repo created

deploy/icarus-mngt/cronWorkflows/crictl-prune.yaml

@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: CronWorkflow
+metadata:
+  name: crictl-prune
+  namespace: icarus-nodes-mngt
+spec:
+  schedules:
+    -  "0 0 * * *"
+  concurrencyPolicy: "Forbid" 
+  successfulJobsHistoryLimit: 3 
+  failedJobsHistoryLimit: 5  
+  workflowSpec:
+    entrypoint: exec
+    serviceAccountName: argo-runner
+    imagePullSecrets:
+      - name: oci-mylimbo-infra-icarus-credentials
+    
+    templates:
+      - name: exec
+        steps:
+          - - name: script-exec
+              templateRef:
+                name: icarus-ansible-script
+                template: raw-source
+              arguments:
+                parameters:
+                  - name: source
+                    value: |
+                      ansible-playbook mylimbo.globals.k3s.crictl_prune

deploy/icarus-mngt/cronWorkflows/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - crictl-prune.yaml
+generatorOptions:
+  disableNameSuffixHash: true

deploy/icarus-mngt/infra/argo-runner-sa.yaml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: argo-runner
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: argo-runner-role
+rules:
+  - apiGroups: ["argoproj.io"]
+    resources: ["workflows", "workflowtasksets", "workflowtaskresults"]
+    verbs: ["*"]
+  - apiGroups: [""]
+    resources: ["pods", "pods/log"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: argo-runner-rb
+subjects:
+  - kind: ServiceAccount
+    name: argo-runner
+roleRef:
+  kind: Role
+  name: argo-runner-role
+  apiGroup: rbac.authorization.k8s.io

deploy/icarus-mngt/infra/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - argo-runner-sa.yaml
+generatorOptions:
+  disableNameSuffixHash: true
+

deploy/icarus-mngt/kustomization.yaml

@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: icarus-nodes-mngt
+resources:
+  - infra
+  - cronWorkflows
+  - workflowTemplates
+generatorOptions:
+  disableNameSuffixHash: true
+
+

deploy/icarus-mngt/workflowTemplates/icarus-ansible-script.yaml

@@ -0,0 +1,35 @@
+apiVersion: argoproj.io/v1alpha1
+kind: WorkflowTemplate
+metadata:
+  name: icarus-ansible-script
+  labels:
+    workflows.argoproj.io/archive-strategy: "false"
+  annotations:
+    workflows.argoproj.io/description: |
+      icarus ansible script
+spec:
+  serviceAccountName: argo-runner
+  imagePullSecrets:
+    - name: oci-mylimbo-infra-icarus-credentials
+  entrypoint: raw-source
+
+  templates:
+    - name: raw-source
+      inputs:
+        parameters:
+          - name: source
+      steps:
+        - - name: invoke-limbo-ansible-collections-global
+            templateRef:
+              name: mylimbo-ansible-collections-global
+              template: raw-source
+            arguments:
+              parameters:
+                - name: source
+                  value: "{{ inputs.parameters.source }}"
+                - name: inventory_image_reference
+                  value: "oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest"
+                - name: ansible_secret_name
+                  value: "icarus-ansible"
+                - name: ssh_secret_name
+                  value: "icarus-ssh"

deploy/icarus-mngt/workflowTemplates/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - icarus-ansible-script.yaml
+generatorOptions:
+  disableNameSuffixHash: true
+