Migration provider bpg, templates cloud-init propres, cluster k3s HA (control-plane)

This commit is contained in:
2026-08-23 14:26:38 +02:00
parent ff2ab4ff0a
commit 115541aac0
-94
View File
@@ -1,94 +0,0 @@
# Machine virtuelle Linux
resource "proxmox_vm_qemu" "docker_nodes" {
count = 2 # On déploie 2 VMs d'un coup !
name = "srv-docker-${count.index + 1}"
target_node = "pve00" # Ton HP Gen 10+ avec le RAID 10
vmid = 530 + count.index # IDs 530 et 531 pour les deux VMs Docker
# storage = "VM_POOL_RAID10" # Stockage en LVM pour de meilleures performances
clone = "debian13-cloundinit-template" # (debian13-cloundinit-template) Clone à partir du template Debian 13 que tu as créé
# FORCE LE CONTROLEUR VIRTIO SCSI
scsihw = "virtio-scsi-single"
# Disque de 20 Go sur le stockage local-zfs (RAID 10)
disks {
scsi {
scsi0 {
disk {
size = "20G"
storage = "VM_POOL_RAID10"
# S'ASSURER QUE LE TYPE EST BIEN SCSI
iothread = true
}
}
}
}
# Configuration CPU/RAM
cpu {
cores = 2
sockets = 1
}
memory = 4096
agent = 1 # Active le QEMU Guest Agent
# Réseau : VLAN 530 (Docker)
network {
id = 0
model = "virtio"
bridge = "vmbr1"
tag = 530
firewall = false
link_down = false
}
# Cloud-Init : IPs statiques automatiques
ipconfig0 = "ip=192.168.30.2${count.index}/24,gw=192.168.30.254"
ssh_user = "root"
ssh_private_key = <<EOF
-----BEGIN RSA PRIVATE KEY-----
PuTTY-User-Key-File-3: ssh-rsa
Encryption: none
Comment: rsa-key-20260319
Public-Lines: 6
AAAAB3NzaC1yc2EAAAADAQABAAABAQC/4+tQiMd1sneZ3pIiWbfjWSJyorSPTfPZ
dXeUcN30R3G/dN8YbQlDMVCKBOEMps87q1gUpwBWmCvCcr9VsWlSq69nXD27EmBf
0vtzbYW49zQzNda8dJfD1Bna0/2PjA6xHBiGS/FT0QhDU1KQqqiCtMI6Ho/5OrOl
IGmIW9Adlq0ORXidV/FQWdJwn6OowpCtJpHp34iJ3C316H+71xoIvBd5SIRbowyS
BaQibIknQuapcgpAI5glpyQkjHNT3AVPupZ1bO43pZMp3rb/gz6bb1+K5yMHjahY
BwjY0+Gsbp31Ln2z9gpxecrB65+fli2L43S+lbn4YM7Tu8nZ8fON
Private-Lines: 14
AAABADsiHY3/2Jeom7rLH/V9+HETMs5o3YOb3h2RWXxhG8T/j0oU1ftM/qG6PLuL
rV6cuRgGQWp73FrTIgkWG2ho97AGQFN11YAktZZSCjMT+TV62Jc/bCE/PNWYMy+A
TI9D9fMWWWhpVsEhlY5JyxPRw4Qj+Aa5DF0dfebRCjR/Nq8nCdL2046KXmJBfGFD
6xjMcT6NW7b/fqJKZdV2JpIKFNM+0ohGwgqjvyJH4fAXf5VCeI6jtmozawvj6/2t
v5WAyXYhI3T6srwhVTeD4out5g06v6KUxLWVtRJhgeroao6A3CtjKRmFrXdHyJIy
JbZFSNpOqudFYpH9xQDeiAISvoEAAACBAP77YGp9QY0X6zsRxSDQzI83mB44atZH
/mMyak1M1cOniV7KmKZFFFlgHNyxLLhjCMfJxZEA5/3beAk7lsN4SU7L7rRM77a6
dk0jhqABKplSG75GwKOtyCaZPvIENEadbkSCKkZLeTTfD8NQXQ3NKfxA72u2LE0d
ux3NqntCBq5FAAAAgQDAqA4XvdnkFfSd7VNU/7fRWs2Mbomqrg3Bb6FVd5DXc/Z2
ragUoH93cOUgLFNXHsG6d62gXZSsGGgYz5YLfNrgaMoWtd9uqzjj2lHgvyohA1ij
evSQW2oBNjSXDa+CBmOklpFeIv06NJj7Zt/zA7gBOz3K/5X4S6j//FaoYYfIqQAA
AIEA7UD4j3PuUnCiTpcDELrQwRzQV0c8u2PHtYeA3rIh4J1FH3hmCt7jJ92x2/A+
9n3QLtcHo/MkiWcjdS7OMpuWkUDEV0HvV5/ZuYFs32UfJAEBUTKp8NEyjte1Fm74
q1xTWj/lgHL+sgaNjMzaebAub5m8pIiPGZK7v4xJSdsDxzU=
Private-MAC: 3d0150f25c68a131b885cfa43fa9f96141154d3b419159af81216e1dd23efa01
-----END RSA PRIVATE KEY-----
EOF
/* tags = {
environment = var.environment_tag
} */
/* depends_on = [
azurerm_network_interface.nic,
azurerm_network_security_group.nsg
] */
# Injecte ta clé SSH pour qu'Ansible puisse se connecter après
sshkeys = <<EOF
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/4+tQiMd1sneZ3pIiWbfjWSJyorSPTfPZdXeUcN30R3G/dN8YbQlDMVCKBOEMps87q1gUpwBWmCvCcr9VsWlSq69nXD27EmBf0vtzbYW49zQzNda8dJfD1Bna0/2PjA6xHBiGS/FT0QhDU1KQqqiCtMI6Ho/5OrOlIGmIW9Adlq0ORXidV/FQWdJwn6OowpCtJpHp34iJ3C316H+71xoIvBd5SIRbowySBaQibIknQuapcgpAI5glpyQkjHNT3AVPupZ1bO43pZMp3rb/gz6bb1+K5yMHjahYBwjY0+Gsbp31Ln2z9gpxecrB65+fli2L43S+lbn4YM7Tu8nZ8fON rsa-key-20260319
EOF
}