Márcio Fernandes
eb6414bb12
new file: clusters/chimera/kustomization.yaml new file: clusters/chimera/monitoring/fluxcd-kustomization.yaml new file: clusters/chimera/monitoring/kustomization.yaml new file: clusters/chimera/repos/kustomization.yaml new file: clusters/chimera/repos/repos.yaml modified: mylimbo-ansible-collections-global/workflowTemplates/kustomization.yaml new file: mylimbo-ansible-collections-global/workflowTemplates/mylimbo-ansible-collections-global-tbot-script.yaml
79 lines
2.5 KiB
YAML
79 lines
2.5 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: WorkflowTemplate
|
|
metadata:
|
|
name: mylimbo-ansible-collections-global-tbot
|
|
labels:
|
|
workflows.argoproj.io/archive-strategy: "false"
|
|
annotations:
|
|
workflows.argoproj.io/description: |
|
|
mylimbo ansible collections global
|
|
spec:
|
|
entrypoint: raw-source
|
|
templates:
|
|
- name: raw-source
|
|
inputs:
|
|
parameters:
|
|
- name: source
|
|
- name: inventory_image_reference
|
|
- name: ansible_secret_name
|
|
- name: tbot_configmap_name
|
|
script:
|
|
image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest
|
|
source: |
|
|
export PATH="$PATH:/opt/tbot"
|
|
mkdir -p /opt/machine-id
|
|
tbot start --config=/etc/tbot/tbot.yaml --oneshot
|
|
{{ inputs.parameters.source }}
|
|
env:
|
|
- name: ANSIBLE_VAULT_PASSWORD_FILE
|
|
value: /workspace/secrets/vault_password
|
|
|
|
- name: ANSIBLE_SSH_ARGS
|
|
value: -F /opt/machine-id/ssh_config
|
|
|
|
- name: SSH_DOMAIN
|
|
value: teleport.limbosolutions.com
|
|
|
|
- name: ANSIBLE_BECOME_PASS
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: "{{ inputs.parameters.ansible_secret_name }}"
|
|
key: ansible_become_password
|
|
resources:
|
|
limits:
|
|
memory: "512Mi"
|
|
cpu: "500m"
|
|
requests:
|
|
memory: "256Mi"
|
|
cpu: "250m"
|
|
|
|
volumeMounts:
|
|
- name: inventory
|
|
mountPath: /workspace/inventory
|
|
subPath: inventory
|
|
- name: tbot
|
|
mountPath: /opt/tbot
|
|
subPath: usr/local/bin
|
|
- name: ansible-secrets
|
|
mountPath: /workspace/secrets
|
|
- name: tbot-config
|
|
mountPath: /etc/tbot
|
|
- name: identity-output
|
|
mountPath: /opt/machine-id
|
|
volumes:
|
|
- name: tbot
|
|
image:
|
|
reference: public.ecr.aws/gravitational/tbot-distroless:18.11.4
|
|
pullPolicy: Always
|
|
- name: inventory
|
|
image:
|
|
reference: "{{ inputs.parameters.inventory_image_reference }}"
|
|
pullPolicy: Always
|
|
- name: ansible-secrets
|
|
secret:
|
|
secretName: "{{ inputs.parameters.ansible_secret_name }}"
|
|
- name: tbot-config
|
|
configMap:
|
|
name: "{{ inputs.parameters.tbot_configmap_name }}"
|
|
- name: identity-output
|
|
emptyDir: {} |