 Damien
|
ae77521094
|
feat(ci): add Terraform CI/CD workflow
Implements automated Terraform pipeline with:
- Validation: fmt check, tflint, terraform validate
- Plan: on all PRs and pushes, with PR comments
- Apply: automatic on push to dev (when changes detected)
Runner: self-hosted (Docker) with Tailscale access to PVE01
Backend: Scaleway S3 Object Storage
Closes #3
|
2025-12-07 14:10:00 +00:00 |
|
 Damienanddarnodo
|
90232da467
|
docs: add Proxmox setup guide for Terraform (#2)
## Summary
Add Proxmox setup documentation for Terraform with dedicated role and minimal privileges.
## Changes
- Add `docs/proxmox-setup.md` with complete setup guide
- Dedicated `TerraformRole` (no Administrator role needed)
- Both Web UI and CLI procedures
- SSH configuration for bpg/proxmox provider
## Privileges (Proxmox 9.1)
| Category | Privileges |
|-----------|------------|
| Datastore | `Allocate`, `AllocateSpace`, `AllocateTemplate`, `Audit` |
| System | `Audit`, `Console`, `Modify` |
| VM | `Allocate`, `Audit`, `Clone`, `Config.*`, `Console`, `Migrate`, `PowerMgmt`, `Snapshot`, `Snapshot.Rollback`, `GuestAgent.Audit`, `GuestAgent.FileRead` |
| Pool | `Allocate`, `Audit` |
| SDN | `Use` |
> ⚠️ `VM.Monitor` deprecated in Proxmox 9 — use `VM.GuestAgent.Audit` and `VM.GuestAgent.FileRead` instead.
## Related
Closes #1
Co-authored-by: darnodo <sepales.pret0h@icloud.com>
Reviewed-on: #2
|
2025-12-07 13:08:16 +00:00 |
|