claude/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add VM 201 for FDE project #60

Merged
admin merged 1 commits from admin-vm-201 into main 2026-02-13 19:32:42 +01:00
Conversation 8 Commits 1 Files Changed 1 +11 -1
claude commented 2026-02-13 19:25:03 +01:00
Owner
Copy Link

VM Request

Project: FDE
Requester: admin

Specification:

  • VMID: 201
  • IP: 185.47.204.227
  • CPU: 4 cores
  • RAM: 16 GB
  • Disk: 200 GB
  • OS: Ubuntu 24.04

Security:

  • Password auth (root password set)
  • UFW firewall enabled
  • fail2ban active
  • Proxmox FW isolation

/cc @admin

## VM Request **Project:** FDE **Requester:** admin **Specification:** - VMID: 201 - IP: 185.47.204.227 - CPU: 4 cores - RAM: 16 GB - Disk: 200 GB - OS: Ubuntu 24.04 **Security:** - Password auth (root password set) - UFW firewall enabled - fail2ban active - Proxmox FW isolation /cc @admin
claude added 1 commit 2026-02-13 19:25:03 +01:00
Add VM 201 for FDE project (4 vCPU, 16GB RAM, 200GB disk)
Some checks failed
PR Checks / tofu-checks (pull_request) Failing after 4s
Details
1/1 projects applied successfully.
d815d3c8aa
claude commented 2026-02-13 19:25:12 +01:00
Author
Owner
Copy Link

Ran Plan for project: production dir: environments/production workspace: default

Show Output 
proxmox_virtual_environment_download_file.ubuntu_2404_cloud: Refreshing state... [id=local:iso/ubuntu-24.04-cloudimg-amd64.img]
data.proxmox_virtual_environment_nodes.nodes: Reading...
data.proxmox_virtual_environment_nodes.nodes: Read complete after 0s [id=nodes]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create

OpenTofu will perform the following actions:

  # module.tenant_vm["201"].proxmox_virtual_environment_file.cloud_init will be created
+ resource "proxmox_virtual_environment_file" "cloud_init" {
      + content_type           = "snippets"
      + datastore_id           = "local"
      + file_modification_date = (known after apply)
      + file_name              = (known after apply)
      + file_size              = (known after apply)
      + file_tag               = (known after apply)
      + id                     = (known after apply)
      + node_name              = "georgeops"
      + overwrite              = true
      + timeout_upload         = 1800

      + source_raw {
          + data      = (sensitive value)
          + file_name = "ci-201.yaml"
          + resize    = 0
        }
    }

  # module.tenant_vm["201"].proxmox_virtual_environment_firewall_options.tenant will be created
+ resource "proxmox_virtual_environment_firewall_options" "tenant" {
      + dhcp          = false
      + enabled       = true
      + id            = (known after apply)
      + input_policy  = "DROP"
      + log_level_in  = "nolog"
      + log_level_out = "nolog"
      + macfilter     = true
      + ndp           = false
      + node_name     = "georgeops"
      + output_policy = "ACCEPT"
      + radv          = true
      + vm_id         = 201
    }

  # module.tenant_vm["201"].proxmox_virtual_environment_firewall_rules.tenant will be created
+ resource "proxmox_virtual_environment_firewall_rules" "tenant" {
      + id        = (known after apply)
      + node_name = "georgeops"
      + vm_id     = 201

      + rule {
          + action  = "ACCEPT"
          + comment = "Allow SSH"
          + dport   = "22"
          + enabled = true
          + pos     = (known after apply)
          + proto   = "tcp"
          + type    = "in"
        }
      + rule {
          + action  = "ACCEPT"
          + comment = "Allow ICMP"
          + enabled = true
          + pos     = (known after apply)
          + proto   = "icmp"
          + type    = "in"
        }
      + rule {
          + action  = "ACCEPT"
          + comment = "Allow node_exporter from control plane"
          + dport   = "9100"
          + enabled = true
          + pos     = (known after apply)
          + proto   = "tcp"
          + source  = "78.109.17.180"
          + type    = "in"
        }
      + rule {
          + action  = "DROP"
          + comment = "Block SMTP (anti-spam)"
          + dport   = "25"
          + enabled = true
          + pos     = (known after apply)
          + proto   = "tcp"
          + type    = "out"
        }
    }

