68 lines
1.8 KiB
YAML
68 lines
1.8 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: WorkflowTemplate
|
|
metadata:
|
|
name: icarus-ansible-script
|
|
labels:
|
|
workflows.argoproj.io/archive-strategy: "false"
|
|
annotations:
|
|
workflows.argoproj.io/description: |
|
|
icarus ansible script
|
|
spec:
|
|
serviceAccountName: argo-runner
|
|
imagePullSecrets:
|
|
- name: oci-mylimbo-infra-icarus-credentials
|
|
entrypoint: raw-source
|
|
templates:
|
|
- name: raw-source
|
|
inputs:
|
|
parameters:
|
|
- name: source
|
|
script:
|
|
image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest
|
|
source: "{{ inputs.parameters.source }}"
|
|
|
|
imagePullPolicy: Always
|
|
|
|
env:
|
|
- name: ANSIBLE_VAULT_PASSWORD_FILE
|
|
value: /workspace/secrets/vault-pass.txt
|
|
|
|
- name: ANSIBLE_BECOME_PASS
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: icarus-ansible
|
|
key: ansible_become_password
|
|
|
|
resources:
|
|
limits:
|
|
memory: "512Mi"
|
|
cpu: "500m"
|
|
requests:
|
|
memory: "256Mi"
|
|
cpu: "250m"
|
|
|
|
volumeMounts:
|
|
|
|
- name: inventory
|
|
mountPath: /workspace/inventory
|
|
subPath: inventory
|
|
- name: icarus-ansible-secrets
|
|
mountPath: /workspace/secrets/vault-pass.txt
|
|
subPath: vault-pass.txt
|
|
- name: icarus-ssh-secrets
|
|
mountPath: /home/ansible/.ssh
|
|
|
|
volumes:
|
|
- name: inventory
|
|
image:
|
|
reference: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest
|
|
pullPolicy: Always
|
|
|
|
- name: icarus-ansible-secrets
|
|
secret:
|
|
secretName: icarus-ansible
|
|
|
|
- name: icarus-ssh-secrets
|
|
secret:
|
|
secretName: icarus-ssh
|