gitops/homelab-v
1
0
Fork 0
mirror of https://github.com/outbackdingo/homelab-v.git synced 2026-08-25 07:10:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(devcontainer): build a Devcontainer with useful tools for this project

Browse Source 
Also use said devcontainer i GitHub workflows to validate config.

* feat(devcontainer): build devcontainer

Signed-off-by: Vegard Hagen <[email protected]>

* feat(ci): validate tofu files on push

Signed-off-by: Vegard Hagen <[email protected]>

* feat(devcontainer): simplify devcontainer

Signed-off-by: Vegard Hagen <[email protected]>

* fix(devcontainer): don't cache package index

This will reduce the final image size.

Signed-off-by: Vegard Hagen <[email protected]>

* feat(devcontainer): switch to ubuntu and use devcontainer features as much as possible

Signed-off-by: Vegard Hagen <[email protected]>

---------

Signed-off-by: Vegard Hagen <[email protected]>
This commit is contained in:
Vegard Stenhjem Hagen
2025-07-13 23:18:26 +02:00
committed by GitHub
parent f5841b4a3b
commit 1deb5aced1
19 changed files with 271 additions and 219 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.devcontainer/Containerfile
+1
View File
@@ -0,0 +1 @@
FROM docker.io/ubuntu:24.04
.devcontainer/README.md
+29
View File
@@ -0,0 +1,29 @@
# Devcontainer
A container with all the necessary tools and then some used in this homelab.
Check available features at [https://containers.dev/features](https://containers.dev/features),
or edit the `Containerfile`.
**Disclaimer**: this is a fairly untested feature from the main author,
feedback is welcome.
## Getting started
Find the appropriate guide for your IDE, e.g.
* [IDEA](https://www.jetbrains.com/help/idea/start-dev-container-inside-ide.html)
* [VSCode](https://code.visualstudio.com/docs/devcontainers/containers)
Alternatively, you can start the devcontainer manually by running
```shell
docker run -it --rm \
--user $(id -u):$(id -g) \
--name homelab-devcontainer \
--mount target=/tmp,type=tmpfs \
--mount type=bind,src=.,dst=/workspace \
--workdir /workspace \
ghcr.io/vehagn/homelab-devcontainer:latest
```
from the project root.
.devcontainer/devcontainer.json
+46
View File
@@ -0,0 +1,46 @@
{
"name": "Stonegarden Homelab Devcontainer",
"build": {
"dockerfile": "Containerfile",
},
"features": {
"ghcr.io/devcontainers/features/common-utils:2": {
"installZsh": true,
"configureZshAsDefaultShell": true,
"installOhMyZsh": true,
"installOhMyZshConfig": true,
"upgradePackages": true,
"username": "homelab"
},
"ghcr.io/devcontainers/features/aws-cli:1": {},
"ghcr.io/devcontainers/features/azure-cli:1": {},
"ghcr.io/devcontainers/features/github-cli:1": {},
"ghcr.io/devcontainers/features/git:1": {},
"ghcr.io/devcontainers/features/go:1": {},
"ghcr.io/devcontainers/features/java:1": {},
"ghcr.io/devcontainers/features/python:1": {},
"ghcr.io/devcontainers/features/hugo:1": {
"extended": "true"
},
"ghcr.io/devcontainers/features/kubectl-helm-minikube:1": {},
"ghcr.io/devcontainers-extra/features/argo-cd:1": {},
"ghcr.io/devcontainers-extra/features/helmfile:1": {},
"ghcr.io/devcontainers-extra/features/talosctl:1": {},
"ghcr.io/devcontainers-extra/features/yamllint:2": {},
"ghcr.io/dhoeric/features/k9s:1": {},
"ghcr.io/dhoeric/features/google-cloud-cli:1": {
"installGkeGcloudAuthPlugin": true
},
"ghcr.io/eitsupi/devcontainer-features/jq-likes": {
"jqVersion": "latest",
"yqVersion": "latest"
},
