62 lines
1.8 KiB
YAML
62 lines
1.8 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: WorkflowTemplate
|
|
metadata:
|
|
name: mylimbo-ansible-collections-global
|
|
labels:
|
|
workflows.argoproj.io/archive-strategy: "false"
|
|
annotations:
|
|
workflows.argoproj.io/description: |
|
|
mylimbo ansible collections global
|
|
spec:
|
|
entrypoint: raw-source
|
|
templates:
|
|
- name: raw-source
|
|
inputs:
|
|
parameters:
|
|
- name: source
|
|
- name: inventory_image_reference
|
|
- name: ansible_secret_name
|
|
- name: ssh_secret_name
|
|
script:
|
|
image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest
|
|
source: "{{ inputs.parameters.source }}"
|
|
env:
|
|
- name: ANSIBLE_VAULT_PASSWORD_FILE
|
|
value: /workspace/secrets/vault-pass.txt
|
|
|
|
- name: ANSIBLE_BECOME_PASS
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ansible_secrets
|
|
key: ansible_become_password
|
|
resources:
|
|
limits:
|
|
memory: "512Mi"
|
|
cpu: "500m"
|
|
requests:
|
|
memory: "256Mi"
|
|
cpu: "250m"
|
|
|
|
volumeMounts:
|
|
- name: inventory
|
|
mountPath: /workspace/inventory
|
|
subPath: inventory
|
|
- name: ansible-secrets
|
|
mountPath: /workspace/secrets/vault-pass.txt
|
|
subPath: vault-pass.txt
|
|
- name: ssh-secrets
|
|
mountPath: /home/ansible/.ssh
|
|
volumes:
|
|
- name: inventory
|
|
image:
|
|
reference: "{{ inputs.parameters.inventory_image_reference }}"
|
|
pullPolicy: Always
|
|
|
|
- name: ansible-secrets
|
|
secret:
|
|
secretName: "{{ inputs.parameters.ansible_secret_name }}"
|
|
|
|
- name: ssh-secrets
|
|
secret:
|
|
secretName: "{{ inputs.parameters.ssh_secret_name }}"
|