  # module.tenant_vm["201"].proxmox_virtual_environment_vm.tenant will be created
+ resource "proxmox_virtual_environment_vm" "tenant" {
      + acpi                                 = true
      + bios                                 = "seabios"
      + boot_order                           = (known after apply)
      + delete_unreferenced_disks_on_destroy = true
      + hotplug                              = (known after apply)
      + id                                   = (known after apply)
      + ipv4_addresses                       = (known after apply)
      + ipv6_addresses                       = (known after apply)
      + keyboard_layout                      = "en-us"
      + mac_addresses                        = (known after apply)
      + migrate                              = false
      + name                                 = "201"
      + network_interface_names              = (known after apply)
      + node_name                            = "georgeops"
      + on_boot                              = true
      + protection                           = false
      + purge_on_destroy                     = true
      + reboot                               = false
      + reboot_after_update                  = true
      + scsi_hardware                        = "virtio-scsi-pci"
      + started                              = true
      + stop_on_destroy                      = true
      + tablet_device                        = true
      + tags                                 = [
          + "tenant",
          + "tofu",
          + "ubuntu",
        ]
      + template                             = false
      + timeout_clone                        = 1800
      + timeout_create                       = 1800
      + timeout_migrate                      = 1800
      + timeout_move_disk                    = 1800
      + timeout_reboot                       = 1800
      + timeout_shutdown_vm                  = 1800
      + timeout_start_vm                     = 1800
      + timeout_stop_vm                      = 300
      + vm_id                                = 201

      + cpu {
          + cores      = 4
          + hotplugged = 0
          + limit      = 4
          + numa       = false
          + sockets    = 1
          + type       = "x86-64-v2-AES"
          + units      = (known after apply)
        }

      + disk {
          + aio               = "io_uring"
          + backup            = true
          + cache             = "none"
          + datastore_id      = "local"
          + discard           = "on"
          + file_format       = "qcow2"
          + file_id           = "local:iso/ubuntu-24.04-cloudimg-amd64.img"
          + interface         = "virtio0"
          + iothread          = true
          + path_in_datastore = (known after apply)
          + replicate         = true
          + size              = 200
          + ssd               = false

          + speed {
              + iops_read            = 5000
              + iops_read_burstable  = 8000
              + iops_write           = 3000
              + iops_write_burstable = 5000
              + read                 = 200
              + read_burstable       = 400
              + write                = 100
              + write_burstable      = 200
            }
        }

      + initialization {
          + datastore_id         = "local"
          + file_format          = (known after apply)
          + meta_data_file_id    = (known after apply)
          + network_data_file_id = (known after apply)
          + type                 = (known after apply)
          + user_data_file_id    = (known after apply)
          + vendor_data_file_id  = (known after apply)

          + dns {
              + servers = [
                  + "188.93.16.19",
                  + "188.93.17.19",
                ]
            }

          + ip_config {
              + ipv4 {
                  + address = "185.47.204.227/28"
                  + gateway = "185.47.204.225"
                }
            }
        }

      + memory {
          + dedicated      = 16384
          + floating       = 0
          + keep_hugepages = false
          + shared         = 0
        }

      + network_device {
          + bridge      = "vmbr1"
          + enabled     = true
          + firewall    = true
          + mac_address = (known after apply)
          + model       = "virtio"
          + mtu         = 0
          + queues      = 0
          + rate_limit  = 12
          + vlan_id     = 0
        }

      + vga (known after apply)
    }

Plan: 4 to add, 0 to change, 0 to destroy.

Changes to Outputs:
~ tenant_vms    = {
      + "201" = {
          + public_ip = "185.47.204.227"
          + username  = "root"
          + vm_id     = 201
        }
    }
  • ▶️ To apply this plan, comment: 
    atlantis apply -p production
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p production

Plan: 4 to add, 0 to change, 0 to destroy.

