feat: Create role

tasks/instance_vm_configuration.yml

@@ -0,0 +1,149 @@
+---
+# tasks file for proxmox
+
+- name: Build disks list
+  ansible.builtin.set_fact:
+    proxmox_instance_disks: "{{ proxmox_instance_disks + specific }}"
+  when: specific | length > 0
+  loop: "{{ lookup('ansible.builtin.varnames', '^proxmox_instance_disks_.+', wantlist=True) }}"
+  vars:
+    specific: "{{ lookup('ansible.builtin.vars', item, default='') }}"
+
+- name: Configure disks
+  community.proxmox.proxmox_disk:
+    api_host: "{{ proxmox_api_host }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    aio: "{{ item.aio | default(omit) }}"
+    backup: "{{ item.backup | default(omit) }}"
+    cache: "{{ item.cache | default(omit) }}"
+    disk: "{{ item.disk }}"
+    iothread: "{{ item.iothread | default(omit) }}"
+    mbps: "{{ item.mbps | default(omit) }}"
+    name: "{{ inventory_hostname }}"
+    storage: "{{ item.storage }}"
+    size: "{{ item.size }}"
+    state: present
+    vmid: "{{ proxmox_instance_vmid }}"
+  loop: "{{ proxmox_instance_disks }}"
+  loop_control:
+    label: "{{ item.disk }}"
+    index_var: disk_number
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+
+- name: Get instance informations
+  community.proxmox.proxmox_vm_info:
+    api_host: "{{ proxmox_api_host }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    config: current
+    name: "{{ inventory_hostname }}"
+    vmid: "{{ proxmox_instance_vmid }}"
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+  register: instance_current_infos
+
+- name: Grow disk size
+  community.proxmox.proxmox_disk:
+    api_host: "{{ proxmox_api_host }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    aio: "{{ item.aio | default(omit) }}"
+    backup: "{{ item.backup | default(omit) }}"
+    cache: "{{ item.cache | default(omit) }}"
+    disk: "{{ item.disk }}"
+    iothread: "{{ item.iothread | default(omit) }}"
+    mbps: "{{ item.mbps | default(omit) }}"
+    name: "{{ inventory_hostname }}"
+    storage: "{{ item.storage }}"
+    size: "{{ item.size }}G"
+    state: resized
+    vmid: "{{ proxmox_instance_vmid }}"
+  when:
+    - proxmox_instance_disks | length > 0
+    - instance_current_infos.proxmox_vms | length > 0
+    - formated_size not in instance_current_infos.proxmox_vms[0].config[item.disk]
+  loop: "{{ proxmox_instance_disks }}"
+  loop_control:
+    label: "{{ item.disk }}"
+    index_var: disk_number
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+  vars:
+    formated_size: "size={{ item.size }}G"
+
+- name: Reconfigure instance
+  community.proxmox.proxmox_kvm:
+    api_host: "{{ proxmox_api_host }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    agent: "enabled=1,fstrim_cloned_disks=1"
+    autostart: "{{ proxmox_instance_autostart }}"
+    cores: "{{ proxmox_instance_cores }}"
+    cpu: "{{ proxmox_instance_cpu }}"
+    hotplug: "{{ proxmox_instance_hotplug | join(',') }}"
+    ipconfig: "{{ proxmox_instance_ipconfig }}"
+    memory: "{{ proxmox_instance_memory }}"
+    name: "{{ inventory_hostname }}"
+    nameservers: "{{ proxmox_instance_cloudinit_nameservers }}"
+    node: "{{ proxmox_instance_node }}"
+    numa_enabled: "{{ proxmox_instance_numa }}"
+    onboot: "{{ proxmox_instance_onboot }}"
+    protection: "{{ proxmox_instance_protection }}"
+    tablet: false
+    vmid: "{{ proxmox_instance_vmid }}"
+    update: true
+    update_unsafe: true
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+
+- name: Get changed information about the instance
+  community.proxmox.proxmox_vm_info:
+    api_host: "{{ proxmox_api_host }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    config: pending
+    name: "{{ inventory_hostname }}"
+    vmid: "{{ proxmox_instance_vmid }}"
+    node: "{{ proxmox_instance_node }}"
+  when: not create_instance.changed
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+  register: instance_pending_infos
+
+- name: Reboot the instance
+  community.proxmox.proxmox_kvm:
+    api_host: "{{ proxmox_api_host }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    name: "{{ inventory_hostname }}"
+    node: "{{ proxmox_instance_node }}"
+    state: restarted
+    timeout: 300
+  when:
+    - proxmox_reboot_instance
+    - not create_instance.changed
+    - instance_current_infos.proxmox_vms[0].config != instance_pending_infos.proxmox_vms[0].config
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+  notify: Wait SSH port is open
+  register: rebooted
+
+- name: Flush handlers
+  ansible.builtin.meta: flush_handlers
+
+- name: Ensure instance is started
+  community.proxmox.proxmox_kvm:
+    api_host: "{{ proxmox_api_host }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    name: "{{ inventory_hostname }}"
+    node: "{{ proxmox_instance_node }}"
+    state: started
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+  notify: Wait SSH port is open
+
+- name: Flush handlers
+  ansible.builtin.meta: flush_handlers

