feat: add build job

- add build job that runs `make plan` - enable provider caching
Merge pull request 'chore: upgrade terragrunt/tofu' (#28 ) from benvin/upgrade into master
2025-10-17 12:07:36 +11:00 · 2025-10-17 07:49:04 +11:00 · 2025-10-17 07:47:29 +11:00 · 2025-08-13 13:25:55 +10:00 · 2025-08-13 13:25:10 +10:00 · 2025-08-11 22:54:40 +10:00
117 changed files with 1292 additions and 84 deletions
@@ -0,0 +1,33 @@
+---
+name: Build
+
+on:
+  pull_request:
+
+jobs:
+  build:
+    runs-on: almalinux-8
+    container:
+      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
+      options: --privileged
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Fetch master branch
+        run: |
+          git fetch origin master:master
+
+      - name: Show changed files
+        run: |
+          git diff --name-only master
+
+      - name: Run Terraform Plan
+        env:
+          VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
+        run: |
+          ls -lh ~/.config/incus
+          make plan
@@ -10,7 +10,8 @@ define vault_env
 	export PUPPET_CERT_CA=$$(vault kv get -field=public_key kv/service/puppet/certificates/ca) && \
 	export PUPPET_CERT_PUB=$$(vault kv get -field=public_key kv/service/puppet/certificates/terraform) && \
 	export PUPPET_CERT_PRIV=$$(vault kv get -field=private_key kv/service/puppet/certificates/terraform) && \
-	export TERRAGRUNT_EXCLUDE_DIR="templates/base" \
+	export TG_QUEUE_EXCLUDE_DIR="templates/base" && \
+	export TG_PROVIDER_CACHE=1 && \
 	export $$(vault read -format=json kv/data/service/terraform/incus | jq -r '.data.data | to_entries[] | "\(.key)=\(.value)"')
 endef

@@ -23,20 +24,20 @@ clean:

 init:
 	@$(call vault_env) && \
-	terragrunt run-all --terragrunt-non-interactive init --upgrade
+	terragrunt run --all --non-interactive init -- -upgrade

 plan: init
 	@$(call vault_env) && \
-	terragrunt run-all --terragrunt-parallelism 8 --terragrunt-non-interactive plan
+	terragrunt run --all --parallelism 8 --non-interactive plan

 apply:
 	@$(call vault_env) && \
-	terragrunt run-all --terragrunt-parallelism 5 --terragrunt-non-interactive apply
+	terragrunt run --all --parallelism 5 --non-interactive apply

 output:
 	@$(call vault_env) && \
 	rm -f tf_outputs.json && \
-	terragrunt run-all --terragrunt-parallelism 10 --terragrunt-non-interactive output -json >> tf_outputs.json
+	terragrunt run --all --parallelism 10 --non-interactive output -json >> tf_outputs.json