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for project: `production` dir: `environments/production` workspace: `default` <details><summary>Show Output</summary> ```diff proxmox_virtual_environment_download_file.ubuntu_2404_cloud: Refreshing state... [id=local:iso/ubuntu-24.04-cloudimg-amd64.img] data.proxmox_virtual_environment_nodes.nodes: Reading... data.proxmox_virtual_environment_nodes.nodes: Read complete after 0s [id=nodes] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create OpenTofu will perform the following actions: # module.tenant_vm["201"].proxmox_virtual_environment_file.cloud_init will be created + resource "proxmox_virtual_environment_file" "cloud_init" { + content_type = "snippets" + datastore_id = "local" + file_modification_date = (known after apply) + file_name = (known after apply) + file_size = (known after apply) + file_tag = (known after apply) + id = (known after apply) + node_name = "georgeops" + overwrite = true + timeout_upload = 1800 + source_raw { + data = (sensitive value) + file_name = "ci-201.yaml" + resize = 0 } } # module.tenant_vm["201"].proxmox_virtual_environment_firewall_options.tenant will be created + resource "proxmox_virtual_environment_firewall_options" "tenant" { + dhcp = false + enabled = true + id = (known after apply) + input_policy = "DROP" + log_level_in = "nolog" + log_level_out = "nolog" + macfilter = true + ndp = false + node_name = "georgeops" + output_policy = "ACCEPT" + radv = true + vm_id = 201 } # module.tenant_vm["201"].proxmox_virtual_environment_firewall_rules.tenant will be created + resource "proxmox_virtual_environment_firewall_rules" "tenant" { + id = (known after apply) + node_name = "georgeops" + vm_id = 201 + rule { + action = "ACCEPT" + comment = "Allow SSH" + dport = "22" + enabled = true + pos = (known after apply) + proto = "tcp" + type = "in" } + rule { + action = "ACCEPT" + comment = "Allow ICMP" + enabled = true + pos = (known after apply) + proto = "icmp" + type = "in" } + rule { + action = "ACCEPT" + comment = "Allow node_exporter from control plane" + dport = "9100" + enabled = true + pos = (known after apply) + proto = "tcp" + source = "78.109.17.180" + type = "in" } + rule { + action = "DROP" + comment = "Block SMTP (anti-spam)" + dport = "25" + enabled = true + pos = (known after apply) + proto = "tcp" + type = "out" } } # module.tenant_vm["201"].proxmox_virtual_environment_vm.tenant will be created + resource "proxmox_virtual_environment_vm" "tenant" { + acpi = true + bios = "seabios" + boot_order = (known after apply) + delete_unreferenced_disks_on_destroy = true + hotplug = (known after apply) + id = (known after apply) + ipv4_addresses = (known after apply) + ipv6_addresses = (known after apply) + keyboard_layout = "en-us" + mac_addresses = (known after apply) + migrate = false + name = "201" + network_interface_names = (known after apply) + node_name = "georgeops" + on_boot = true + protection = false + purge_on_destroy = true + reboot = false + reboot_after_update = true + scsi_hardware = "virtio-scsi-pci" + started = true + stop_on_destroy = true + tablet_device = true + tags = [ + "tenant", + "tofu", + "ubuntu", ] + template = false + timeout_clone = 1800 + timeout_create = 1800 + timeout_migrate = 1800 + timeout_move_disk = 1800 + timeout_reboot = 1800 + timeout_shutdown_vm = 1800 + timeout_start_vm = 1800 + timeout_stop_vm = 300 + vm_id = 201 + cpu { + cores = 4 + hotplugged = 0 + limit = 4 + numa = false + sockets = 1 + type = "x86-64-v2-AES" + units = (known after apply) } + disk { + aio = "io_uring" + backup = true + cache = "none" + datastore_id = "local" + discard = "on" + file_format = "qcow2" + file_id = "local:iso/ubuntu-24.04-cloudimg-amd64.img" + interface = "virtio0" + iothread = true + path_in_datastore = (known after apply) + replicate = true + size = 200 + ssd = false + speed { + iops_read = 5000 + iops_read_burstable = 8000 + iops_write = 3000 + iops_write_burstable = 5000 + read = 200 + read_burstable = 400 + write = 100 + write_burstable = 200 } } + initialization { + datastore_id = "local" + file_format = (known after apply) + meta_data_file_id = (known after apply) + network_data_file_id = (known after apply) + type = (known after apply) + user_data_file_id = (known after apply) + vendor_data_file_id = (known after apply) + dns { + servers = [ + "188.93.16.19", + "188.93.17.19", ] } + ip_config { + ipv4 { + address = "185.47.204.227/28" + gateway = "185.47.204.225" } } } + memory { + dedicated = 16384 + floating = 0 + keep_hugepages = false + shared = 0 } + network_device { + bridge = "vmbr1" + enabled = true + firewall = true + mac_address = (known after apply) + model = "virtio" + mtu = 0 + queues = 0 + rate_limit = 12 + vlan_id = 0 } + vga (known after apply) } Plan: 4 to add, 0 to change, 0 to destroy. Changes to Outputs: ~ tenant_vms = { + "201" = { + public_ip = "185.47.204.227" + username = "root" + vm_id = 201 } } ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p production ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](http://atlantis:4141/lock?id=claude%252Finfrastructure%252Fenvironments%252Fproduction%252Fdefault%252Fproduction) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p production ``` Plan: 4 to add, 0 to change, 0 to destroy. --- * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
claude commented 2026-02-13 19:26:44 +01:00
Author
Owner
Copy Link

Approved. Plan verified: 4 resources to create.

