kind: bot
version: v1
metadata:
  # name is a unique identifier for the Bot in the cluster.
  name: icarus-nodes-mngt
spec:
  roles: []

---


kind: role
version: v6
metadata:
  name: icarus-nodes-mngt # use the auto created bot role (created by bot yaml)
spec:
  allow:
    # Allow login to the user 'ansible'.
    logins: ['ansible']
    # Allow connection to any node. Adjust these labels to match only nodes
    # that Ansible needs to access.
    node_labels:
      '*': '*'

---

kind: token
version: v2
metadata:
    name: icarus-nodes-mngt
spec:
    roles: [Bot]
    bot_name: icarus-nodes-mngt
    join_method: kubernetes
    kubernetes:
        allow:
          - service_account: icarus-nodes-mngt:argo-runner