icarus mng start using tbot

deploy/flux/icarus-mngt/secrets/kustomization.yaml

@@ -2,19 +2,14 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: icarus-nodes-mngt
 secretGenerator:
-  - name: icarus-ssh
-    files:
-      - known_hosts=.env.d/icarus-known_hosts
-      - id_rsa=.env.d/icarus-ssh-ansible-id_rsa
-      - id_rsa.pub=.env.d/icarus-ssh-ansible-id_rsa.pub
   - name: icarus-ansible
     files:
-      - vault_password=.env.d/ansible_vault_password
+      - ansible_vault_password=.env.d/ansible_vault_password
       - ansible_become_password=.env.d/ansible_become_password
   - name: oci-registry-secret
     type: kubernetes.io/dockerconfigjson
     files:
-      - .dockerconfigjson=.env.d/oci-registry-secret.json
+      - .dockerconfigjson=.env.d/oci_registry_secret.json
 generatorOptions:
   disableNameSuffixHash: true
 

deploy/icarus-mngt/cronWorkflows/crictl-prune.yaml

@@ -10,11 +10,10 @@ spec:
   successfulJobsHistoryLimit: 3 
   failedJobsHistoryLimit: 5  
   workflowSpec:
-    entrypoint: exec
-    serviceAccountName: argo-runner
     imagePullSecrets:
-      - name: oci-mylimbo-infra-icarus-credentials
-    
+      - name: oci-registry-secret
+    serviceAccountName: argo-runner
+    entrypoint: exec    
     templates:
       - name: exec
         steps:

deploy/icarus-mngt/workflowTemplates/icarus-ansible-script.yaml

@@ -8,18 +8,6 @@ metadata:
     workflows.argoproj.io/description: |
       icarus ansible script
 spec:
-  serviceAccountName: argo-runner
-  imagePullSecrets:
-    - name: oci-registry-secret
-    
-    # path set ssh / teleport domain
-  podSpecPatch: |
-    containers:
-      - name: main
-        env:
-          - name: SSH_DOMAIN
-            value: teleport.limbosolutions.com
-  
   entrypoint: raw-source
   templates:
     - name: raw-source
@@ -40,4 +28,6 @@ spec:
                 - name: inventory_image_reference
                   value: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest
                 - name: ansible_secret_name
-                  value: "icarus-ansible"
+                  value: icarus-ansible
+                - name: ssh_domain
+                  value: teleport.limbosolutions.com