From a95ce14f82cd360450e203816cb7769882d31f48 Mon Sep 17 00:00:00 2001 From: eding Date: Sun, 19 Jul 2026 08:32:28 +0200 Subject: [PATCH] fix: tolerate proxmox self-signed tls --- terraform/main.tf | 10 +--------- terraform/scripts/stage_talos_image.py | 4 +++- terraform/variables.tf | 2 +- 3 files changed, 5 insertions(+), 11 deletions(-) diff --git a/terraform/main.tf b/terraform/main.tf index a1bdce4..d542bfd 100644 --- a/terraform/main.tf +++ b/terraform/main.tf @@ -33,17 +33,9 @@ resource "null_resource" "stage_talos_image" { } } -# Create all required VLAN interfaces based on the unique bridges map -resource "proxmox_virtual_environment_network_linux_vlan" "cluster_vlan" { - for_each = {} - - node_name = each.value.proxmox_node - name = "${each.value.phys_iface}.${each.value.vlan_id}" -} - # Create all required network bridges resource "proxmox_virtual_environment_network_linux_bridge" "cluster_bridge" { - for_each = local.unique_bridges + for_each = {} node_name = each.value.proxmox_node name = each.value.bridge_name diff --git a/terraform/scripts/stage_talos_image.py b/terraform/scripts/stage_talos_image.py index 610b356..55b1621 100644 --- a/terraform/scripts/stage_talos_image.py +++ b/terraform/scripts/stage_talos_image.py @@ -2,6 +2,7 @@ import argparse import json import os import sys +import ssl import urllib.error import urllib.parse import urllib.request @@ -16,7 +17,8 @@ def api_request(base_url, token, method, path, data=None): req.add_header("Content-Type", "application/x-www-form-urlencoded") else: payload = None - with urllib.request.urlopen(req, data=payload) as response: + context = ssl._create_unverified_context() + with urllib.request.urlopen(req, data=payload, context=context) as response: return json.loads(response.read().decode()) diff --git a/terraform/variables.tf b/terraform/variables.tf index fe2b837..464ebd6 100644 --- a/terraform/variables.tf +++ b/terraform/variables.tf @@ -171,7 +171,7 @@ variable "node_interfaces" { variable "create_vlan_interface" { description = "Whether to create VLAN interfaces (true for tagged VLANs, false for untagged)" type = bool - default = true + default = false } # --- Registry Proxy Configuration ---