From d46c3bc203bd3c1d08fe9ea7b8ceff16f147336a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?M=C3=A1rcio=20Fernandes?= Date: Fri, 2 Oct 2026 23:54:53 +0000 Subject: [PATCH] srv-vlan mngt prep --- .../srv-vlan-mngt/fluxcd-kustomization.yaml | 12 +++++++ deploy/flux/srv-vlan-mngt/kustomization.yaml | 9 ++++++ .../fluxcd-kustomization.yaml | 12 +++++++ .../kustomization.yaml | 8 +++++ deploy/flux/srv-vlan-mngt/namespace.yaml | 6 ++++ .../srv-vlan-mngt/secrets/.env.d/.gitignore | 2 ++ .../srv-vlan-mngt/secrets/kustomization.yaml | 19 ++++++++++++ .../srv-vlan-mngt/infra/argo-runner-sa.yaml | 31 +++++++++++++++++++ deploy/srv-vlan-mngt/infra/kustomization.yaml | 7 +++++ deploy/srv-vlan-mngt/kustomization.yaml | 9 ++++++ icarus-mngt/workflows/nodes-update-os.yml | 2 +- 11 files changed, 116 insertions(+), 1 deletion(-) create mode 100644 deploy/flux/srv-vlan-mngt/fluxcd-kustomization.yaml create mode 100644 deploy/flux/srv-vlan-mngt/kustomization.yaml create mode 100644 deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/fluxcd-kustomization.yaml create mode 100644 deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/kustomization.yaml create mode 100644 deploy/flux/srv-vlan-mngt/namespace.yaml create mode 100644 deploy/flux/srv-vlan-mngt/secrets/.env.d/.gitignore create mode 100644 deploy/flux/srv-vlan-mngt/secrets/kustomization.yaml create mode 100644 deploy/srv-vlan-mngt/infra/argo-runner-sa.yaml create mode 100644 deploy/srv-vlan-mngt/infra/kustomization.yaml create mode 100644 deploy/srv-vlan-mngt/kustomization.yaml diff --git a/deploy/flux/srv-vlan-mngt/fluxcd-kustomization.yaml b/deploy/flux/srv-vlan-mngt/fluxcd-kustomization.yaml new file mode 100644 index 0000000..8bcf7e4 --- /dev/null +++ b/deploy/flux/srv-vlan-mngt/fluxcd-kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: srv-vlan-nodes-mngt +spec: + interval: 1m + sourceRef: + kind: GitRepository + name: nodes-mngt + namespace: chimera-limbosolutions-com + path: deploy/srv-vlan-mngt + prune: true diff --git a/deploy/flux/srv-vlan-mngt/kustomization.yaml b/deploy/flux/srv-vlan-mngt/kustomization.yaml new file mode 100644 index 0000000..cedd517 --- /dev/null +++ b/deploy/flux/srv-vlan-mngt/kustomization.yaml @@ -0,0 +1,9 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: srv-vlan-node-mngt +resources: + - namespace.yaml + - secrets + - mylimbo-ansible-collections-global + - fluxcd-kustomization.yaml + diff --git a/deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/fluxcd-kustomization.yaml b/deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/fluxcd-kustomization.yaml new file mode 100644 index 0000000..534c8fe --- /dev/null +++ b/deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/fluxcd-kustomization.yaml @@ -0,0 +1,12 @@ +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: mylimbo-ansible-collections-global +spec: + interval: 1m + sourceRef: + kind: GitRepository + name: myinfra-kubernetes-shared + namespace: chimera-limbosolutions-com + path: mylimbo-ansible-collections-global + prune: true diff --git a/deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/kustomization.yaml b/deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/kustomization.yaml new file mode 100644 index 0000000..d57f51e --- /dev/null +++ b/deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/kustomization.yaml @@ -0,0 +1,8 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: srv-vlan-node-mngt +resources: + - fluxcd-kustomization.yaml + + + diff --git a/deploy/flux/srv-vlan-mngt/namespace.yaml b/deploy/flux/srv-vlan-mngt/namespace.yaml new file mode 100644 index 0000000..fafd82e --- /dev/null +++ b/deploy/flux/srv-vlan-mngt/namespace.yaml @@ -0,0 +1,6 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: srv-vlan-node-mngt + labels: + name: srv-vlan-node-mngt \ No newline at end of file diff --git a/deploy/flux/srv-vlan-mngt/secrets/.env.d/.gitignore b/deploy/flux/srv-vlan-mngt/secrets/.env.d/.gitignore new file mode 100644 index 0000000..d29675e --- /dev/null +++ b/deploy/flux/srv-vlan-mngt/secrets/.env.d/.gitignore @@ -0,0 +1,2 @@ +** +!.gitignore \ No newline at end of file diff --git a/deploy/flux/srv-vlan-mngt/secrets/kustomization.yaml b/deploy/flux/srv-vlan-mngt/secrets/kustomization.yaml new file mode 100644 index 0000000..8779eda --- /dev/null +++ b/deploy/flux/srv-vlan-mngt/secrets/kustomization.yaml @@ -0,0 +1,19 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +secretGenerator: + - name: core-network-ssh + files: + - known_hosts=.env.d/core-network-known_hosts + - id_rsa=.env.d/core-network-ssh-ansible-id_rsa + - id_rsa.pub=.env.d/core-network-ssh-ansible-id_rsa.pub + + - name: core-network-ansible + files: + - vault-pass.txt=.env.d/ansible-vault-pass.txt + - ansible_become_password=.env.d/ansible-become-password + +generatorOptions: + disableNameSuffixHash: true + + + diff --git a/deploy/srv-vlan-mngt/infra/argo-runner-sa.yaml b/deploy/srv-vlan-mngt/infra/argo-runner-sa.yaml new file mode 100644 index 0000000..5436fca --- /dev/null +++ b/deploy/srv-vlan-mngt/infra/argo-runner-sa.yaml @@ -0,0 +1,31 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: argo-runner +--- + +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: argo-runner-role +rules: + - apiGroups: ["argoproj.io"] + resources: ["workflows", "workflowtasksets", "workflowtaskresults"] + verbs: ["*"] + - apiGroups: [""] + resources: ["pods", "pods/log"] + verbs: ["get", "list", "watch", "create", "update", "patch"] + +--- + +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: argo-runner-rb +subjects: + - kind: ServiceAccount + name: argo-runner +roleRef: + kind: Role + name: argo-runner-role + apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/deploy/srv-vlan-mngt/infra/kustomization.yaml b/deploy/srv-vlan-mngt/infra/kustomization.yaml new file mode 100644 index 0000000..66d6028 --- /dev/null +++ b/deploy/srv-vlan-mngt/infra/kustomization.yaml @@ -0,0 +1,7 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - argo-runner-sa.yaml +generatorOptions: + disableNameSuffixHash: true + diff --git a/deploy/srv-vlan-mngt/kustomization.yaml b/deploy/srv-vlan-mngt/kustomization.yaml new file mode 100644 index 0000000..588a356 --- /dev/null +++ b/deploy/srv-vlan-mngt/kustomization.yaml @@ -0,0 +1,9 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: srv-vlan-nodes-mngt +resources: + - infra +generatorOptions: + disableNameSuffixHash: true + + diff --git a/icarus-mngt/workflows/nodes-update-os.yml b/icarus-mngt/workflows/nodes-update-os.yml index 323eb69..f064b8c 100644 --- a/icarus-mngt/workflows/nodes-update-os.yml +++ b/icarus-mngt/workflows/nodes-update-os.yml @@ -11,7 +11,7 @@ spec: steps: - - name: script-exec templateRef: - # https://git.limbosolutions.com/myLimbo/myinfra.kubernetes.shared + # /deploy/icarus-mngt name: icarus-ansible-script template: raw-source arguments: