diff --git a/docs/proxmox-setup.md b/docs/proxmox-setup.md index 974df78..f403a15 100644 --- a/docs/proxmox-setup.md +++ b/docs/proxmox-setup.md @@ -10,13 +10,13 @@ Instead of using the `Administrator` role, we create a dedicated `TerraformRole` ## Required Privileges (Proxmox 9.1) -| Category | Privileges | -|-----------|------------| -| Datastore | `Allocate`, `AllocateSpace`, `AllocateTemplate`, `Audit` | -| System | `Audit`, `Console`, `Modify` | +| Category | Privileges | +| --------- | ------------------------------------------------------------------------------------------------------------ | +| Datastore | `Allocate`, `AllocateSpace`, `AllocateTemplate`, `Audit` | +| System | `Audit`, `Console`, `Modify` | | VM | `Allocate`, `Audit`, `Clone`, `Config.*`, `Console`, `Migrate`, `PowerMgmt`, `Snapshot`, `Snapshot.Rollback` | -| Pool | `Allocate`, `Audit` | -| SDN | `Use` | +| Pool | `Allocate`, `Audit` | +| SDN | `Use` | > ⚠️ `VM.Monitor` was deprecated in Proxmox 9 — do not include it. @@ -35,24 +35,24 @@ Instead of using the `Administrator` role, we create a dedicated `TerraformRole` **Datacenter → Permissions → Users → Add** -| Field | Value | -|-------|-------| -| User name | `terraform` | -| Realm | `Proxmox VE authentication server` | -| Password | *(set a strong password)* | -| Enabled | ☑️ | -| Expire | `never` | +| Field | Value | +| --------- | ---------------------------------- | +| User name | `terraform` | +| Realm | `Proxmox VE authentication server` | +| Password | *(set a strong password)* | +| Enabled | ☑️ | +| Expire | `never` | ### 3. Create API Token **Datacenter → Permissions → API Tokens → Add** -| Field | Value | -|-------|-------| -| User | `terraform@pve` | -| Token ID | `terraform_token` | -| Privilege Separation | ☐ *(unchecked)* | -| Expire | `never` | +| Field | Value | +| -------------------- | ----------------- | +| User | `terraform@pve` | +| Token ID | `terraform_token` | +| Privilege Separation | ☐ *(unchecked)* | +| Expire | `never` | > 📋 **Save the token secret** — it won't be shown again! @@ -60,12 +60,12 @@ Instead of using the `Administrator` role, we create a dedicated `TerraformRole` **Datacenter → Permissions → Add → User Permission** -| Field | Value | -|-------|-------| -| Path | `/` | -| User | `terraform@pve` | -| Role | `TerraformRole` | -| Propagate | ☑️ | +| Field | Value | +| --------- | --------------- | +| Path | `/` | +| User | `terraform@pve` | +| Role | `TerraformRole` | +| Propagate | ☑️ | --- diff --git a/terraform/prod/.terraform.lock.hcl b/terraform/prod/.terraform.lock.hcl index d35f2be..a61d838 100644 --- a/terraform/prod/.terraform.lock.hcl +++ b/terraform/prod/.terraform.lock.hcl @@ -2,23 +2,23 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/bpg/proxmox" { - version = "0.43.0" - constraints = "0.43.0" + version = "0.89.0" hashes = [ - "h1:T1KwNv9zR6q+UTTa7cXa6qAsV1IR4YEkrCpZkM5xAdo=", - "zh:15be827515be0e5fee5128a82f294a9eba9b1dde22a203dc40f6d604832cf5e6", - "zh:1afbe8d25ad1acff6e01f0746df204e43d9841603bc68c47efbd78acb94d09e6", - "zh:1c3873fb2eee657c6acc035b52fd1fea1b8d8173651ae59d9dbd809d9586d5c7", - "zh:2a6f20b2e12b583b9cc53e3e9304a542da8ddb2ac1ba0c4eaf7963702e6d127c", - "zh:3c5fda4aac500ca49c9c33f5de08c9f5abe89106eb7e1546543678d83c189a8b", - "zh:7fb4de0b5fb2cfd57071675c0e118268eff04b2fda73e7f48251b93e1810b83a", - "zh:8fdec222b07106e011722163e1bd6b69bce866a63a1be55b724da8c271f62405", - "zh:900b297a21bdb2bf55e247e2a69e55563cf31f8ff189c2134612c7a5aedea970", - "zh:a24713eace6ba6ae0d19429c083b6bb2d88421d476819df62ccd9e0bb646410f", - "zh:b3267ca029946881b367baa579d49751e0f04f42f5cca1bbab34d02dad844bcd", - "zh:c5bf667aa91cd3fa17b3ef3f3020bd5984996eccc554c28990b5aba70bce4717", - "zh:db3cfe28bd077012804c3cb255771b8c13ffe37e6ffe9c7730ee3192ad974c93", - "zh:f11feed213e61cac4e00f568a6fdcee7eef9a4e3a28b605e7e0419ab36ccee49", - "zh:ff79ccc3535cce0aa00e77f2c3979ef492b9aa611aee643aadb104cffd591c46", + "h1:K+x0TE7ly2q7E8F1p+1HdBdW7Dpu7/y7KtzHVwUnlaU=", + "zh:0ac841733348a529a53552fbca2ec1c2a3765cab9a27c224c11f49ca0282f38e", + "zh:11fc498398efefe246ea7b9efd9a3a8cde875837875e8f15c89e501285f975aa", + "zh:2a4e9d5bd70112628b065c3f987bedb0d71ab1fa67f2e6c9589fd0f268fa81fa", + "zh:40fe200d655034c409b4dbb44f7999f3fef8bf82204b1c2faaba5fb3b9ed033d", + "zh:5a839039660c501b4b849d161734d663b7cae3efa4c8a301e73c8d1ae127b384", + "zh:7f8987ad04f2f6c1d2fb20ec1fe4391cf671d069dc310f9430cd707d2af8b235", + "zh:8c32f27e0da716116f65c1013c520d63074db07548c32732fd296a31587d17c4", + "zh:9384b2f2d899cf44662ffacbdf6bc268fecb9291755a633957a3413f109bdee6", + "zh:a62920cdfcd6f6a3af1887ba8159648b71a689a8109d4ce6506d90db6ba506db", + "zh:db864d419becc2a541f5db5df5d8325057e8e11ca2cd97d884507c5667466b46", + "zh:dc6072f36559444744a5ce551ac8b8ed160f8d8d0677eb9b740128cde8adb57a", + "zh:e23933741de78132b22ad356b2e81108a2d8322a29804702bc4a6c214843937d", + "zh:ea937465c1c757fd520e9a61eae749b20106a34d99dbe678d884b6b2fa763145", + "zh:ef3ae28ba0449c61f951ea11fe53626e7d32bcee2dcbf25ab47b7cc5b8fe2f32", + "zh:f26e0763dbe6a6b2195c94b44696f2110f7f55433dc142839be16b9697fa5597", ] } diff --git a/terraform/prod/providers.tf b/terraform/prod/providers.tf index 688279f..b5922f3 100644 --- a/terraform/prod/providers.tf +++ b/terraform/prod/providers.tf @@ -10,7 +10,7 @@ terraform { required_providers { proxmox = { source = "bpg/proxmox" - version = "0.43.0" + version = "0.89.0" } } }