 hiera:
 	@echo "Setting up virtual environment with uv..."
@@ -1,4 +1,3 @@
-# special devices
 gpu:
  description: "Pass-through Intel GPU"
  project: null
@@ -296,6 +295,16 @@ net_dmz1_eth1:
    limits.memory.enforce: hard
    limits.memory.swap: false
  devices: []
+2core3072:
+  description: "2 cores, 3GB RAM"
+  project: null
+  config:
+    boot.autostart: true
+    limits.cpu: 2
+    limits.memory: 3072MB
+    limits.memory.enforce: hard
+    limits.memory.swap: false
+  devices: []
 2core4096:
  description: "2 cores, 4GB RAM"
  project: null
@@ -306,6 +315,16 @@ net_dmz1_eth1:
    limits.memory.enforce: hard
    limits.memory.swap: false
  devices: []
+2core6144:
+  description: "2 cores, 6GB RAM"
+  project: null
+  config:
+    boot.autostart: true
+    limits.cpu: 2
+    limits.memory: 6144MB
+    limits.memory.enforce: hard
+    limits.memory.swap: false
+  devices: []
 4core4096:
  description: "4 cores, 4GB RAM"
  project: null
@@ -316,6 +335,16 @@ net_dmz1_eth1:
    limits.memory.enforce: hard
    limits.memory.swap: false
  devices: []
+4core6144:
+  description: "4 cores, 6GB RAM"
+  project: null
+  config:
+    boot.autostart: true
+    limits.cpu: 4
+    limits.memory: 6144MB
+    limits.memory.enforce: hard
+    limits.memory.swap: false
+  devices: []
 4core8192:
  description: "4 cores, 8GB RAM"
  project: null
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  nomad_server:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  nomad_server:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  nomad_server:
    pool: fastpool
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
@@ -4,10 +4,10 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  prometheus:
    pool: fastpool
    path: /data
    config:
-      size: 50GB
+      size: 100GB
@@ -4,10 +4,10 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  prometheus:
    pool: fastpool
    path: /data
    config:
-      size: 50GB
+      size: 100GB
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
  - shared_apps_packagerepo
 storage_volumes:
  data:
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
  - shared_apps_packagerepo
 storage_volumes:
  data:
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
  - shared_apps_packagerepo
 storage_volumes:
  data:
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
  - shared_apps_gitea
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
  - shared_apps_gitea
@@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
  - shared_apps_gitea
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  data:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  data:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  data:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  data:
    pool: fastpool
@@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  data:
    pool: fastpool
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,10 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 50GB
@@ -4,4 +4,10 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 50GB
@@ -4,4 +4,10 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 50GB
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
@@ -5,7 +5,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  data:
    pool: fastpool
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
@@ -0,0 +1,13 @@
+description: VictoraLogs-Insert
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlinsert
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 50GB
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0010"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,13 @@
+description: VictoriaLogs-Insert
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlinsert
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 50GB
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0011"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,13 @@
+description: VictoriaLogs-Insert
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlinsert
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 50GB
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0012"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,7 @@
+description: VictoriaLogs-Select
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlselect
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0013"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,7 @@
+description: VictoriaLogs-Select
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlselect
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0009"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,7 @@
+description: VictoriaLogs-Select
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlselect
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0010"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,13 @@
+description: VictoriaLogs-Storage
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlstorage
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 100GB
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0009"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,13 @@
+description: VictoriaLogs-Storage
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlstorage
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 100GB
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0010"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,13 @@
+description: VictoriaLogs-Storage
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlstorage
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 100GB
