mirror of
https://github.com/khuedoan/homelab.git
synced 2025-01-10 07:16:57 +07:00
77 lines
2.1 KiB
HCL
77 lines
2.1 KiB
HCL
resource "lxd_container" "k8s" {
|
|
count = 1
|
|
name = "k8s${count.index}"
|
|
image = "ubuntu:20.04"
|
|
ephemeral = false
|
|
|
|
config = {
|
|
security.privileged = true
|
|
security.nesting = true
|
|
limits.memory.swap = false
|
|
limits.cpus = 1
|
|
linux.kernel_modules = "ip_tables,ip6_tables,nf_nat,overlay,br_netfilter"
|
|
raw.lxc = <<-EOT
|
|
lxc.apparmor.profile=unconfined
|
|
lxc.cap.drop=
|
|
lxc.cgroup.devices.allow=a
|
|
lxc.mount.auto=proc:rw sys:rw
|
|
EOT
|
|
user.user-data = <<-EOT
|
|
#cloud-config
|
|
ssh_authorized_keys:
|
|
- ${file("~/.ssh/id_rsa.pub")}
|
|
disable_root: false
|
|
runcmd:
|
|
- apt-get update
|
|
- apt-get install -y iptables git telnet vim software-properties-common resolvconf linux-headers-$(uname -r)
|
|
- echo "nameserver 1.1.1.1" > /etc/resolvconf/resolv.conf.d/tail
|
|
- echo "RateLimitIntervalSec=0" >> /etc/systemd/journald.conf
|
|
- echo "RateLimitBurst=0" >> /etc/systemd/journald.conf
|
|
- systemctl restart systemd-journald.service
|
|
- systemctl start resolvconf
|
|
- /opt/rke2/run_rke2.sh
|
|
write_files:
|
|
- path: /opt/rke2/run_rke2.sh
|
|
permissions: "0755"
|
|
owner: root:root
|
|
content: |
|
|
#!/bin/bash
|
|
curl -fsSL https://raw.githubusercontent.com/rancher/rke2/master/install.sh --output install.sh
|
|
chmod u+x install.sh
|
|
INSTALL_RKE2_METHOD='tar' INSTALL_RKE2_TYPE=server INSTALL_RKE2_VERSION=v1.19.7+rke2r1 ./install.sh
|
|
systemctl enable rke2-server
|
|
systemctl start rke2-server
|
|
EOT
|
|
}
|
|
|
|
limits = {
|
|
cpu = 2
|
|
}
|
|
}
|
|
|
|
# resource "rke_cluster" "cluster" {
|
|
# dynamic "nodes" {
|
|
# for_each = lxd_container.k8s
|
|
|
|
# content {
|
|
# address = nodes.value.ip_address
|
|
# user = "root"
|
|
# role = [
|
|
# "controlplane",
|
|
# "etcd",
|
|
# "worker"
|
|
# ]
|
|
# ssh_key = file("~/.ssh/id_rsa")
|
|
# }
|
|
# }
|
|
|
|
# ingress {
|
|
# provider = "none"
|
|
# }
|
|
# }
|
|
|
|
# resource "local_file" "kube_config_yaml" {
|
|
# filename = "${path.root}/kube_config.yaml"
|
|
# content = rke_cluster.cluster.kube_config_yaml
|
|
# }
|