name: ANSIBLE_VAULT_PASSWORD_FILE
              value: /workspace/secrets/vault-pass.txt

            - name: ANSIBLE_BECOME_PASS
              valueFrom:
                secretKeyRef:
                  name: ansible_secrets
                  key: ansible_become_password
        resources:
          limits:
            memory: "512Mi"
            cpu: "500m"
          requests:
            memory: "256Mi"
            cpu: "250m"

        volumeMounts:
          - name: inventory
            mountPath: /workspace/inventory
            subPath: inventory
          - name: ansible_secrets
            mountPath: /workspace/secrets/vault-pass.txt
            subPath: vault-pass.txt
          - name: ssh_secrets
            mountPath: /home/ansible/.ssh
      volumes:
        - name: inventory
          image:
            reference: "{{ inputs.parameters.inventory_image_reference }}"
            pullPolicy: Always

        - name: ansible_secrets
          secret:
            secretName: "{{ inputs.parameters.ansible_secret_name }}"

        - name: ssh_secrets
          secret:
            secretName: "{{ inputs.parameters.ssh_secret_name }}"