"ghcr.io/jungaretti/features/vim:1": {},
"ghcr.io/robbert229/devcontainer-features/postgresql-client:1": {},
"ghcr.io/robbert229/devcontainer-features/opentofu:1": {},
"ghcr.io/schlich/devcontainer-features/powerlevel10k:1": {},
"ghcr.io/skriptfabrik/devcontainer-features/hcloud-cli:1": {},
"ghcr.io/skriptfabrik/devcontainer-features/infisical-cli:1.1.1": {},
},
"remoteUser": "homelab"
}
.github/workflows/build-devcontainer.yaml
+42
View File
@@ -0,0 +1,42 @@
name: Build devcontainer
on:
workflow_dispatch: { }
push:
branches: [ main ]
paths: [ ".devcontainer/**" ]
schedule:
- cron: "4 20 28 * *"
jobs:
build:
name: Build devcontainer
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
- name: Set up QEMU for multi-architecture builds
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 #v3.6.0
- name: Setup Docker buildx for multi-architecture builds
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 #v3.11.1
- name: Login to GitHub Container Registry
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 #v3.4.0
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Pre-build dev container image
uses: devcontainers/ci@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6 #v0.3.1900000417
with:
platform: linux/amd64,linux/arm64
imageName: ghcr.io/vehagn/homelab-devcontainer
cacheFrom: ghcr.io/vehagn/homelab-devcontainer
push: always
.github/workflows/tofu-fmt-check-pr.yaml
-92
View File
@@ -1,92 +0,0 @@
name: Validate tofu formatting on pull request
on:
# Triggers the workflow on pull request events targeting the main or prod branches
pull_request_target:
branches:
- main
- prod
# Also triggers on direct pull requests to main or prod (for forks or direct pushes)
pull_request:
branches:
- main
- prod
jobs:
validate:
name: tofu fmt check
runs-on: ubuntu-latest
# Permissions needed for the job
permissions:
contents: read # To check out the code
steps:
- name: Checkout code
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
with:
# Fetch depth 2 is needed for comparing changes in PRs
fetch-depth: 2
- name: Get changed files
id: changed_files # Assign an ID to refer to the outputs of this step
uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46.0.5
with:
# Specify the output format for the list of files
files_separator: " " # Use space as a separator for the loop below
- name: Setup OpenTofu
uses: opentofu/setup-opentofu@592200bd4b9bbf4772ace78f887668b1aee8f716 # v1.0.5
with:
tofu_version: latest
- name: Validate tofu fmt (added/modified)
run: |
# Allow the script to continue even if tofu fmt fails for one file
set +e
# Initialize check status (0 = success, 1 = failure)
CHECK_STATUS=0
echo "CHECK_STATUS=${CHECK_STATUS}" >> $GITHUB_ENV
echo "### Formatting Check for Changed Tofu Files" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
CHANGED_TOFU_FILES=""
# Loop through all files that were added or modified in the PR
# Use the output from the 'tj-actions/changed-files' step
for changed_file in ${{ steps.changed_files.outputs.all_changed_and_modified_files }}; do
echo "Checking tofu fmt on ${changed_file}..."
# Check if the file has a .tofu or .tfvars extension
if [[ $changed_file == *.tofu || $changed_file == *.tfvars ]]; then
CHANGED_TOFU_FILES="$CHANGED_TOFU_FILES $changed_file"
# Run tofu fmt in check mode. It exits with non-zero status if formatting is needed.
tofu fmt -check $changed_file
FMT_STATUS=$? # Capture the exit status of the tofu fmt command
