Changeset View
Changeset View
Standalone View
Standalone View
proxmox/terraform/staging.tf
- This file was added.
# Keyword use: | |||||
# - provider: Define the provider(s) | |||||
# - data: Retrieve data information to be used within the file | |||||
# - resource: Define resource and create/update | |||||
provider "proxmox" { | |||||
pm_tls_insecure = true | |||||
pm_api_url = "https://orsay.internal.softwareheritage.org:8006/api2/json" | |||||
# in a shell (see README): source ./setup.sh | |||||
} | |||||
# `pass search terraform-proxmox` in credential store | |||||
variable "ssh_key_data" { | |||||
type = "string" | |||||
default = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVKCfpeIMg7GS3Pk03ZAcBWAeDZ+AvWk2k/pPY0z8MJ3YAbqZkRtSK7yaDgJV6Gro7nn/TxdJLo2jEzzWvlC8d8AEzhZPy5Z/qfVVjqBTBM4H5+e+TItAHFfaY5+0WvIahxcfsfaq70MWfpJhszAah3ThJ4mqzYaw+dkr42+a7Gx3Ygpb/m2dpnFnxvXdcuAJYStmHKU5AWGWWM+Fm50/fdMqUfNd8MbKhkJt5ihXQmZWMOt7ls4N8i5NZWnS9YSWow8X/ENOEqCRN9TyRkc+pPS0w9DNi0BCsWvSRJOkyvQ6caEnKWlNoywCmM1AlIQD3k4RUgRWe0vqg/UKPpH3Z root@terraform" | |||||
} | |||||
variable "user_admin" { | |||||
type = "string" | |||||
default = "root" | |||||
} | |||||
variable "domain" { | |||||
type = "string" | |||||
default = "internal.staging.swh.network" | |||||
} | |||||
variable "puppet_environment" { | |||||
type = "string" | |||||
default = "new_staging" | |||||
} | |||||
variable "puppet_master" { | |||||
type = "string" | |||||
default = "pergamon.internal.softwareheritage.org" | |||||
} | |||||
variable "dns" { | |||||
type = "string" | |||||
default = "192.168.100.29" | |||||
} | |||||
variable "gateway_ip" { | |||||
type = "string" | |||||
default = "192.168.128.1" | |||||
} | |||||
resource "proxmox_vm_qemu" "gateway" { | |||||
name = "gateway" | |||||
desc = "staging gateway node" | |||||
# hypervisor onto which make the vm | |||||
target_node = "orsay" | |||||
# See init-template.md to see the template vm bootstrap | |||||
clone = "template-debian-9" | |||||
# linux kernel 2.6 | |||||
qemu_os = "l26" | |||||
# generic setup | |||||
sockets = 1 | |||||
cores = 1 | |||||
memory = 1024 | |||||
# boot machine when hypervirsor starts | |||||
onboot = true | |||||
#### cloud-init setup | |||||
# to actually set some information per os_type (values: ubuntu, centos, | |||||
# cloud-init). Keep this as cloud-init | |||||
os_type = "cloud-init" | |||||
# ciuser - User name to change ssh keys and password for instead of the | |||||
# image’s configured default user. | |||||
ciuser = "${var.user_admin}" | |||||
ssh_user = "${var.user_admin}" | |||||
# searchdomain - Sets DNS search domains for a container. | |||||
searchdomain = "${var.domain}" | |||||
# nameserver - Sets DNS server IP address for a container. | |||||
nameserver = "${var.dns}" | |||||
# sshkeys - public ssh keys, one per line | |||||
sshkeys = "${var.ssh_key_data}" | |||||
# FIXME: When T1872 lands, this will need to be updated | |||||
# ipconfig0 - [gw =] [,ip=<IPv4Format/CIDR>] | |||||
# ip to communicate for now with the prod network through louvre | |||||
ipconfig0 = "ip=192.168.100.125/24,gw=192.168.100.1" | |||||
# vms from the staging network will use this vm as gateway | |||||
ipconfig1 = "ip=${var.gateway_ip}/24" | |||||
disk { | |||||
id = 0 | |||||
type = "virtio" | |||||
storage = "orsay-ssd-2018" | |||||
storage_type = "ssd" | |||||
size = "20G" | |||||
} | |||||
network { | |||||
id = 0 | |||||
model = "virtio" | |||||
bridge = "vmbr0" | |||||
macaddr = "6E:ED:EF:EB:3C:AA" | |||||
} | |||||
network { | |||||
id = 1 | |||||
model = "virtio" | |||||
bridge = "vmbr0" | |||||
macaddr = "FE:95:CC:A5:EB:43" | |||||
} | |||||
# Delegate to puppet at the end of the provisioning the software setup | |||||
provisioner "remote-exec" { | |||||
inline = [ | |||||
"sysctl -w net.ipv4.ip_forward=1", | |||||
# make it persistent | |||||
"sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/g' /etc/sysctl.conf", | |||||
# add route to louvre (the persistence part is done through puppet) | |||||
"iptables -t nat -A POSTROUTING -s 192.168.128.0/24 -o eth0 -j MASQUERADE", | |||||
"sed -i 's/127.0.1.1/${var.gateway_ip}/g' /etc/hosts", | |||||
"puppet agent --server ${var.puppet_master} --environment=${var.puppet_environment} --waitforcert 60 --test || echo 'Node provisionned!'", | |||||
] | |||||
} | |||||
} |