diff options
Diffstat (limited to 'opentofu')
| -rw-r--r-- | opentofu/README.md | 1 | ||||
| -rw-r--r-- | opentofu/main.tf | 33 | ||||
| -rw-r--r-- | opentofu/outputs.tf | 13 | ||||
| -rw-r--r-- | opentofu/provider.tf | 4 | ||||
| -rw-r--r-- | opentofu/terraform.tfvars | 5 | ||||
| -rw-r--r-- | opentofu/test-add-user-terraform.yaml | 140 | ||||
| -rw-r--r-- | opentofu/variables.tf | 6 | ||||
| -rw-r--r-- | opentofu/versions.tf | 6 |
8 files changed, 187 insertions, 21 deletions
diff --git a/opentofu/README.md b/opentofu/README.md index f47e00e..06def9a 100644 --- a/opentofu/README.md +++ b/opentofu/README.md @@ -7,7 +7,6 @@ OpenTofu is used to define, manage, and provision infrastructure as code (IaC). ## **Project Structure** - **`README.md`** – Project overview and documentation. -- **`examples/`** – Sample configurations demonstrating how to use modules in different scenarios. - **`modules/`** – Reusable OpenTofu modules for provisioning infrastructure components. - **`outputs.tf`** – Definitions of outputs to expose key resource attributes. - **`provider.tf`** – Configuration for OpenTofu providers, such as Proxmox. diff --git a/opentofu/main.tf b/opentofu/main.tf index 95ff76b..f3299d8 100644 --- a/opentofu/main.tf +++ b/opentofu/main.tf @@ -39,7 +39,8 @@ resource "proxmox_virtual_environment_vm" "docker_server" { initialization { ip_config { ipv4 { - address = "192.168.1.150/24,gw=192.168.1.1" + address = "192.168.1.150/24" + gateway = "192.168.1.1" } } @@ -94,7 +95,8 @@ resource "proxmox_virtual_environment_vm" "k3s_master" { initialization { ip_config { ipv4 { - address = "192.168.1.14${count.index}/24,gw=192.168.1.1" + address = "192.168.1.14${count.index}/24" + gateway = "192.168.1.1" } } @@ -147,7 +149,8 @@ resource "proxmox_virtual_environment_vm" "k3s_worker" { initialization { ip_config { ipv4 { - address = "192.168.1.13${count.index}/24,gw=192.168.1.1" + address = "192.168.1.13${count.index}/24" + gateway = "192.168.1.1" } } @@ -157,3 +160,27 @@ resource "proxmox_virtual_environment_vm" "k3s_worker" { } } } + +# OVH Openstack +## Simple Debian Node +#resource "openstack_compute_keypair_v2" "keypair" { +# name = "tmv-keypair" +# public_key = var.ssh_public_key +#} +# +#resource "openstack_compute_instance_v2" "debian13-uefi-test" { +# name = "debian13-uefi-test" +# image_id = "e9e08190-20ce-49f6-9d72-e76ec22de82e" # Debian 13 UEFI +# flavor_id = "dc3fe9e7-e374-4ad8-b200-fa3bdf45069f" # d2-2 +# key_pair = "tmv-keypair" +# +# security_groups = ["default"] +# +# metadata = { +# tags = "debian,vps,docker" +# } +# +# network { +# name = "Ext-Net" +# } +#} diff --git a/opentofu/outputs.tf b/opentofu/outputs.tf deleted file mode 100644 index a2de653..0000000 --- a/opentofu/outputs.tf +++ /dev/null @@ -1,13 +0,0 @@ -# Define all VMs -locals { - all_vms = flatten([ - [proxmox_virtual_environment_vm.docker_server], - [for vm in proxmox_virtual_environment_vm.k3s_master : vm], - [for vm in proxmox_virtual_environment_vm.k3s_worker : vm] - ]) -} - -output "vm_ips" { - description = "Mapping of VM names to their IP addresses" - value = { for vm in local.all_vms : vm.name => vm.ipv4_addresses[1][0] if can(vm.ipv4_addresses[1][0]) } -} diff --git a/opentofu/provider.tf b/opentofu/provider.tf index cd476cb..5339f3b 100644 --- a/opentofu/provider.tf +++ b/opentofu/provider.tf @@ -3,3 +3,7 @@ provider "proxmox" { api_token = var.proxmox_api_token insecure = true } + +provider "openstack" { + cloud = var.openstack_cloud_name +} diff --git a/opentofu/terraform.tfvars b/opentofu/terraform.tfvars index 