thesabear
c05c7164c8
rocky-docker-lxc/, caddy-vm/, monitoring-vm/ (was missing entirely -
Grafana+Loki+Prometheus stack, refreshed and CA mount stripped same as
everything else), and automation/{ansible,automation-vm,iac}/ for the
three repos that live on the automation VM. Hawser is genuinely
deployed on all three of caddy-vm/monitoring-vm/automation-vm so it's
duplicated in each rather than picking one canonical home.
Old Ansible/ and "Infrastrucutre as Code/" content moved under
automation/ansible/old-playbooks and automation/iac/old-content as-is
for now - contents still need refreshing against the current repos and
a per-folder README, that's the next pass.
109 lines
2.6 KiB
Terraform
109 lines
2.6 KiB
Terraform
locals {
|
|
ansible_repo_path = var.ansible_repo_path != "" ? var.ansible_repo_path : "${path.module}/../ansible"
|
|
}
|
|
|
|
resource "proxmox_vm_qemu" "vm" {
|
|
for_each = var.vms
|
|
agent = 1
|
|
skip_ipv6 = true
|
|
vmid = each.value.vmid
|
|
name = each.value.name
|
|
target_node = each.value.target_node
|
|
clone = each.value.template
|
|
onboot = each.value.onboot
|
|
os_type = "other"
|
|
|
|
cpu {
|
|
type = "host"
|
|
numa = true
|
|
cores = each.value.cores
|
|
sockets = each.value.sockets
|
|
}
|
|
|
|
memory = each.value.memory
|
|
balloon = 0
|
|
scsihw = "virtio-scsi-pci"
|
|
bootdisk = "scsi0"
|
|
|
|
disk {
|
|
slot = "scsi0"
|
|
type = "disk"
|
|
storage = each.value.disk_storage
|
|
size = each.value.disk_size
|
|
format = "qcow2"
|
|
discard = true
|
|
}
|
|
|
|
network {
|
|
id = 0
|
|
bridge = each.value.bridge
|
|
model = "virtio"
|
|
macaddr = each.value.macaddr
|
|
tag = each.value.vlan != 0 ? each.value.vlan : null
|
|
}
|
|
|
|
lifecycle {
|
|
ignore_changes = [
|
|
usb,
|
|
]
|
|
}
|
|
|
|
serial {
|
|
id = 0
|
|
}
|
|
|
|
tags = length(each.value.tags) > 0 ? join(",", each.value.tags) : null
|
|
}
|
|
|
|
resource "null_resource" "wait_for_ssh" {
|
|
for_each = var.vms
|
|
depends_on = [proxmox_vm_qemu.vm]
|
|
|
|
connection {
|
|
type = "ssh"
|
|
host = each.value.ip
|
|
user = "ansible"
|
|
private_key = file("~/.ssh/auto")
|
|
timeout = "5m"
|
|
}
|
|
|
|
provisioner "local-exec" {
|
|
command = <<EOT
|
|
echo "Waiting for SSH on ${each.value.ip}..."
|
|
for i in {1..30}; do
|
|
if ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 -i ~/.ssh/auto ansible@${each.value.ip} 'echo SSH Ready' >/dev/null 2>&1; then
|
|
echo "✅ SSH is up!"
|
|
exit 0
|
|
fi
|
|
echo "Retry $i: SSH not ready yet..."
|
|
sleep 10
|
|
done
|
|
echo "❌ SSH did not become available on ${each.value.ip} after timeout."
|
|
exit 1
|
|
EOT
|
|
}
|
|
}
|
|
|
|
resource "local_file" "host_tags" {
|
|
for_each = var.vms
|
|
|
|
content = templatefile("${path.module}/host_tags.yml.tpl", {
|
|
vmid = each.value.vmid
|
|
name = each.value.name
|
|
target_node = each.value.target_node
|
|
template = each.value.template
|
|
cores = each.value.cores
|
|
sockets = each.value.sockets
|
|
memory = each.value.memory
|
|
bridge = each.value.bridge
|
|
macaddr = each.value.macaddr
|
|
disk_size = each.value.disk_size
|
|
disk_storage = each.value.disk_storage
|
|
ip = each.value.ip
|
|
vlan = each.value.vlan
|
|
tags = each.value.tags
|
|
})
|
|
|
|
filename = "${local.ansible_repo_path}/host_vars/${each.value.name}/host_tags.yml"
|
|
}
|