This commit is contained in:
2025-05-19 05:43:17 -05:00
parent 0ae3c80a81
commit af5f6e1257

View File

@@ -15,7 +15,7 @@ spec:
name: vault
kind: ClusterSecretStore
target:
name: db-pass
name: proxmox-secret
data:
- secretKey: pm_api_url
remoteRef:
@@ -29,3 +29,118 @@ spec:
remoteRef:
key: kv/crossplane/proxmox
property: pm_user
---
apiVersion: opentofu.upbound.io/v1beta1
kind: Workspace
metadata:
name: test-vm
annotations:
crossplane.io/external-name: test
spec:
forProvider:
source: Inline
env:
- name: TF_VAR_pm_api_url
secretKeyRef:
name: proxmox-secret
key: pam_api_url
- name: TF_VAR_pm_password
secretKeyRef:
name: proxmox-secret
key: pam_password
- name: TF_VAR_pm_user
secretKeyRef:
name: proxmox-secret
key: pam_user
module: |
provider "proxmox" {
pm_parallel = 1
pm_tls_insecure = true
pm_api_url = var.pm_api_url
pm_user = var.pm_user
pm_password = var.pm_password
pm_debug = false
}
locals {
sshkeys = "ssh-rsa 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 ansible"
template = "Debian12-Template"
format = "raw"
dnsserver = "192.168.10.1"
vlan = 10
testVM = {
tags = "test"
count = 1
name = ["test-server"]
cores = 2
memory = "4096"
drive = 20
storage = "cache-domains"
node = ["mothership"]
ip = ["99"]
}
}
resource "proxmox_vm_qemu" "testVM" {
count = local.testVM.count
ciuser = "administrator"
vmid = "${local.vlan}${local.testVM.ip[count.index]}"
name = local.testVM.name[count.index]
target_node = local.testVM.node[count.index]
clone = local.template
tags = local.testVM.tags
qemu_os = "l26"
full_clone = true
os_type = "cloud-init"
agent = 1
cores = local.testVM.cores
sockets = 1
cpu_type = "host"
memory = local.testVM.memory
scsihw = "virtio-scsi-pci"
#bootdisk = "scsi0"
boot = "order=virtio0"
onboot = true
sshkeys = local.sshkeys
vga {
type = "serial0"
}
serial {
id = 0
type = "socket"
}
disks {
ide {
ide2 {
cloudinit {
storage = local.testVM.storage
}
}
}
virtio {
virtio0 {
disk {
size = local.testVM.drive
format = local.format
storage = local.testVM.storage
}
}
}
}
network {
id = 0
model = "virtio"
bridge = "vmbr0"
tag = local.vlan
}
#Cloud Init Settings
ipconfig0 = "ip=192.168.${local.vlan}.${local.testVM.ip[count.index]}/24,gw=192.168.${local.vlan}.1"
searchdomain = "durp.loc"
nameserver = local.dnsserver
}
writeConnectionSecretToRef:
namespace: default
name: opentofu-workspace-example-inline