[deploy-opentofu]

[deploy-opentofu]

proxmox.tf

@@ -19,7 +19,7 @@ resource "proxmox_virtual_environment_download_file" "latest_ubunto_cloud_img" {
   content_type = "iso"
   datastore_id = "local"
   node_name    = "fenix"
-  url = "https://cloud-images.ubuntu.com/jammy/20250725/jammy-server-cloudimg-amd64.img"
+  url = "https://cloud-images.ubuntu.com/jammy/20251206/jammy-server-cloudimg-amd64.img"
   file_name = "jammyservercloudimgamd64.img"
 }
 
@@ -105,6 +105,7 @@ resource "proxmox_virtual_environment_vm" "proxmox-kubernetes-VM-template" {
 
   cpu {
     cores = 2
+    type = "host"
   }
 
   memory {
@@ -116,14 +117,12 @@ resource "proxmox_virtual_environment_vm" "proxmox-kubernetes-VM-template" {
     file_id      = proxmox_virtual_environment_download_file.latest_ubunto_cloud_img.id
     interface    = "scsi0"
     file_format  = "qcow2"
+    size         = 64
   }
 
   # Configuração da interface de rede
   network_device {
-    bridge = "vmbr0"  # rede de gestão para comunicação com Cluster A
-  }
-  network_device {
-    bridge = "vmbr2"
+    bridge = "vmbr0"  # rede de gestão para comunicação com Cluster B
   }
   
 initialization {
@@ -136,11 +135,6 @@ initialization {
       }
     }
 
-    ip_config {
-      ipv4 {
-        address = "dhcp"
-      }
-    }
   user_data_file_id = proxmox_virtual_environment_file.cloud_init_yaml.id
  }
 }
@@ -155,10 +149,12 @@ resource "proxmox_virtual_environment_vm" "k8s_vms" {
   
   clone {
     vm_id = proxmox_virtual_environment_vm.proxmox-kubernetes-VM-template.id
+    full = true
   }
 
   cpu {
     cores = each.value.cores
+    type = "host"
   }
 
   memory {
@@ -171,6 +167,16 @@ resource "proxmox_virtual_environment_vm" "k8s_vms" {
     interface    = "scsi1"
   }
 
+  # Bloco dinâmico para lista de hostpci
+  dynamic "hostpci" {
+    for_each = try(each.value.hostpci, [])
+    content {
+      device = hostpci.value.device
+      pcie   = try(hostpci.value.pcie, true)
+      mapping = hostpci.value.mapping 
+    }
+  }
+
   initialization {
       ip_config {
         ipv4 {
@@ -178,12 +184,6 @@ resource "proxmox_virtual_environment_vm" "k8s_vms" {
           gateway = each.value.gateway
         }
       }
-      ip_config {
-        ipv4 {
-          address = each.value.ip2
-          gateway = each.value.gateway
-        }
-      }
 
       user_data_file_id = proxmox_virtual_environment_file.vm_user_data[each.key].id
     }
@@ -192,28 +192,3 @@ resource "proxmox_virtual_environment_vm" "k8s_vms" {
       enabled = true
     }
   }
-
-resource "null_resource" "add_api_ip" {
-  for_each = {
-    for vm in var.proxmox_k8s_vms : vm.name => vm
-  }
-
-  triggers = {
-    vm_id = each.value.vm_id
-  }
-
-  provisioner "remote-exec" {
-    inline = [
-      "sudo ip addr add ${each.value.ip3} dev eth0"
-    ]
-
-    connection {
-      type        = "ssh"
-      host        = split("/", each.value.ip)[0] // remove a máscara para conectar
-      user        = each.value.extra_users[0].name
-      password    = each.value.extra_users[0].password
-      timeout     = "4m"
-      agent       = false
-    }
-  }
-}

proxmox.variables.tf

@@ -42,6 +42,11 @@ variable "proxmox_k8s_vms" {
     ip        = string
     ip2        = string
     ip3        = string
+    hostpci = optional(list(object({
+      pcie  = bool
+      device = string
+      mapping = string
+    })))
     cores     = optional(number)
     memory    = optional(number)
     data_store = optional(string)

secrets-output/iac.ansible.hosts.ini

@@ -0,0 +1,13 @@
+  
+[master]
+master1 ansible_host=192.168.1.99 ansible_user=user ansible_ssh_pass=pass ansible_ssh_common_args='-o StrictHostKeyChecking=no'
+
+[workers]
+  
+
+worker-192-168-1-101 ansible_host=192.168.1.101 ansible_user=user ansible_ssh_pass=pass ansible_ssh_common_args='-o StrictHostKeyChecking=no'
+  
+  
+
+
+

secrets/iac.proxmox.ssh.link

@@ -0,0 +1 @@
+proxmox-ssh.example.com

secrets/iac.vaultwarden-link

@@ -0,0 +1 @@
+https://vaultwarden.example.com

secrets/proxmox.secrets.tfvars

@@ -1,6 +1,6 @@
-proxmox_server   = "proxmox.example.com"
-PM_API_TOKEN_ID  = "tokenid"
-PM_API_TOKEN_SECRET = "tokensecret"
+#proxmox_server   = "proxmox.example.com"
+#PM_API_TOKEN_ID  = "tokenid"
+#PM_API_TOKEN_SECRET = "tokensecret"
 # tokenid is read automatically from PM_API_TOKEN_ID
 # token is read automatically from PM_API_TOKEN_SECRET
 
@@ -20,6 +20,7 @@ proxmox_k8s_vms = [
     vm_id     = 3001
     node_name = "node"
     ip        = "192.168.1.99/24"
+    ip3       = "192.168.1.199/24"
     cores     = 2
     memory    = 2000
     disk_size = 32
@@ -33,13 +34,14 @@ proxmox_k8s_vms = [
       }
     ]
     extra_packages = []
-    extra_runcmd   = []
+    extra_runcmd   = ["sudo ip addr add 192.168.1.199/24 dev eth0"]
   },
   {
     name      = "k8s-worker-01"
     vm_id     = 3002
     node_name = "node"
     ip        = "192.168.1.101/24"
+    ip3       = "192.168.1.201/24"
     cores     = 1
     memory    = 2000
     disk_size = 32
@@ -53,6 +55,6 @@ proxmox_k8s_vms = [
       }
     ]
     extra_packages = []
-    extra_runcmd   = []
+    extra_runcmd   = ["sudo ip addr add 192.168.1.201/24 dev eth0"]
   },
 ]