# If tofu fmt failed (exit status is not 0)
if [[ $FMT_STATUS -ne 0 ]]; then
echo "- ❌ **${changed_file}** is not properly formatted. Please run \`tofu fmt\`." >> $GITHUB_STEP_SUMMARY
# Update the overall check status to failure
CHECK_STATUS=1
echo "CHECK_STATUS=${CHECK_STATUS}" >> $GITHUB_ENV
else
echo "- ✅ **${changed_file}** is properly formatted." >> $GITHUB_STEP_SUMMARY
fi
else
echo "Skipping non-tofu file: ${changed_file}"
fi
done
if [[ -z "$CHANGED_TOFU_FILES" ]]; then
echo "No changed or modified .tofu or .tfvars files found." >> $GITHUB_STEP_SUMMARY
fi
echo "" >> $GITHUB_STEP_SUMMARY
echo "Final check status: $CHECK_STATUS" >> $GITHUB_STEP_SUMMARY
# Exit the step with the final check status
# If CHECK_STATUS is 1, the step (and job) will fail. If 0, it succeeds.
echo "Final check status: $CHECK_STATUS"
exit $CHECK_STATUS
.github/workflows/tofu-fmt-check-scheduled.yaml
-62
View File
@@ -1,62 +0,0 @@
name: Validate tofu formatting monthly
on:
schedule:
# Runs at 00:00 UTC on the first day of every month
- cron: "0 0 1 * *"
# Allows you to run this workflow manually from the Actions tab
workflow_dispatch:
jobs:
check_all:
name: Check all tofu file formatting
runs-on: ubuntu-latest
# Permissions needed for the job
permissions:
contents: read # To check out the code
steps:
- name: Checkout code
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
- name: Setup OpenTofu
uses: opentofu/setup-opentofu@592200bd4b9bbf4772ace78f887668b1aee8f716 # v1.0.5
with:
tofu_version: latest
- name: Validate tofu fmt for all files in tofu/ directory
run: |
# Allow the script to continue even if tofu fmt fails for one file
set +e
# Initialize overall check status (0 = success, 1 = failure)
CHECK_STATUS=0
echo "Searching for and checking .tofu and .tfvars files in the 'tofu/' directory recursively..."
echo "### Tofu Format Check Results" >> $GITHUB_STEP_SUMMARY # Add a header to the summary
# Use find to locate files and pipe them safely to a while loop
# This handles filenames with spaces or special characters correctly.
find tofu/ -type f \( -name '*.tofu' -o -name '*.tfvars' \) -print0 | while IFS= read -r -d $'\0' file; do
echo "Checking tofu fmt on ${file}..." # Log which file is being checked
# Run tofu fmt in check mode. It exits with non-zero status if formatting is needed.
tofu fmt -check "${file}"
FMT_STATUS=$?
# If tofu fmt failed (exit status is not 0)
if [[ $FMT_STATUS -ne 0 ]]; then
# Add a failure message to the GitHub Actions summary
echo "❌ **${file}**: Needs formatting. Run \`tofu fmt\`." >> $GITHUB_STEP_SUMMARY
# Update the overall check status to failure
CHECK_STATUS=1
else
# Add a success message to the GitHub Actions summary
echo "✅ **${file}**: Formatted correctly." >> $GITHUB_STEP_SUMMARY
fi
done
# Exit the step with the final check status
# If CHECK_STATUS is 1, the step (and job) will fail. If 0, it succeeds.
echo "Final check status: ${CHECK_STATUS}"
exit ${CHECK_STATUS}
.github/workflows/tofu-format.yaml
+61
View File
@@ -0,0 +1,61 @@
name: OpenTofu validation
on:
push:
branches: [ '**' ]
paths:
- '**.tf'
- '**.tofu'
- '**.tfvars'
- '**.tftpl'
pull_request:
branches: [ main ]
pull_request_target:
branches: [ main ]
permissions:
packages: write
jobs:
validate-tofu:
name: Validate
runs-on: ubuntu-latest
permissions:
contents: read
env:
TOFU_DIR: tofu/kubernetes
steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
- name: Login to GitHub Container Registry
