iac-opentofu-public/proxmox.tf

provider "proxmox" {
  endpoint  = var.proxmox_server
  api_token = var.proxmox_apikey
  ssh {
    agent    = true
    username = var.proxmox_username_ssh
    socks5_server = var.proxmox_server_ssh
    password = var.proxmox_password_ssh   
    
    node {
      name    = "fenix"
      address = "127.0.0.1"
      port = 1081
    }
}
}

resource "proxmox_virtual_environment_download_file" "latest_ubunto_cloud_img" {
  content_type = "iso"
  datastore_id = "local"
  node_name    = "fenix"
  url = "https://cloud-images.ubuntu.com/jammy/20250725/jammy-server-cloudimg-amd64.img"
  file_name = "jammyservercloudimgamd64.img"
}

resource "proxmox_virtual_environment_file" "cloud_init_yaml" {
  node_name    = "fenix"
  datastore_id = "local-snippets"
  content_type = "snippets"

  source_raw {
    file_name = "user-data-cloud-config.yaml"
    data = file("${path.module}/cloud-init-base.yaml")
  }
}


locals {
  rendered_yaml_per_vm ={
    for vm in var.proxmox_k8s_vms : vm.name =>
      templatefile("${path.module}/cloud-init-vm.yaml.tftpl", 
    {
      each = {
        value = vm
      }
    })
  } 
}


data "external" "merged_yaml" {
  for_each = { for vm in var.proxmox_k8s_vms : vm.name => vm }

  depends_on = [local_file.rendered_yaml_file]

  program = ["python3", "${path.module}/merge_yaml.py"]

  query = {
    file1 = "${path.module}/cloud-init-base.yaml"
    file2 = "${path.module}/cloud-init-extra-${each.key}.yaml"
  }
}


resource "local_file" "rendered_yaml_file" {
  for_each = { for vm in var.proxmox_k8s_vms : vm.name => vm }

  content  = local.rendered_yaml_per_vm[each.key]
  filename = "${path.module}/cloud-init-extra-${each.key}.yaml"
}


# Gerar um snippet cloud-init por VM
resource "proxmox_virtual_environment_file" "vm_user_data" {
  for_each = { for vm in var.proxmox_k8s_vms : vm.name => vm }

  node_name    = "fenix"
  datastore_id = "local-snippets"
  content_type = "snippets"
  source_raw {
    file_name = "cloud-init-iac-k8s-${each.key}.yaml"
    data      = data.external.merged_yaml[each.key].result["merged_yaml"]
  }
}


resource "proxmox_virtual_environment_vm" "proxmox-kubernetes-VM-template" {

  depends_on = [proxmox_virtual_environment_download_file.latest_ubunto_cloud_img, proxmox_virtual_environment_file.cloud_init_yaml]
  name      = "proxmox-kubernetes-VM-template"
  node_name = "fenix"
  vm_id     = 1002
  template  = true
  started   = false

  agent {
    enabled = true
  }
  tags        = ["opentofu", "kubernetes", "fedora"]
  machine     = "q35"
  bios        = "seabios"
  description = "kubernetes VM Template created via iac"

  cpu {
    cores = 2
  }

  memory {
    dedicated = 4096
  }

  # Configuração do disco rígido
  #disk {
  #  datastore_id = "local-lvm"
  #  interface    = "scsi1"
  #  size         = 64
  #}

  disk {
    datastore_id = "local-lvm"
    file_id      = proxmox_virtual_environment_download_file.latest_ubunto_cloud_img.id
    interface    = "scsi0"
    file_format  = "qcow2"
  }

  # Configuração da interface de rede
  network_device {
    bridge = "vmbr0"
  }

initialization {
    dns {
      servers = ["1.1.1.1"]
    }
    ip_config {
      ipv4 {
        address = "dhcp"
      }
    }
  #user_data_file_id = proxmox_virtual_environment_file.cloud_init_yaml.id
 }
}


resource "proxmox_virtual_environment_vm" "k8s_vms" {
  for_each  = { for vm in var.proxmox_k8s_vms : vm.name => vm }
  depends_on = [proxmox_virtual_environment_vm.proxmox-kubernetes-VM-template]
  name      = each.value.name
  node_name = each.value.node_name
  vm_id = each.value.vm_id

  cpu {
    cores = each.value.cores
  }

  memory {
    dedicated = each.value.memory
  }

  disk {
    datastore_id = each.value.data_store
    size         = each.value.disk_size
    interface    = "scsi1"
  }

  clone {
    vm_id = proxmox_virtual_environment_vm.proxmox-kubernetes-VM-template.id
  }


  initialization {
   # ip_config {
   #   ipv4 {
   #     address = each.value.ip
   #     gateway = each.value.gateway
   #   }
   # }

    user_data_file_id = proxmox_virtual_environment_file.vm_user_data[each.key].id
  }


  agent {
    enabled = true
  }
}