tasks/instance_vm_ha.yml

@@ -0,0 +1,44 @@
+---
+# tasks file for proxmox
+
+- name: Build HA resources (vm:<vmid>) for node
+  set_fact:
+    ha_resources_for_node: >-
+      {{ ['vm:'] | product(
+           query('inventory_hostnames', 'type_proxmox_kvm:&zone_gaia') |
+           sort |
+           map('extract', hostvars) |
+           selectattr('proxmox_instance_node', 'equalto', proxmox_instance_node) |
+           map(attribute='proxmox_instance_vmid')
+         ) | map('join') | list }}
+
+- name: Ensure HA services exist for VMs
+  community.proxmox.proxmox_cluster_ha_resources:
+    api_host: "{{ proxmox_api_host }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    api_user: "{{ proxmox_api_user }}"
+    comment: "Managed by Ansible"
+    hastate: "{{ proxmox_instance_ha.state }}"
+    max_relocate: "{{ proxmox_instance_ha.max_relocate }}"
+    max_restart: "{{ proxmox_instance_ha.max_restart }}"
+    name: "vm:{{ proxmox_instance_vmid }}"
+    state: present
+  become: true
+  delegate_to: "{{ proxmox_delegate_to }}"
+
+- name: Create HA node affinity rule
+  community.proxmox.proxmox_cluster_ha_rules:
+    api_host: "{{ proxmox_api_host }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    api_user: "{{ proxmox_api_user }}"
+    comment: Managed by ansible
+    disable: false
+    name: "{{ proxmox_instance_node }}"
+    nodes: ["{{ proxmox_instance_node }}"]
+    resources: "{{ ha_resources_for_node }}"
+    state: present
+    type: node-affinity
+  become: true
+  delegate_to: "{{ proxmox_delegate_to }}"