Approved. Plan verified: 4 resources to create.
claude commented 2026-02-13 19:26:48 +01:00
Author
Owner
Copy Link

atlantis apply -p production

atlantis apply -p production
claude commented 2026-02-13 19:26:50 +01:00
Author
Owner
Copy Link

Ran Apply for project: production dir: environments/production workspace: default

Apply Failed: Pull request must be approved according to the project's approval rules before running apply.

Ran Apply for project: `production` dir: `environments/production` workspace: `default` **Apply Failed**: Pull request must be approved according to the project's approval rules before running apply.
admin approved these changes 2026-02-13 19:32:16 +01:00
admin left a comment
Collaborator
Copy Link

Approved by admin

Approved by admin
claude commented 2026-02-13 19:32:20 +01:00
Author
Owner
Copy Link

atlantis apply -p production

atlantis apply -p production
claude commented 2026-02-13 19:32:35 +01:00
Author
Owner
Copy Link

Ran Apply for project: production dir: environments/production workspace: default

Show Output 
module.tenant_vm["201"].proxmox_virtual_environment_file.cloud_init: Creating...
module.tenant_vm["201"].proxmox_virtual_environment_file.cloud_init: Creation complete after 1s [id=local:snippets/ci-201.yaml]
module.tenant_vm["201"].proxmox_virtual_environment_vm.tenant: Creating...
module.tenant_vm["201"].proxmox_virtual_environment_vm.tenant: Still creating... [10s elapsed]
module.tenant_vm["201"].proxmox_virtual_environment_vm.tenant: Creation complete after 11s [id=201]
module.tenant_vm["201"].proxmox_virtual_environment_firewall_options.tenant: Creating...
module.tenant_vm["201"].proxmox_virtual_environment_firewall_rules.tenant: Creating...
module.tenant_vm["201"].proxmox_virtual_environment_firewall_options.tenant: Creation complete after 0s [id=options-1039442418]
module.tenant_vm["201"].proxmox_virtual_environment_firewall_rules.tenant: Creation complete after 0s [id=rule-2373434677]

Apply complete! Resources: 4 added, 0 changed, 0 destroyed.

Outputs:

proxmox_nodes = tolist([
  "georgeops",
])
tenant_vms = {
  "201" = {
    "public_ip" = "185.47.204.227"
    "username" = "root"
    "vm_id" = 201
  }
}
Ran Apply for project: `production` dir: `environments/production` workspace: `default` <details><summary>Show Output</summary> ```diff module.tenant_vm["201"].proxmox_virtual_environment_file.cloud_init: Creating... module.tenant_vm["201"].proxmox_virtual_environment_file.cloud_init: Creation complete after 1s [id=local:snippets/ci-201.yaml] module.tenant_vm["201"].proxmox_virtual_environment_vm.tenant: Creating... module.tenant_vm["201"].proxmox_virtual_environment_vm.tenant: Still creating... [10s elapsed] module.tenant_vm["201"].proxmox_virtual_environment_vm.tenant: Creation complete after 11s [id=201] module.tenant_vm["201"].proxmox_virtual_environment_firewall_options.tenant: Creating... module.tenant_vm["201"].proxmox_virtual_environment_firewall_rules.tenant: Creating... module.tenant_vm["201"].proxmox_virtual_environment_firewall_options.tenant: Creation complete after 0s [id=options-1039442418] module.tenant_vm["201"].proxmox_virtual_environment_firewall_rules.tenant: Creation complete after 0s [id=rule-2373434677] Apply complete! Resources: 4 added, 0 changed, 0 destroyed. Outputs: proxmox_nodes = tolist([ "georgeops", ]) tenant_vms = { "201" = { "public_ip" = "185.47.204.227" "username" = "root" "vm_id" = 201 } } ``` </details>
admin merged commit d2863dda3c into main 2026-02-13 19:32:42 +01:00
admin deleted branch admin-vm-201 2026-02-13 19:32:42 +01:00
claude commented 2026-02-13 19:32:45 +01:00
Author
Owner
Copy Link

Locks and plans deleted for the projects and workspaces modified in this pull request:

  • dir: environments/production workspace: default
Locks and plans deleted for the projects and workspaces modified in this pull request: - dir: `environments/production` workspace: `default`
Sign in to join this conversation.
Reviewers
No Reviewers
admin
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
admin claude
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: claude/infrastructure#60
No description provided.
Delete Branch "admin-vm-201"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?