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 #v3.4.0
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Tofu init
uses: devcontainers/ci@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6 #v0.3.1900000417
with:
imageName: ghcr.io/vehagn/homelab-devcontainer
cacheFrom: ghcr.io/vehagn/homelab-devcontainer
push: never
runCmd: tofu -chdir=${{ env.TOFU_DIR }} init
- name: Tofu validate
uses: devcontainers/ci@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6 #v0.3.1900000417
with:
imageName: ghcr.io/vehagn/homelab-devcontainer
cacheFrom: ghcr.io/vehagn/homelab-devcontainer
push: never
runCmd: tofu -chdir=${{ env.TOFU_DIR }} validate
- name: Tofu format
uses: devcontainers/ci@8bf61b26e9c3a98f69cb6ce2f88d24ff59b785c6 #v0.3.1900000417
with:
imageName: ghcr.io/vehagn/homelab-devcontainer
cacheFrom: ghcr.io/vehagn/homelab-devcontainer
push: never
runCmd: tofu -chdir=${{ env.TOFU_DIR }} fmt -recursive -diff -check
.yamllint.yaml
+18
View File
@@ -0,0 +1,18 @@
extends: default
yaml-files:
- '*.yaml'
- '*.yml'
ignore: |
README.md
LICENSE
secret**.yaml
rules:
document-start: { present: false }
brackets:
min-spaces-inside: 0
max-spaces-inside: 10
line-length:
allow-non-breakable-inline-mappings: true
README.md
+10 -3
View File
@@ -26,7 +26,8 @@ Most of the services run on [Talos](https://www.talos.dev/) flavoured [Kubernete
though I'm also running a [TrueNAS](https://www.truenas.com/) VM for storage though I'm also running a [TrueNAS](https://www.truenas.com/) VM for storage
and [Home Assistant](https://www.home-assistant.io/) VM for home automation. and [Home Assistant](https://www.home-assistant.io/) VM for home automation.
To organise all the configuration I've opted for an approach using Kustomized Helm To organise all the configuration,
I've opted for an approach using Kustomized Helm
with [Argo CD](https://argoproj.github.io/cd/) which I've explained in more with [Argo CD](https://argoproj.github.io/cd/) which I've explained in more
detail [in this article](https://blog.stonegarden.dev/articles/2023/09/argocd-kustomize-with-helm/). detail [in this article](https://blog.stonegarden.dev/articles/2023/09/argocd-kustomize-with-helm/).
@@ -34,9 +35,9 @@ I journal my homelab journey over at my self-hosted [blog](https://blog.stonegar
## 🧑‍💻 Getting Started ## 🧑‍💻 Getting Started
If you're new to Kubernetes I've written a fairly thorough guide If you're new to Kubernetes, I've written a fairly thorough guide
on [Bootstrapping k3s with Cilium](https://blog.stonegarden.dev/articles/2024/02/bootstrapping-k3s-with-cilium/). on [Bootstrapping k3s with Cilium](https://blog.stonegarden.dev/articles/2024/02/bootstrapping-k3s-with-cilium/).
In the article I try to guide you from a fresh Debian 12 Bookworm install to a working cluster using In the article I try to guide you from a fresh Debian 12 Bookworm installation to a working cluster using
the [k3s](https://k3s.io) flavour of Kubernetes with [Cilium](https://cilium.io) as a [CNI](https://www.cni.dev) the [k3s](https://k3s.io) flavour of Kubernetes with [Cilium](https://cilium.io) as a [CNI](https://www.cni.dev)
and [IngressController](https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/). and [IngressController](https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/).
@@ -47,6 +48,12 @@ is more your thing.
The current iteration of my homelab runs on [Talos](https://talos.dev) Kubernetes and is set up according The current iteration of my homelab runs on [Talos](https://talos.dev) Kubernetes and is set up according