tasks/instance_vm_template.yml

@@ -0,0 +1,71 @@
+---
+# tasks file for proxmox
+
+- name: Create instance
+  community.proxmox.proxmox_kvm:
+    api_host: "{{ proxmox_api_host }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    agent: "enabled=1,fstrim_cloned_disks=1"
+    autostart: "{{ proxmox_instance_autostart }}"
+    cores: "{{ proxmox_instance_cores }}"
+    cpu: "{{ proxmox_instance_cpu }}"
+    hotplug: "{{ proxmox_instance_hotplug | join(',') }}"
+    ipconfig: "{{ proxmox_instance_ipconfig }}"
+    memory: "{{ proxmox_instance_memory }}"
+    name: "{{ inventory_hostname }}"
+    nameservers: "{{ proxmox_instance_cloudinit_nameservers }}"
+    net: "{{ proxmox_instance_net }}"
+    node: "{{ proxmox_instance_node }}"
+    numa_enabled: "{{ proxmox_instance_numa }}"
+    onboot: "{{ proxmox_instance_onboot }}"
+    scsihw: virtio-scsi-single
+    tablet: false
+    vmid: "{{ proxmox_instance_vmid }}"
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+  register: create_instance
+  notify:
+    - Configure cloud-init
+    - Start instance
+    - Wait SSH port is open
+    - Wait cloud-init
+
+- name: Import virtual disk
+  ansible.builtin.command:
+    cmd: >-
+      qm set {{ proxmox_instance_vmid }}
+      --{{ proxmox_instance_disks[0].disk }}
+      {{ proxmox_instance_disks[0].storage }}:0,import-from={{ proxmox_instance_disks[0].img }}
+    chdir: "{{ proxmox_instance_disks[0].img | ansible.builtin.dirname }}"
+  when: create_instance.changed # noqa: no-handler no-changed-when
+  become: true
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+
+- name: Workaround to add args to the VM
+  ansible.builtin.lineinfile:
+    path: /etc/pve/qemu-server/{{ proxmox_instance_vmid }}.conf
+    line: "args: {{ proxmox_instance_args }}"
+    state: present
+  when: proxmox_instance_args | length > 0
+  become: true
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+
+- name: Add configuration items
+  community.proxmox.proxmox_kvm:
+    api_host: "{{ proxmox_api_host }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    boot: order=virtio0
+    name: "{{ inventory_hostname }}"
+    node: "{{ proxmox_instance_node }}"
+    serial:
+      serial0: socket
+    update: true
+    update_unsafe: true
+    vmid: "{{ proxmox_instance_vmid }}"
+  delegate_to: "{{ proxmox_delegate_to | default(omit) }}"
+  notify:
+    - Start instance
+    - Wait SSH port is open

tasks/main.yml

@@ -0,0 +1,26 @@
+---
+# tasks file for proxmox
+
+# Node
+- name: Import Proxmox VE configuration tasks
+  ansible.builtin.include_tasks:
+    file: node_configuration.yml
+  when: proxmox_instance_type | length == 0
+
+# Instance: vm
+- name: Import instance creation tasks
+  ansible.builtin.include_tasks:
+    file: instance_vm_template.yml
+  when: proxmox_instance_type == "vm"
+
+- name: Import instance configuration tasks
+  ansible.builtin.include_tasks:
+    file: instance_vm_configuration.yml
+  when: proxmox_instance_type == "vm"
+
+- name: Import HA configuration tasks
+  ansible.builtin.include_tasks:
+    file: instance_vm_ha.yml
+  when:
+    - proxmox_instance_type == "vm"
+    - proxmox_instance_ha | length > 0

