feat(terraform): restructure control planes into a 3-node map with LAN etcd advertise and live machine CA — enables talos-cp-1/2/3 HA and drops worker configs

terraform/variables.tf

@@ -100,48 +100,38 @@ variable "secretbox_encryption_secret" {
   description = "Secretbox encryption secret (base64 encoded)"
 }
 
-variable "controlplane_config" {
-  type = object({
-    hostname    = string
-    lan_ip      = string
-    lan_subnet  = string
-    lan_gateway = string
-    wg0_ip      = string
-    wg0_subnet  = string
-    wg0_port    = number
-    wg0_peers = list(object({
+variable "controlplane_configs" {
+  type = map(object({
+    hostname        = string
+    lan_ip          = string
+    lan_subnet      = string
+    lan_gateway     = string
+    wg0_ip          = optional(string)
+    wg0_subnet      = optional(string)
+    wg0_port        = optional(number)
+    wg0_private_key = optional(string)
+    wg0_peers = optional(list(object({
       public_key  = string
       allowed_ips = list(string)
-    }))
-    wg1_ip     = string
-    wg1_subnet = string
-    wg1_port   = number
-    wg1_peers = list(object({
+    })), [])
+    wg1_ip          = optional(string)
+    wg1_subnet      = optional(string)
+    wg1_port        = optional(number)
+    wg1_private_key = optional(string)
+    wg1_peers = optional(list(object({
       public_key                = string
       allowed_ips               = list(string)
       persistent_keepalive_secs = number
-    }))
-    wg0_private_key = string
-    wg1_private_key = string
-    install_disk    = string
+    })), [])
+    install_disk = string
     longhorn_disks = list(object({
       device     = string
       mountpoint = string
     }))
-  })
-  description = "Control plane machine configuration"
-}
-
-variable "worker_configs" {
-  type = map(object({
-    hostname     = string
-    lan_ip       = string
-    lan_subnet   = string
-    lan_gateway  = string
-    install_disk = string
-    node_labels  = map(string)
+    zone             = string
+    allow_scheduling = bool
   }))
-  description = "Worker machine configurations"
+  description = "Control plane machine configurations, keyed by node"
 }
 
 variable "cluster_config" {