@yunuseon/kayra 0.0.0-stage → 0.5.0

package/terraform/modules/multipass-instance/main.tf

@@ -0,0 +1,67 @@
+# =============================================================================
+# Multipass Instance Module
+# Provisions a local VM via Multipass with the same cloud-init as production.
+# Generates a dedicated, disposable SSH keypair for the instance — unlike
+# the hcloud-server module, which expects the operator's own persistent key.
+# =============================================================================
+
+terraform {
+  required_providers {
+    multipass = {
+      source = "todoroff/multipass"
+    }
+    tls = {
+      source = "hashicorp/tls"
+    }
+    local = {
+      source = "hashicorp/local"
+    }
+  }
+}
+
+resource "tls_private_key" "deploy" {
+  algorithm = "ED25519"
+}
+
+resource "local_sensitive_file" "private_key" {
+  content         = tls_private_key.deploy.private_key_openssh
+  filename        = "${var.ssh_key_dir}/${var.name}_ed25519"
+  file_permission = "0600"
+}
+
+resource "local_file" "public_key" {
+  content  = tls_private_key.deploy.public_key_openssh
+  filename = "${var.ssh_key_dir}/${var.name}_ed25519.pub"
+}
+
+# ---------------------------------------------------------------------------
+# Instance
+# ---------------------------------------------------------------------------
+resource "multipass_instance" "this" {
+  name   = var.name
+  image  = var.image
+  cpus   = var.cpus
+  memory = var.memory
+  disk   = var.disk
+
+  cloud_init = templatefile("${path.module}/../../../cloud-init.yml.tpl", {
+    hostname   = var.name
+    ssh_pubkey = tls_private_key.deploy.public_key_openssh
+  })
+
+  wait_for_cloud_init = true
+}
+
+# ---------------------------------------------------------------------------
+# Ansible inventory file
+# ---------------------------------------------------------------------------
+resource "local_file" "ansible_inventory" {
+  content = templatefile("${path.module}/templates/inventory.ini.tpl", {
+    hostname     = var.name
+    ssh_host     = multipass_instance.this.ipv4[0]
+    ssh_port     = 22
+    ssh_user     = "deploy"
+    ssh_key_path = local_sensitive_file.private_key.filename
+  })
+  filename = var.inventory_path
+}

package/terraform/modules/multipass-instance/outputs.tf

@@ -0,0 +1,19 @@
+output "ipv4_address" {
+  description = "Primary IPv4 address of the instance"
+  value       = multipass_instance.this.ipv4[0]
+}
+
+output "instance_name" {
+  description = "Multipass instance name"
+  value       = multipass_instance.this.name
+}
+
+output "inventory_path" {
+  description = "Path to the generated Ansible inventory"
+  value       = local_file.ansible_inventory.filename
+}
+
+output "ssh_private_key_path" {
+  description = "Path to the generated SSH private key"
+  value       = local_sensitive_file.private_key.filename
+}

package/terraform/modules/multipass-instance/templates/inventory.ini.tpl

@@ -0,0 +1,5 @@
+[servers]
+${hostname} ansible_host=${ssh_host} ansible_port=${ssh_port} ansible_user=${ssh_user} ansible_ssh_private_key_file=${ssh_key_path}
+
+[servers:vars]
+ansible_ssh_common_args=-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null

package/terraform/modules/multipass-instance/variables.tf

@@ -0,0 +1,39 @@
+variable "name" {
+  description = "Instance name"
+  type        = string
+}
+
+variable "image" {
+  description = "Multipass image alias"
+  type        = string
+  default     = "24.04"
+}
+
+variable "cpus" {
+  description = "Virtual CPU count"
+  type        = number
+  default     = 2
+}
+
+variable "memory" {
+  description = "Memory size (e.g. 4G)"
+  type        = string
+  default     = "2G"
+}
+
+variable "disk" {
+  description = "Disk size (e.g. 20G)"
+  type        = string
+  default     = "10G"
+}
+
+variable "ssh_key_dir" {
+  description = "Directory to write the generated SSH keypair into"
+  type        = string
+}
+
+variable "inventory_path" {
+  description = "Path to write the Ansible inventory file"
+  type        = string
+  default     = "./inventory.ini"
+}