to [this article](https://blog.stonegarden.dev/articles/2024/08/talos-proxmox-tofu/). to [this article](https://blog.stonegarden.dev/articles/2024/08/talos-proxmox-tofu/).
## 🏃 Devcontainer
A [devcontainer](https://containers.dev/) containing the required tools is available for this repository
as [ghcr.io/vehagn/homelab-devcontainer](https://github.com/vehagn/homelab/pkgs/container/homelab-devcontainer).
See [./devcontainer](./.devcontainer) for details.
## ⚙️ Core Components ## ⚙️ Core Components
* [Proxmox VE](https://www.proxmox.com/en/proxmox-virtual-environment): Server management and KVM hypervisor. * [Proxmox VE](https://www.proxmox.com/en/proxmox-virtual-environment): Server management and KVM hypervisor.
k8s/apps/external/haos/svc.yaml
Vendored
+1 -1
View File
@@ -5,6 +5,6 @@ metadata:
namespace: haos namespace: haos
spec: spec:
ports: ports:
- name: http - name: http
protocol: TCP protocol: TCP
port: 8123 port: 8123
k8s/infra/auth/authelia/cnpg-db.yaml
+10 -10
View File
@@ -20,16 +20,16 @@ spec:
managed: managed:
services: services:
disabledDefaultServices: [ "ro", "r" ] disabledDefaultServices: [ "ro", "r" ]
# additional: # additional:
# - selectorType: rw # - selectorType: rw
# updateStrategy: patch # updateStrategy: patch
# serviceTemplate: # serviceTemplate:
# metadata: # metadata:
# name: authelia-postgres-db # name: authelia-postgres-db
# annotations: # annotations:
# io.cilium/lb-ipam-ips: 192.168.1.240 # io.cilium/lb-ipam-ips: 192.168.1.240
# spec: # spec:
# type: LoadBalancer # type: LoadBalancer
storage: storage:
size: 1G size: 1G
pvcTemplate: pvcTemplate:
k8s/infra/auth/lldap/cnpg-db.yaml
+10 -10
View File
@@ -20,16 +20,16 @@ spec:
managed: managed:
services: services:
disabledDefaultServices: [ "ro", "r" ] disabledDefaultServices: [ "ro", "r" ]
# additional: # additional:
# - selectorType: rw # - selectorType: rw
# updateStrategy: patch # updateStrategy: patch
# serviceTemplate: # serviceTemplate:
# metadata: # metadata:
# name: lldap-postgres-db # name: lldap-postgres-db
# annotations: # annotations:
# io.cilium/lb-ipam-ips: 192.168.1.241 # io.cilium/lb-ipam-ips: 192.168.1.241
# spec: # spec:
# type: LoadBalancer # type: LoadBalancer
storage: storage:
size: 2G size: 2G
pvcTemplate: pvcTemplate:
k8s/infra/controllers/argocd/values.yaml
+1 -1
View File
@@ -15,7 +15,7 @@ configs:
cliClientID: 'argocd-cli' cliClientID: 'argocd-cli'
requestedScopes: [ 'openid', 'offline_access' ] requestedScopes: [ 'openid', 'offline_access' ]
enableUserInfoGroups: true enableUserInfoGroups: true
requestedIDTokenClaims: requestedIDTokenClaims:
argocd_claim: { essential: true } argocd_claim: { essential: true }
name: { essential: false } name: { essential: false }
email: { essential: false } email: { essential: false }
k8s/infra/database/application-set.yaml
+1 -1
View File
@@ -33,5 +33,5 @@ spec:
selfHeal: true selfHeal: true
prune: true prune: true
syncOptions: syncOptions:
# - ApplyOutOfSyncOnly=true # - ApplyOutOfSyncOnly=true
- ServerSideApply=true - ServerSideApply=true
k8s/infra/network/cilium/values.yaml
+1 -1
View File
@@ -5,7 +5,7 @@ cluster:
kubeProxyReplacement: true kubeProxyReplacement: true
# Talos specific # Talos specific
k8sServiceHost: localhost k8sServiceHost: localhost
k8sServicePort: 7445 k8sServicePort: 7445
securityContext: securityContext:
