srv-vlan mngt prep

deploy/flux/srv-vlan-mngt/fluxcd-kustomization.yaml

@@ -0,0 +1,12 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: srv-vlan-nodes-mngt
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: nodes-mngt
+    namespace: chimera-limbosolutions-com
+  path: deploy/srv-vlan-mngt
+  prune: true

deploy/flux/srv-vlan-mngt/kustomization.yaml

@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: srv-vlan-node-mngt
+resources:
+  - namespace.yaml
+  - secrets
+  - mylimbo-ansible-collections-global
+  - fluxcd-kustomization.yaml
+

deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/fluxcd-kustomization.yaml

@@ -0,0 +1,12 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: mylimbo-ansible-collections-global
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: myinfra-kubernetes-shared
+    namespace: chimera-limbosolutions-com
+  path: mylimbo-ansible-collections-global
+  prune: true

deploy/flux/srv-vlan-mngt/mylimbo-ansible-collections-global/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: srv-vlan-node-mngt
+resources:
+  - fluxcd-kustomization.yaml
+
+
+

deploy/flux/srv-vlan-mngt/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: srv-vlan-node-mngt
+  labels:
+    name: srv-vlan-node-mngt

deploy/flux/srv-vlan-mngt/secrets/.env.d/.gitignore

@@ -0,0 +1,2 @@
+**
+!.gitignore

deploy/flux/srv-vlan-mngt/secrets/kustomization.yaml

@@ -0,0 +1,19 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+secretGenerator:
+  - name: core-network-ssh
+    files:
+      - known_hosts=.env.d/core-network-known_hosts
+      - id_rsa=.env.d/core-network-ssh-ansible-id_rsa
+      - id_rsa.pub=.env.d/core-network-ssh-ansible-id_rsa.pub
+  
+  - name: core-network-ansible
+    files:
+      - vault-pass.txt=.env.d/ansible-vault-pass.txt
+      - ansible_become_password=.env.d/ansible-become-password
+
+generatorOptions:
+  disableNameSuffixHash: true
+
+
+

deploy/srv-vlan-mngt/infra/argo-runner-sa.yaml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: argo-runner
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: argo-runner-role
+rules:
+  - apiGroups: ["argoproj.io"]
+    resources: ["workflows", "workflowtasksets", "workflowtaskresults"]
+    verbs: ["*"]
+  - apiGroups: [""]
+    resources: ["pods", "pods/log"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: argo-runner-rb
+subjects:
+  - kind: ServiceAccount
+    name: argo-runner
+roleRef:
+  kind: Role
+  name: argo-runner-role
+  apiGroup: rbac.authorization.k8s.io

deploy/srv-vlan-mngt/infra/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - argo-runner-sa.yaml
+generatorOptions:
+  disableNameSuffixHash: true
+

deploy/srv-vlan-mngt/kustomization.yaml

@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: srv-vlan-nodes-mngt
+resources:
+  - infra
+generatorOptions:
+  disableNameSuffixHash: true
+
+

icarus-mngt/workflows/nodes-update-os.yml

@@ -11,7 +11,7 @@ spec:
       steps:
         - - name: script-exec
             templateRef:
-              # https://git.limbosolutions.com/myLimbo/myinfra.kubernetes.shared
+              # /deploy/icarus-mngt
               name: icarus-ansible-script
               template: raw-source
             arguments: