deployment-ansible.yml

kind: ConfigMap
apiVersion: v1
metadata:
  name: debug-ansible
data:
  # GIT_USER: auth_user # optional
  # GIT_TOKEN: auth_token # optional
  # GIT_BRANCH: git_branch # optional
  GIT_REPO: github.com/dnum-mi/dso-playbooks.git
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: debug-ansible-sa
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: debug-ansible-cluster-role
rules:
- apiGroups:
  - ""
  - user.openshift.io
  - rbac.authorization.k8s.io
  - argoproj.io
  resources:
  - '*'
  verbs:
  - '*'
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: debug-clusterole-binding
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: debug-ansible-cluster-role
subjects:
- kind: ServiceAccount
  name: debug-ansible-sa
  namespace: openshift-operators
---
apiVersion: v1
kind: Pod
metadata:
  name: "debug-ansible"
  labels:
    app: "debug-ansible"
spec:
  serviceAccountName: debug-ansible-sa
  containers:
  - name: debug-ansible
    image: "ghcr.io/dnum-mi/dso-ansible-pod:main"
    command:
      - sleep
      - "3600"
    resources:
      limits:
        cpu: 1000m
        memory: 1000Mi
      requests:
        cpu: 100m
        memory: 200Mi
    envFrom:
    - configMapRef:
        name: debug-ansible
    volumeMounts:
    - name: playbooks
      mountPath: /dso/
    - name: inventory
      mountPath: /dso/inventory/group_vars/
  volumes:
  - name: playbooks
    emptyDir:
      sizeLimit: 1000M
  - name: inventory
    configMap:
      name: ansible-inventory
  restartPolicy: Never