0632a53..b05fb7e 100644 --- a/opentofu/terraform.tfvars +++ b/opentofu/terraform.tfvars @@ -1,7 +1,6 @@ -proxmox_api_url = "https://10.0.0.5:8006/api2/json" -#proxmox_api_url = "https://192.168.1.10:8006/api2/json" proxmox_node = "pve" debian_server_bookworm_packer_image_id = "999" ubuntu_server_noble_packer_image_id = "998" vm_username = "mas" -ssh_public_key = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCtB9NZgJMVovVR4foT0OOV9GdHeHZoPtK1TGko2W4wli/reKjpUYBhlSPWbaWD9WUbl0RRqdzkODy1fB001zxs= mas@TMV2" +ssh_public_key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBapxTGEVjqrizkBt3kbJwwSJ1BlTgSOGuYSS//nR32T mas@TMV2" +openstack_cloud_name = "openstack" diff --git a/opentofu/test-add-user-terraform.yaml b/opentofu/test-add-user-terraform.yaml new file mode 100644 index 0000000..72d6e51 --- /dev/null +++ b/opentofu/test-add-user-terraform.yaml @@ -0,0 +1,140 @@ +#cloud-config +# Add groups to the system +# The following example adds the 'admingroup' group with members 'root' and 'sys' +# and the empty group cloud-users. +groups: + - admingroup: [root,sys] + - cloud-users + +# Add users to the system. Users are added after groups are added. +# Note: Most of these configuration options will not be honored if the user +# already exists. Following options are the exceptions and they are +# applicable on already-existing users: +# - 'plain_text_passwd', 'hashed_passwd', 'lock_passwd', 'sudo', +# 'ssh_authorized_keys', 'ssh_redirect_user'. +users: + - default + - name: foobar + gecos: Foo B. Bar + primary_group: foobar + groups: users + selinux_user: staff_u + expiredate: '2032-09-01' + ssh_import_id: + - lp:falcojr + - gh:TheRealFalcon + lock_passwd: false +# passwd: $6$j212wezy$7H/1LT4f9/N3wpgNunhsIqtMj62OKiS3nyNwuizouQc3u7MbYCarYeAHWYPYb2FT.lbioDm2RrkJPb9BZMN1O/ + passwd: "toto" + - name: barfoo + gecos: Bar B. Foo + sudo: "ALL=(ALL) NOPASSWD:ALL" + groups: users, admin + ssh_import_id: + - lp:falcojr + - gh:TheRealFalcon + lock_passwd: true + - name: testuser + gecos: Mr. Test + homedir: /local/testdir + sudo: ["ALL=(ALL) NOPASSWD:ALL"] + - name: cloudy + gecos: Magic Cloud App Daemon User + inactive: '5' + system: true + - name: fizzbuzz + shell: /bin/bash + - snapuser: joe@joeuser.io + - name: nosshlogins + ssh_redirect_user: true + +# Valid Values: +# name: The user's login name +# expiredate: Date on which the user's account will be disabled. +# gecos: The user name's real name, i.e. "Bob B. Smith" +# homedir: Optional. Set to the local path you want to use. Defaults to +# /home/<username> +# primary_group: define the primary group. Defaults to a new group created +# named after the user. +# groups: Optional. Additional groups to add the user to. Defaults to none +# selinux_user: Optional. The SELinux user for the user's login, such as +# "staff_u". When this is omitted the system will select the default +# SELinux user. +# lock_passwd: Defaults to true. Lock the password to disable password login +# inactive: Number of days after password expires until account is disabled +# passwd: The hash -- not the password itself -- of the password you want +# to use for this user. You can generate a hash via: +# mkpasswd --method=SHA-512 --rounds=4096 +# (the above command would create from stdin an SHA-512 password hash +# with 4096 salt rounds) +# +# Please note: while the use of a hashed password is better than +# plain text, the use of this feature is not ideal. Also, +# using a high number of salting rounds will help, but it should +# not be relied upon. +# +# To highlight this risk, running