tasks/node_configuration.yml

@@ -0,0 +1,120 @@
+---
+# tasks file for proxmox
+
+- name: Install prerequisite
+  ansible.builtin.apt:
+    name: python3-proxmoxer
+    update_cache: true
+  become: true
+
+- name: Manage Proxmox VE node bridge interface
+  community.proxmox.proxmox_node_network:
+    api_host: "{{ proxmox_api_host }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    api_user: "{{ proxmox_api_user }}"
+    autostart: "{{ item.autostart | default(true) }}"
+    cidr: "{{ item.cidr | default(omit) }}"
+    cidr6: "{{ item.cidr6 | default(omit) }}"
+    comments: "{{ item.comments | default(omit) }}"
+    gateway: "{{ item.gateway | default(omit) }}"
+    gateway6: "{{ item.gateway6 | default(omit) }}"
+    iface_type: bridge
+    iface: "{{ item.iface }}"
+    mtu: "{{ item.mtu | default(omit) }}"
+    node: "{{ inventory_hostname_short }}"
+    state: "{{ item.states | default('present') }}"
+    validate_certs: "{{ proxmox_api_validate_certs }}"
+  become: true
+  loop: "{{ proxmox_node_interfaces | selectattr('type', 'equalto', 'bridge') }}"
+  loop_control:
+    label: "{{ item.iface }}"
+
+- name: Manage Proxmox VE node eth interface
+  community.proxmox.proxmox_node_network:
+    api_host: "{{ proxmox_api_host }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    api_user: "{{ proxmox_api_user }}"
+    autostart: "{{ item.autostart | default(true) }}"
+    cidr: "{{ item.cidr | default(omit) }}"
+    cidr6: "{{ item.cidr6 | default(omit) }}"
+    comments: "{{ item.comments | default(omit) }}"
+    gateway: "{{ item.gateway | default(omit) }}"
+    gateway6: "{{ item.gateway6 | default(omit) }}"
+    iface_type: eth
+    iface: "{{ item.iface }}"
+    mtu: "{{ item.mtu | default(omit) }}"
+    node: "{{ inventory_hostname_short }}"
+    state: "{{ item.states | default('present') }}"
+    validate_certs: "{{ proxmox_api_validate_certs }}"
+  become: true
+  loop: "{{ proxmox_node_interfaces | selectattr('type', 'equalto', 'eth') }}"
+  loop_control:
+    label: "{{ item.iface }}"
+
+- name: Proxmox VE cluster management tasks
+  when: proxmox_cluster_name | length > 0
+  block:
+    - name: List existing Proxmox VE cluster join information
+      community.proxmox.proxmox_cluster_join_info:
+        api_host: "{{ proxmox_api_host }}"
+        api_token_id: "{{ proxmox_api_token_id }}"
+        api_token_secret: "{{ proxmox_api_token_secret }}"
+        api_user: "{{ proxmox_api_user }}"
+        validate_certs: "{{ proxmox_api_validate_certs }}"
+      become: true
+      register: proxmox_cluster_join
+
+    - name: Define variables to join an existing Proxmox VE cluster
+      ansible.builtin.set_fact:
+        proxmox_cluster_name: "{{ proxmox_cluster_join.cluster_join.totem.cluster_name }}"
+        proxmox_cluster_master_ip: "{{ proxmox_cluster_join.cluster_join.nodelist[0].pve_addr }}"
+        proxmox_cluster_fingerprint: "{{ proxmox_cluster_join.cluster_join.nodelist[0].pve_fp }}"
+      when: proxmox_cluster_join.cluster_join.nodelist | length > 0
+
+    - name: Manage Proxmox VE Cluster
+      community.proxmox.proxmox_cluster:
+        api_host: "{{ proxmox_api_host }}"
+        api_token_id: "{{ proxmox_api_token_id }}"
+        api_token_secret: "{{ proxmox_api_token_secret }}"
+        api_user: "{{ proxmox_api_user }}"
+        cluster_name: "{{ proxmox_cluster_name }}"
+        fingerprint: "{{ proxmox_cluster_fingerprint | default(omit) }}"
+        link0: "{{ proxmox_cluster_link0 | default(omit) }}"
+        link1: "{{ proxmox_cluster_link1 | default(omit) }}"
+        master_ip: "{{ proxmox_cluster_master_ip | default(omit) }}"
+        state: "{{ item.states | default('present') }}"
+        validate_certs: "{{ proxmox_api_validate_certs }}"
+      become: true
+      when: >-
+        proxmox_cluster_join.cluster_join.nodelist | length == 0
+        or
+        proxmox_cluster_join.cluster_join.nodelist | selectattr('name', 'equalto', inventory_hostname_short) | list | length == 0
+
+- name: Manage Proxmox VE storage
+  community.proxmox.proxmox_storage:
+    api_host: "{{ proxmox_api_host }}"
+    api_token_id: "{{ proxmox_api_token_id }}"
+    api_token_secret: "{{ proxmox_api_token_secret }}"
+    api_user: "{{ proxmox_api_user }}"
+    content: "{{ item.content }}"
+    name: "{{ item.name }}"
+    nfs_options: "{{ item.nfs_options | default(omit) }}"
+    nodes: "{{ item.nodes }}"
+    state: "{{ item.states | default('present') }}"
+    type: "{{ item.type }}"
+    validate_certs: "{{ proxmox_api_validate_certs }}"
+  loop: "{{ proxmox_storage }}"
+  loop_control:
+    label: "{{ item.name }}"
+
+- name: Download images
+  ansible.builtin.get_url:
+    url: "{{ item.url }}"
+    dest: "{{ item.dest }}"
+    mode: u=rw,g=r,o=r
+  become: true
+  loop: "{{ proxmox_images }}"
+  loop_control:
+    label: "{{ item.dest | ansible.builtin.basename }}"

