terraform {
  required_providers {
    rancher2 = {
      source  = "rancher/rancher2"
      version = "4.1.0"
    }
  }
}


provider "rancher2" {
  api_url    = "https://rancher.192.168.122.162.sslip.io"
  access_key = "token-brzdn"
  secret_key = "jvppnrvt5njp72lr565jlbhcdh94vbv4n69f8zncwhn75nh88z7lzv"
  insecure   = true
}


data "rancher2_cluster_v2" "foo-harvester" {
  name = "harv-local"
}

# Create a new Cloud Credential for an imported Harvester cluster
resource "rancher2_cloud_credential" "foo-harvester" {
  name = "foo-harvester"
  harvester_credential_config {
    cluster_id         = data.rancher2_cluster_v2.foo-harvester.cluster_v1_id
    cluster_type       = "imported"
    kubeconfig_content = data.rancher2_cluster_v2.foo-harvester.kube_config
  }
}



data "template_file" "userdata" {
  template = <<EOF
#cloud-config
package_update: true
packages:
  - qemu-guest-agent
  - iptables
runcmd:
  - - systemctl
    - enable
    - '--now'
    - qemu-guest-agent.service
password: 123456
chpasswd: { expire: False }
ssh_pwauth: True
EOF
}

# Create a new rancher2 machine config v2 using harvester node_driver
resource "rancher2_machine_config_v2" "foo-harvester-v2" {
  generate_name = "foo-harvester-v2"
  harvester_config {
    vm_namespace = "default"
    cpu_count    = "2"
    memory_size  = "4"
    #vm_affinity  = base64encode(data.template_file.affinity.rendered)
    #vm_affinity  = data.template_file.affinity.rendered
    disk_info    = <<EOF
    {
        "disks": [{
            "imageName": "default/image-nd55g",
            "size": 40,
            "bootOrder": 1
        }]
    }
    EOF
    network_info = <<EOF
    {
        "interfaces": [{
            "networkName": "default/vlan1"
        }]
    }
    EOF
    ssh_user     = "ubuntu"
    user_data    = base64encode(data.template_file.userdata.rendered)
  }
}

resource "rancher2_cluster_v2" "foo-harvester-v2" {
  name               = "foo-harvester-v2"
  kubernetes_version = "v1.29.5+rke2r1"
  rke_config {
    machine_pools {
      name                         = "pool1"
      cloud_credential_secret_name = rancher2_cloud_credential.foo-harvester.id
      control_plane_role           = true
      etcd_role                    = true
      worker_role                  = true
      quantity                     = 1
      machine_config {
        kind = rancher2_machine_config_v2.foo-harvester-v2.kind
        name = rancher2_machine_config_v2.foo-harvester-v2.name
      }
    }
    # ########## Generate Manually ##########
    # gen_harvester_cloud_provider_kubeconfig.sh
    # #######################################
    machine_selector_config {
      config = jsonencode({
        cloud-provider-config = file("${path.module}/harv-local-kubeconfig")
        cloud-provider-name = "harvester"
      })
    }
    machine_global_config = <<EOF
cni: "calico"
disable-kube-proxy: false
etcd-expose-metrics: false
EOF
    upgrade_strategy {
      control_plane_concurrency = "10%"
      worker_concurrency        = "10%"
    }
    etcd {
      snapshot_schedule_cron = "0 */5 * * *"
      snapshot_retention     = 5
    }
    chart_values = <<EOF
    harvester-cloud-provider:
      clusterName: harv-local
      cloudConfigPath: /var/lib/rancher/rke2/etc/config-files/cloud-provider-config
    EOF
  }
}