John the Ripper against the +# example hash above, with a readily available wordlist, revealed +# the true password in 12 seconds on a i7-2620QM. +# +# In other words, this feature is a potential security risk and is +# provided for your convenience only. If you do not fully trust the +# medium over which your cloud-config will be transmitted, then you +# should not use this feature. +# +# no_create_home: When set to true, do not create home directory. +# no_user_group: When set to true, do not create a group named after the user. +# no_log_init: When set to true, do not initialize lastlog and faillog database. +# ssh_import_id: Optional. Import SSH ids +# ssh_authorized_keys: Optional. [list] Add keys to user's authorized keys file +# An error will be raised if no_create_home or system is +# also set. +# ssh_redirect_user: Optional. [bool] Set true to block ssh logins for cloud +# ssh public keys and emit a message redirecting logins to +# use <default_username> instead. This option only disables cloud +# provided public-keys. An error will be raised if ssh_authorized_keys +# or ssh_import_id is provided for the same user. +# +# sudo: Defaults to none. Accepts a sudo rule string, a list of sudo rule +# strings or False to explicitly deny sudo usage. Examples: +# +# Allow a user unrestricted sudo access. +# sudo: "ALL=(ALL) NOPASSWD:ALL" +# or +# sudo: ["ALL=(ALL) NOPASSWD:ALL"] +# +# Adding multiple sudo rule strings. +# sudo: +# - "ALL=(ALL) NOPASSWD:/bin/mysql" +# - "ALL=(ALL) ALL" +# +# Note: Please double check your syntax and make sure it is valid. +# cloud-init does not parse/check the syntax of the sudo +# directive. +# system: Create the user as a system user. This means no home directory. +# snapuser: Create a Snappy (Ubuntu-Core) user via the snap create-user +# command available on Ubuntu systems. If the user has an account +# on the Ubuntu SSO, specifying the email will allow snap to +# request a username and any public ssh keys and will import +# these into the system with username specified by SSO account. +# If 'username' is not set in SSO, then username will be the +# shortname before the email domain. +# + +# Default user creation: +# +# Unless you define users, you will get a 'ubuntu' user on Ubuntu systems with the +# legacy permission (no password sudo, locked user, etc). If however, you want +# to have the 'ubuntu' user in addition to other users, you need to instruct +# cloud-init that you also want the default user. To do this use the following +# syntax: +# users: +# - default +# - bob +# - .... +# foobar: ... +# +# users[0] (the first user in users) overrides the user directive. +# +# The 'default' user above references the distro's config set in +# /etc/cloud/cloud.cfg. diff --git a/opentofu/variables.tf b/opentofu/variables.tf index 5303878..9c266eb 100644 --- a/opentofu/variables.tf +++ b/opentofu/variables.tf @@ -30,3 +30,9 @@ variable "ssh_public_key" { type = string sensitive = true } + +variable "openstack_cloud_name" { + description = "An entry in a clouds.yaml. If omitted, the OS_CLOUD environment variable is used." + type = string +} + diff --git a/opentofu/versions.tf b/opentofu/versions.tf index 9df6a1e..630f173 100644 --- a/opentofu/versions.tf +++ b/opentofu/versions.tf @@ -4,11 +4,15 @@ terraform { required_providers { proxmox = { source = "bpg/proxmox" - version = "0.109.0" + version = "0.111.0" } local = { source = "hashicorp/local" version = ">= 2.4.0" } + openstack = { + source = "terraform-provider-openstack/openstack" + version = "3.4.0" + } } } |