tasks/node_update.yml

@@ -0,0 +1,113 @@
+---
+
+- name: Update apt cache
+  ansible.builtin.apt:
+    update_cache: true
+  become: true
+
+- name: List upgradable packages
+  ansible.builtin.command:
+    argv:
+      - apt
+      - list
+      - --upgradable
+  register: apt_upgradable
+  changed_when: apt_upgradable.stdout_lines | length > 1
+
+- name: Upgrade tasks
+  when: apt_upgradable.stdout_lines | length > 1
+  block:
+    - name: Enable maintenance node
+      ansible.builtin.command:
+        argv:
+          - ha-manager
+          - crm-command
+          - node-maintenance
+          - enable
+          - "{{ inventory_hostname_short }}"
+      become: true
+      register: proxmox_maintenance_enabled
+      changed_when: proxmox_maintenance_enabled.rc == 0
+
+    - name: Wait for the instances to be migrated
+      community.proxmox.proxmox_vm_info:
+        api_host: "{{ proxmox_api_host }}"
+        api_token_id: "{{ proxmox_api_token_id }}"
+        api_token_secret: "{{ proxmox_api_token_secret }}"
+        api_user: "{{ proxmox_api_user }}"
+        node: "{{ inventory_hostname_short }}"
+        type: all
+        validate_certs: "{{ proxmox_api_validate_certs }}"
+      become: true
+      register: proxmox_current_instances
+      retries: 20
+      delay: 30
+      until: proxmox_current_instances.proxmox_vms | selectattr('hastate', 'equalto', 'started') | list | length == 0
+
+    - name: Run the full-upgrade
+      ansible.builtin.apt:
+        upgrade: dist
+      become: true
+
+    - name: Reboot
+      ansible.builtin.reboot:
+      become: true
+
+    - name: Clean apt things
+      ansible.builtin.apt:
+        clean: true
+      become: true
+
+    - name: List installed packages
+      ansible.builtin.command: # noqa: no-changed-when
+        argv:
+          - apt
+          - list
+          - --installed
+      register: apt_list
+      check_mode: false
+
+    - name: Remove old kernels
+      ansible.builtin.apt:
+        name: "{{ installed_kernels[:-2] }}"
+        state: absent
+      when: installed_kernels | length > 2
+      become: true
+      vars:
+        installed_kernels:
+          apt_list.stdout_lines |
+          select('search', '^proxmox-kernel') |
+          select('search', 'automatic') |
+          split('/') | first | list
+      check_mode: true
+
+- name: Disable maintenance node
+  ansible.builtin.command:
+    argv:
+      - ha-manager
+      - crm-command
+      - node-maintenance
+      - disable
+      - "{{ inventory_hostname_short }}"
+  become: true
+  register: proxmox_maintenance_disabled
+  changed_when: proxmox_maintenance_disabled.rc == 0
+
+- name: Wait for the node to come out of maintenance
+  ansible.builtin.command: # noqa: no-changed-when
+    argv:
+      - ha-manager
+      - status
+  become: true
+  register: proxmox_ha_manager_status
+  changed_when: >-
+    proxmox_ha_manager_status.stdout_lines |
+    select('search', 'lrm ' + inventory_hostname_short) |
+    regex_search('active', ignorecase=true)
+  retries: 20
+  delay: 30
+  until: >-
+    not
+    proxmox_ha_manager_status.stdout_lines |
+    select('search', 'lrm ' + inventory_hostname_short) |
+    regex_search('active', ignorecase=true)