renamed icarus mngt to hosting mngt

hosting-mngt/workflows/nodes-get-info.yml

@@ -0,0 +1,23 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Workflow
+metadata:
+  generateName: node-get-info-
+  namespace: hosting-mngt
+spec:
+  imagePullSecrets:
+    - name: oci-registry-secret
+  serviceAccountName: argo-runner
+
+  entrypoint: exec
+  templates:
+    - name: exec
+      steps:
+        - - name: script-exec
+            templateRef:
+              name:  hosting-mngt-ansible-script
+              template: raw-source
+            arguments:
+              parameters:
+                - name: source
+                  value: |
+                    ansible-playbook mylimbo.globals.host_maintenance.os_info

hosting-mngt/workflows/nodes-update-os.yml

@@ -0,0 +1,23 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Workflow
+metadata:
+  generateName: nodes-update-os-
+  namespace: hosting-mngt
+spec:
+  imagePullSecrets:
+    - name: oci-registry-secret
+  serviceAccountName: argo-runner
+  entrypoint: exec
+  templates:
+    - name: exec
+      steps:
+        - - name: script-exec
+            templateRef:
+              # /deploy/icarus-mngt
+              name:  hosting-mngt-ansible-script
+              template: raw-source
+            arguments:
+              parameters:
+                - name: source
+                  value: |
+                    ansible-playbook mylimbo.globals.host_maintenance.os_update

hosting-mngt/workflows/tests-ansible-playbook.yaml

@@ -0,0 +1,86 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Workflow
+metadata:
+  namespace: hosting-mngt
+  generateName: tests-ansible-playbook-
+  labels:
+    workflows.argoproj.io/archive-strategy: "false"
+  annotations:
+    workflows.argoproj.io/description: |
+
+spec:
+  entrypoint: exec
+  serviceAccountName: argo-runner
+  imagePullSecrets:
+  - name: oci-registry-secret
+  templates:
+    - name: exec
+      script:
+        image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest 
+        source: |
+         export PATH="$PATH:/opt/tbot"
+         mkdir -p /opt/machine-id
+         tbot start --config=/etc/tbot/tbot.yaml --oneshot
+         ansible-playbook mylimbo.globals.host_maintenance.os_info
+
+        env:
+            - name: ANSIBLE_VAULT_PASSWORD_FILE
+              value: /workspace/secrets/ansible_vault_password
+
+            - name: ANSIBLE_BECOME_PASS
+              valueFrom:
+                secretKeyRef:
+                  name: "ansible-secret"
+                  key: ansible_become_password
+
+            - name: ANSIBLE_SSH_ARGS
+              value: -F /opt/machine-id/ssh_config
+
+            - name: SSH_DOMAIN
+              value: teleport.limbosolutions.com
+         
+        resources:
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+          requests:
+            memory: "256Mi"
+            cpu: "250m"
+
+        volumeMounts:
+
+          - name: inventory
+            mountPath: /workspace/inventory
+            subPath: inventory
+
+          - name: tbot
+            mountPath: /opt/tbot
+            subPath: usr/local/bin
+
+          - name: ansible-secrets
+            mountPath: /workspace/secrets
+
+
+          - name: identity-output
+            mountPath: /opt/machine-id  
+
+          - name: hosting-mngt-tbot-config
+            mountPath: /etc/tbot
+
+      volumes:
+        - name: inventory
+          image:
+            reference: "oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest"
+            pullPolicy: Always
+        - name: tbot
+          image:
+            reference: public.ecr.aws/gravitational/tbot-distroless:18.11.4
+            pullPolicy: Always
+        - name: ansible-secrets
+          secret:
+            secretName: "ansible-secret"
+        - name: identity-output
+          emptyDir: {}
+        - name: hosting-mngt-tbot-config
+          configMap:
+            name: hosting-mngt-tbot-config

hosting-mngt/workflows/tests-download-private-oci.yaml

@@ -0,0 +1,38 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Workflow
+metadata:
+  generateName: tests-download-private-oci-
+  namespace: hosting-mngt  
+  labels:
+    workflows.argoproj.io/archive-strategy: "false"
+  annotations:
+    workflows.argoproj.io/description: |
+      tests
+spec:
+  entrypoint: exec
+  serviceAccountName: argo-runner
+  imagePullSecrets:
+  - name: oci-registry-secret
+  templates:
+    - name: exec
+      script:
+        image: alpine:latest
+        command: ["sh"] 
+        source: |
+          #!/bin/sh
+          ls -lah /mnt
+        resources:
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+          requests:
+            memory: "256Mi"
+            cpu: "250m"
+        volumeMounts:
+          - name: oci-image
+            mountPath: /mnt
+      volumes:
+      - name: oci-image
+        image:
+          reference: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest 
+          pullPolicy: Always      

hosting-mngt/workflows/tests-mylimbo-ansible-collections-global-tbot-script.yaml

@@ -0,0 +1,30 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Workflow
+metadata:
+  namespace: hosting-mngt  
+  generateName: tests-mylimbo-ansible-collections-global-tbot-script-
+spec:
+  imagePullSecrets:
+    - name: oci-registry-secret
+  entrypoint: exec
+  serviceAccountName: argo-runner
+  templates:
+    - name: exec
+      steps:
+        - - name: script-exec
+            templateRef:
+              name: mylimbo-ansible-collections-global-tbot
+              template: raw-source
+            arguments:
+              parameters:
+                - name: tbot_configmap_name
+                  value: hosting-mngt-tbot-config
+                - name: inventory_image_reference
+                  value: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest
+                - name: ansible_secret_name
+                  value: ansible-secret
+                - name: source
+                  value: |
+                    ansible-playbook mylimbo.globals.host_maintenance.os_info
+
+

hosting-mngt/workflows/tests-teleport-tbot.yaml

@@ -0,0 +1,40 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Workflow
+metadata:
+  generateName: tests-teleport-tbot-
+  namespace: hosting-mngt  
+spec:
+  entrypoint: exec
+  serviceAccountName: argo-runner
+  templates:
+    - name: exec
+      volumes:
+        - name: identity-output
+          emptyDir: {}
+        - name: hosting-mngt-tbot-config
+          configMap:
+            name: hosting-mngt-tbot-config
+            
+      container:
+        image: alpine
+        command: [sh, -c]
+        args: 
+          - |
+              ls -lah /opt/machine-id
+        volumeMounts:
+          - name: identity-output
+            mountPath: /opt/machine-id
+
+      initContainers:
+        - name: get-identity
+          image: public.ecr.aws/gravitational/teleport-distroless:18.11.4
+          command: ["tbot"]
+          args: 
+            - "start"
+            - "--config=/config/tbot.yaml"
+            - "--oneshot"
+          volumeMounts:
+            - name: identity-output
+              mountPath: /opt/machine-id
+            - name: hosting-mngt-tbot-config
+              mountPath: /config