 Damien
|
2f396fd882
|
fix(ci): use custom terraform-ci container image
- Use gitea.arnodo.fr/damien/terraform-ci:latest (Terraform 1.5.7 + TFLint)
- Remove setup-terraform and setup-tflint actions (already in image)
- Replace actions/github-script with curl + Gitea API for PR comments
- Use gitea.* context variables instead of github.*
- Fix plan exit code handling (0=no changes, 2=changes, 1=error)
Refs #3
|
2025-12-08 08:12:14 +00:00 |
|
|
Damien
|
ae77521094
|
feat(ci): add Terraform CI/CD workflow
Implements automated Terraform pipeline with:
- Validation: fmt check, tflint, terraform validate
- Plan: on all PRs and pushes, with PR comments
- Apply: automatic on push to dev (when changes detected)
Runner: self-hosted (Docker) with Tailscale access to PVE01
Backend: Scaleway S3 Object Storage
Closes #3
|
2025-12-07 14:10:00 +00:00 |
|
 Damienanddarnodo
|
90232da467
|
docs: add Proxmox setup guide for Terraform (#2)
## Summary
Add Proxmox setup documentation for Terraform with dedicated role and minimal privileges.
## Changes
- Add `docs/proxmox-setup.md` with complete setup guide
- Dedicated `TerraformRole` (no Administrator role needed)
- Both Web UI and CLI procedures
- SSH configuration for bpg/proxmox provider
## Privileges (Proxmox 9.1)
| Category | Privileges |
|-----------|------------|
| Datastore | `Allocate`, `AllocateSpace`, `AllocateTemplate`, `Audit` |
| System | `Audit`, `Console`, `Modify` |
| VM | `Allocate`, `Audit`, `Clone`, `Config.*`, `Console`, `Migrate`, `PowerMgmt`, `Snapshot`, `Snapshot.Rollback`, `GuestAgent.Audit`, `GuestAgent.FileRead` |
| Pool | `Allocate`, `Audit` |
| SDN | `Use` |
> ⚠️ `VM.Monitor` deprecated in Proxmox 9 — use `VM.GuestAgent.Audit` and `VM.GuestAgent.FileRead` instead.
## Related
Closes #1
Co-authored-by: darnodo <sepales.pret0h@icloud.com>
Reviewed-on: #2
|
2025-12-07 13:08:16 +00:00 |
|