iac-opentofu-public/proxmox.tf

provider "proxmox" {
  endpoint  = var.proxmox_server
  api_token = var.proxmox_apikey
  ssh {
    agent    = true
    username = var.proxmox_username_ssh
    socks5_server = var.proxmox_server_ssh
    password = var.proxmox_password_ssh   
    
    node {
      name    = "fenix"
      address = "127.0.0.1"
      port = 1081
    }
}
}

resource "proxmox_virtual_environment_download_file" "latest_ubunto_cloud_img" {
  content_type = "iso"
  datastore_id = "local"
  node_name    = "fenix"
  url = "https://cloud-images.ubuntu.com/jammy/20250725/jammy-server-cloudimg-amd64.img"
  file_name = "jammyservercloudimgamd64.img"
}

resource "proxmox_virtual_environment_file" "cloud_init_yaml" {
  node_name    = "fenix"
  datastore_id = "local-snippets"
  content_type = "snippets"

  source_raw {
    file_name = "user-data-cloud-config.yaml"
    data = <<-EOF
    #cloud-config
    users:
      - default
      - name: ${var.proxmox_VM_username}
        groups: sudo
        shell: /bin/bash
        sudo: ALL=(ALL) NOPASSWD:ALL

    ssh_pwauth: true

    chpasswd:
      list: |
        ${var.proxmox_VM_username}:${var.proxmox_VM_password}
      expire: false

    package_update: true
    packages:
      - qemu-guest-agent
      - net-tools
      - curl
    runcmd:
      - systemctl enable qemu-guest-agent
      - systemctl start qemu-guest-agent
      - echo "done" > /tmp/cloud-config.done
    EOF
  }
}


resource "proxmox_virtual_environment_vm" "proxmox-kubernetes-VM-template" {

  depends_on = [proxmox_virtual_environment_download_file.latest_ubunto_cloud_img, proxmox_virtual_environment_file.cloud_init_yaml]
  name      = "proxmox-kubernetes-VM-template"
  node_name = "fenix"
  vm_id     = 1002
  template  = true
  started   = false

  agent {
    enabled = true
  }
  tags        = ["opentofu", "kubernetes", "fedora"]
  machine     = "q35"
  bios        = "seabios"
  description = "kubernetes VM Template created via iac"

  cpu {
    cores = 2
  }

  memory {
    dedicated = 4096
  }

  # Configuração do disco rígido
  #disk {
  #  datastore_id = "local-lvm"
  #  interface    = "scsi1"
  #  size         = 64
  #}

  disk {
    datastore_id = "local-lvm"
    file_id      = proxmox_virtual_environment_download_file.latest_ubunto_cloud_img.id
    interface    = "scsi0"
    file_format  = "qcow2"
  }

  # Configuração da interface de rede
  network_device {
    bridge = "vmbr0"
    model  = "virtio"
  }

initialization {
  ip_config {
    ipv4 {
    address = "dhcp"  # IP estático + máscara de rede
    }
  }
  user_data_file_id = proxmox_virtual_environment_file.cloud_init_yaml.id
 }
}


resource "proxmox_virtual_environment_vm" "k8s_vms" {
  for_each  = { for vm in var.proxmox_k8s_vms : vm.name => vm }
  depends_on = [proxmox_virtual_environment_vm.proxmox-kubernetes-VM-template]
  name      = each.value.name
  node_name = each.value.node_name
  vm_id = each.value.vm_id

  cpu {
    cores = each.value.cores
  }

  memory {
    dedicated = each.value.memory
  }

  disk {
    datastore_id = each.value.datastore
    size         = each.value.disk_size
    interface    = "scsi1"
  }

  clone {
    vm_id = proxmox_virtual_environment_vm.proxmox-kubernetes-VM-template.id
  }


  initialization {
    ip_config {
      ipv4 {
        address = each.value.ip
        gateway = each.value.gateway
      }
    }

    user_data = <<EOF
        #cloud-config
        package_update: true
        packages:
        %{ for pkg in each.value.packages ~}
            - ${pkg}
        %{ endfor ~}

        users:
        %{ if length(each.value.extra_users) > 0 ~}
        
        %{ for u in each.value.extra_users ~}
        - name: ${u.name}
            groups: [${join(", ", u.groups)}]
            shell: /bin/bash
            sudo: ALL=(ALL) NOPASSWD:ALL
        %{ endfor ~}

        chpasswd:
            list: |
            %{ for u in each.value.extra_users ~}
                ${u.name}:${u.password}
            %{ endfor ~}
            expire: false

        %{ endif ~}
        runcmd:
        %{ if length(each.value.extra_runcmd) > 0 ~}
        %{ for cmd in each.value.extra_runcmd ~}
            - ${cmd}
        %{ endfor ~}
        %{ endif ~}
    EOF
  }


  agent {
    enabled = true
  }
}