90 lines
2.5 KiB
HCL
90 lines
2.5 KiB
HCL
# ─── VM ID Derivation ────────────────────────────────────────────────────────
|
|
# Convention carried from existing Ansible playbooks:
|
|
# VM ID = {third_octet}{fourth_octet:03d}
|
|
# Example: 10.1.71.35 → 71035
|
|
|
|
locals {
|
|
ip_octets = split(".", var.ip_address)
|
|
vm_id = tonumber("${local.ip_octets[2]}${format("%03d", tonumber(local.ip_octets[3]))}")
|
|
}
|
|
|
|
# ─── Template Lookup ─────────────────────────────────────────────────────────
|
|
# Find the template VM ID by name on the clone node
|
|
|
|
data "proxmox_virtual_environment_vms" "templates" {
|
|
node_name = var.clone_node
|
|
|
|
filter {
|
|
name = "template"
|
|
values = ["true"]
|
|
}
|
|
|
|
filter {
|
|
name = "name"
|
|
values = [var.template_name]
|
|
}
|
|
}
|
|
|
|
# ─── VM Resource ─────────────────────────────────────────────────────────────
|
|
|
|
resource "proxmox_virtual_environment_vm" "vm" {
|
|
name = var.hostname
|
|
bios = "ovmf"
|
|
vm_id = local.vm_id
|
|
node_name = var.target_node
|
|
|
|
description = "Provisioned by mk-labs pipeline on ${timestamp()}"
|
|
tags = ["managed", "pipeline"]
|
|
|
|
# Clone from template on fantasyland
|
|
clone {
|
|
vm_id = data.proxmox_virtual_environment_vms.templates.vms[0].vm_id
|
|
node_name = var.clone_node
|
|
full = true
|
|
datastore_id = var.datastore
|
|
}
|
|
|
|
# Cloud-init configuration
|
|
# Uses DHCP — Unifi DHCP reservation is created before VM starts
|
|
initialization {
|
|
ip_config {
|
|
ipv4 {
|
|
address = "dhcp"
|
|
}
|
|
}
|
|
|
|
dns {
|
|
servers = var.dns_servers
|
|
domain = var.search_domain
|
|
}
|
|
|
|
datastore_id = var.datastore
|
|
}
|
|
|
|
# Network interface
|
|
network_device {
|
|
bridge = var.bridge
|
|
model = "virtio"
|
|
# vlan_id = var.vlan_id
|
|
}
|
|
|
|
# VM stays STOPPED after clone.
|
|
# n8n handles: DHCP reservation → HA affinity rule → VM start
|
|
# This ensures DHCP is in place before first boot.
|
|
started = false
|
|
|
|
# QEMU guest agent is installed in template (via Packer).
|
|
# Note: Proxmox 9 requires VM.GuestAgent.Audit privilege on the API token.
|
|
agent {
|
|
enabled = true
|
|
}
|
|
|
|
# Prevent Terraform from fighting with manual changes
|
|
lifecycle {
|
|
ignore_changes = [
|
|
description,
|
|
tags,
|
|
]
|
|
}
|
|
}
|