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0011"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,13 @@
+description: VictoriaLogs-Storage
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlstorage
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 100GB
@@ -0,0 +1,52 @@
+locals {
+  node_name     = "prodnxsr0012"
+  config_common     = yamldecode(file("${get_terragrunt_dir()}/../config_common.yaml"))
+  config_specific   = yamldecode(file("${get_terragrunt_dir()}/config.yaml"))
+  config            = merge(local.config_common, local.config_specific)
+  instance_name     = basename(get_terragrunt_dir())
+}
+
+inputs = merge(
+  {
+    name = local.instance_name
+  },
+  local.config
+)
+
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+}
+
+include "instances" {
+  path   = find_in_parent_folders("instances.hcl")
+  expose = true
+  merge_strategy = "deep"
+}
+
+dependencies {
+  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
+}
+
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
+generate "incus" {
+  path      = "incus.tf"
+  if_exists = "overwrite_terragrunt"
+  contents  = <<-EOF
+    provider "incus" {
+      generate_client_certificates = true
+      accept_remote_certificate    = true
+
+      remote {
+        name    = "${basename(get_terragrunt_dir())}"
+        scheme  = "https"
+        address = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_addr}"
+        port    = "${yamldecode(file("${get_repo_root()}/config/nodes/${local.node_name}/config.yaml")).node_port}"
+        token   = "${get_env("INCUS_TOKEN_${upper(local.node_name)}")}"
+        default = true
+      }
+    }
+  EOF
+}
@@ -0,0 +1,13 @@
+description: VictoriaLogs-Storage
+cobbler_mgmt_classes:
+  - roles::infra::logs::vlstorage
+profiles:
+  - disk10
+  - net_com1_eth0
+  - 2core4096
+storage_volumes:
+  data:
+    pool: fastpool
+    path: /data
+    config:
+      size: 100GB
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
unkinben	67da0f4cad	feat: add build job Build / build (pull_request) Failing after 1m20s Details - add build job that runs `make plan` - enable provider caching	2025-10-17 12:07:36 +11:00
unkinben	3f386b4e21	Merge pull request 'chore: upgrade terragrunt/tofu' (#28 ) from benvin/upgrade into master Reviewed-on: #28	2025-10-17 07:49:04 +11:00
unkinben	4a298bde81	chore: upgrade terragrunt/tofu - fix makefile to work with opentofu and terragrunt 0.90.0 - cleanup comments - rename template/base/terragrunt.hcl	2025-10-17 07:47:29 +11:00
unkinben	cc4e5248da	Merge pull request 'chore: change all 2GB hosts to 3GB' (#27 ) from benvin/default_3gb into master Reviewed-on: #27	2025-08-13 13:25:55 +10:00
unkinben	56145c57e2	chore: change all 2GB hosts to 3GB - minimum required for dnf makecache to not cause a random oom	2025-08-13 13:25:10 +10:00
unkinben	09ace1dd43	Merge pull request 'chore: upgrade memory for haproxy' (#26 ) from benvin/haproxymem into master Reviewed-on: #26	2025-08-11 22:54:40 +10:00
unkinben	ee1d28099e	chore: upgrade memory for haproxy - more failures from dnf	2025-08-11 22:54:05 +10:00
unkinben	59bc523793	Merge pull request 'feat: add s3 interface' (#25 ) from benvin/rgw into master Reviewed-on: #25	2025-08-10 19:55:49 +10:00
unkinben	f90f6166ae	feat: add s3 interface - add 5 ceph rgw containers	2025-08-10 19:55:01 +10:00
unkinben	496e05b730	Merge pull request 'feat: add new profiles, up memory' (#24 ) from benvin/puppetmem into master Reviewed-on: #24	2025-08-09 14:43:05 +10:00
unkinben	67846f5908	feat: add new profiles, up memory - add new profiles for 3 and 6GB RAM - upgrade puppet hosts to 6GB RAM	2025-08-09 14:42:16 +10:00
unkinben	2d4b7fb9c8	Merge pull request 'chore: memory increase' (#23 ) from benvin/memory-upgrades into master Reviewed-on: #23	2025-08-08 23:45:32 +10:00
unkinben	f0c6909a25	chore: memory increase - dnf is causing some oom events, needs a little more memory	2025-08-08 23:40:37 +10:00
unkinben	8a8b33eaad	Merge pull request 'victorialogs' (#22 ) from victorialogs into master Reviewed-on: #22	2025-08-08 23:16:54 +10:00
unkinben	5befbcd14e	feat: add victorialogs systems - 5 vlstorage - 3 vlselect - 3 vlinsert - 2 vlagent	2025-08-08 23:15:50 +10:00
unkinben	8a0e7a7620	feat: add victorialogs roles - add vl* roles to boilerplate	2025-08-07 20:37:47 +10:00
unkinben	b8fac526b6	Merge pull request 'chore: failing dnf updates as out of memory' (#21 ) from benvin/memory_changes into master Reviewed-on: #21	2025-08-02 10:11:58 +10:00
unkinben	a6db4c2d19	chore: failing dnf updates as out of memory - increase memory for redis instances - increase memory for grafana instances	2025-08-02 10:05:03 +10:00
unkinben	f0271546bc	Merge pull request 'feat: bump memory for glauth' (#20 ) from benvin/glauth_memory into master Reviewed-on: #20	2025-07-27 13:43:43 +10:00
unkinben	8471742131	feat: bump memory for glauth - puppet has oom'ed a few times now	2025-07-27 13:43:06 +10:00
unkinben	7b3d224b64	Merge pull request 'feat: add cache path for vmselect' (#19 ) from benvin/vmselect-cache into master Reviewed-on: #19	2025-07-20 16:01:13 +10:00
unkinben	7c1c385ab5	feat: add cache path for vmselect - for use by the cacheDataPath	2025-07-20 16:00:28 +10:00
unkinben	791edafa26	Merge pull request 'chore: increase prometheus storage' (#18 ) from benvin/prometheus_storage into master Reviewed-on: #18	2025-07-19 12:36:37 +10:00
unkinben	57c41108de	chore: increase prometheus storage - both instances are close to 100% full	2025-07-19 12:35:49 +10:00