k8s/infra/network/cloudflared/config.yaml
+8 -8
View File
@@ -9,14 +9,14 @@ warp-routing:
ingress: ingress:
- hostname: hello.stonegarden.dev - hostname: hello.stonegarden.dev
service: hello_world service: hello_world
# - hostname: proxmox.stonegarden.dev # - hostname: proxmox.stonegarden.dev
# service: https://proxmox.proxmox.svc.cluster.local:443 # service: https://proxmox.proxmox.svc.cluster.local:443
# originRequest: # originRequest:
# originServerName: proxmox.stonegarden.dev # originServerName: proxmox.stonegarden.dev
# - hostname: truenas.stonegarden.dev # - hostname: truenas.stonegarden.dev
# service: https://truenas.truenas.svc.cluster.local:443 # service: https://truenas.truenas.svc.cluster.local:443
# originRequest: # originRequest:
# originServerName: truenas.stonegarden.dev # originServerName: truenas.stonegarden.dev
- hostname: "*.stonegarden.dev" - hostname: "*.stonegarden.dev"
service: https://cilium-gateway-external.gateway.svc.cluster.local:443 service: https://cilium-gateway-external.gateway.svc.cluster.local:443
originRequest: originRequest:
renovate.json
+7 -5
View File
@@ -66,12 +66,14 @@
"matchDepTypes": [ "matchDepTypes": [
"provider", "provider",
"required_provider" "required_provider"
]
},
{
"matchManagers": [
"github-actions"
], ],
"matchUpdateTypes": [ "groupName": "GitHub Actions",
"minor", "groupSlug": "github-actions"
"patch"
],
"automerge": true
} }
] ]
} }
tofu/kubernetes/talos/config.tofu
+21 -21
View File
@@ -1,6 +1,6 @@
locals { locals {
first_control_plane_node_ip = [for k, v in var.nodes : v.ip if v.machine_type == "controlplane"][0] first_control_plane_node_ip = [for k, v in var.nodes : v.ip if v.machine_type == "controlplane"][0]
kubernetes_endpoint = coalesce(var.cluster.vip, local.first_control_plane_node_ip) kubernetes_endpoint = coalesce(var.cluster.vip, local.first_control_plane_node_ip)
extra_manifests = concat(var.cluster.extra_manifests, [ extra_manifests = concat(var.cluster.extra_manifests, [
"https://github.com/kubernetes-sigs/gateway-api/releases/download/${var.cluster.gateway_api_version}/standard-install.yaml", "https://github.com/kubernetes-sigs/gateway-api/releases/download/${var.cluster.gateway_api_version}/standard-install.yaml",
"https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/${var.cluster.gateway_api_version}/config/crd/experimental/gateway.networking.k8s.io_tlsroutes.yaml" "https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/${var.cluster.gateway_api_version}/config/crd/experimental/gateway.networking.k8s.io_tlsroutes.yaml"
@@ -21,7 +21,7 @@ data "talos_client_configuration" "this" {
resource "terraform_data" "cilium_bootstrap_inline_manifests" { resource "terraform_data" "cilium_bootstrap_inline_manifests" {
input = [ input = [
{ {
name = "cilium-bootstrap" name = "cilium-bootstrap"
contents = file("${path.root}/${var.cluster.cilium.bootstrap_manifest_path}") contents = file("${path.root}/${var.cluster.cilium.bootstrap_manifest_path}")
}, },
{ {
@@ -42,8 +42,8 @@ resource "terraform_data" "cilium_bootstrap_inline_manifests" {
} }
data "talos_machine_configuration" "this" { data "talos_machine_configuration" "this" {
for_each = var.nodes for_each = var.nodes
cluster_name = var.cluster.name cluster_name = var.cluster.name
