Pull PVE Configs

This role pulls pve config using the pseudo filesystem at /etc/pve.

This is a simple way to backup cluster settings.

Defaults

---
# ansible/roles/<role_name> is always under ansible/, so two dirname() calls resolve ansible/ reliably.
pull_pve_configs__repository_root: "{{ lookup('ansible.builtin.env', 'OFF_INFRA_REPOSITORY_ROOT') | default((role_path | dirname | dirname), true) }}"
pull_pve_configs__pulled_confs_root: "{{ pull_pve_configs__repository_root }}/pulled_confs"
pull_pve_configs__source_dir: /etc/pve
pull_pve_configs__corosync_conf_path: "{{ pull_pve_configs__source_dir }}/corosync.conf"
pull_pve_configs__exclude_regexes:
  # Exclude private key files anywhere under pull_pve_configs__source_dir.

  - '.*\.key$'
  - '(^|/)ssh_known_hosts$'
  - '(^|/)authorized_keys$'
  - '(^|/)shadow\.cfg$'
  - '(^|/)token\.cfg$'
  - '(^|/)priv(/|$)'
  # Exclude fast moving file, not really a config
  - '(^|/)lrm_status$'