# This is the Kubernetes API Server endpoint. # This is the Kubernetes API Server endpoint.
# ref - https://www.talos.dev/latest/introduction/prodnotes/#decide-the-kubernetes-endpoint # ref - https://www.talos.dev/latest/introduction/prodnotes/#decide-the-kubernetes-endpoint
cluster_endpoint = "https://${local.kubernetes_endpoint}:6443" cluster_endpoint = "https://${local.kubernetes_endpoint}:6443"
@@ -60,27 +60,27 @@ data "talos_machine_configuration" "this" {
hostname = each.key hostname = each.key
kubelet = var.cluster.kubelet kubelet = var.cluster.kubelet
}), each.value.machine_type == "controlplane" ? }), each.value.machine_type == "controlplane" ?
templatefile("${path.module}/machine-config/control-plane.yaml.tftpl", { templatefile("${path.module}/machine-config/control-plane.yaml.tftpl", {
ip = each.value.ip ip = each.value.ip
mac_address = lower(each.value.mac_address) mac_address = lower(each.value.mac_address)
gateway = var.cluster.gateway gateway = var.cluster.gateway
subnet_mask = var.cluster.subnet_mask subnet_mask = var.cluster.subnet_mask
vip = var.cluster.vip vip = var.cluster.vip
extra_manifests = jsonencode(local.extra_manifests) extra_manifests = jsonencode(local.extra_manifests)
api_server = var.cluster.api_server api_server = var.cluster.api_server
inline_manifests = jsonencode(terraform_data.cilium_bootstrap_inline_manifests.output) inline_manifests = jsonencode(terraform_data.cilium_bootstrap_inline_manifests.output)
}) : }) :
templatefile("${path.module}/machine-config/worker.yaml.tftpl", { templatefile("${path.module}/machine-config/worker.yaml.tftpl", {
ip = each.value.ip ip = each.value.ip
mac_address = lower(each.value.mac_address) mac_address = lower(each.value.mac_address)
gateway = var.cluster.gateway gateway = var.cluster.gateway
subnet_mask = var.cluster.subnet_mask subnet_mask = var.cluster.subnet_mask
}) })
] ]
} }
resource "talos_machine_configuration_apply" "this" { resource "talos_machine_configuration_apply" "this" {
depends_on = [proxmox_virtual_environment_vm.this] depends_on = [proxmox_virtual_environment_vm.this]
for_each = var.nodes for_each = var.nodes
node = each.value.ip node = each.value.ip
client_configuration = talos_machine_secrets.this.client_configuration client_configuration = talos_machine_secrets.this.client_configuration
tofu/kubernetes/talos/image.tofu
+4 -4
View File
@@ -1,12 +1,12 @@
locals { locals {
version = var.image.version version = var.image.version
schematic = file("${path.root}/${var.image.schematic_path}") schematic = file("${path.root}/${var.image.schematic_path}")
schematic_id = jsondecode(data.http.schematic_id.response_body)["id"] schematic_id = jsondecode(data.http.schematic_id.response_body)["id"]
update_version = coalesce(var.image.update_version, var.image.version) update_version = coalesce(var.image.update_version, var.image.version)
update_schematic_path = coalesce(var.image.update_schematic_path, var.image.schematic_path) update_schematic_path = coalesce(var.image.update_schematic_path, var.image.schematic_path)
update_schematic = file("${path.root}/${local.update_schematic_path}") update_schematic = file("${path.root}/${local.update_schematic_path}")
update_schematic_id = jsondecode(data.http.updated_schematic_id.response_body)["id"] update_schematic_id = jsondecode(data.http.updated_schematic_id.response_body)["id"]
image_id = "${local.schematic_id}_${local.version}" image_id = "${local.schematic_id}_${local.version}"
update_image_id = "${local.update_schematic_id}_${local.update_version}" update_image_id = "${local.update_schematic_id}_${local.update_version}"