Damien/iac-homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: add Proxmox setup guide for Terraform #2

Merged
Damien merged 4 commits from feature/docs-proxmox-setup into dev 2025-12-07 13:08:16 +00:00
Conversation 0 Commits 4 Files Changed 4 +172 -19
Damien commented 2025-12-07 13:06:55 +00:00
Owner
Copy Link

Summary

Add Proxmox setup documentation for Terraform with dedicated role and minimal privileges.

Changes

  • Add docs/proxmox-setup.md with complete setup guide
  • Dedicated TerraformRole (no Administrator role needed)
  • Both Web UI and CLI procedures
  • SSH configuration for bpg/proxmox provider

Privileges (Proxmox 9.1)

Category Privileges
Datastore Allocate, AllocateSpace, AllocateTemplate, Audit
System Audit, Console, Modify
VM Allocate, Audit, Clone, Config.*, Console, Migrate, PowerMgmt, Snapshot, Snapshot.Rollback, GuestAgent.Audit, GuestAgent.FileRead
Pool Allocate, Audit
SDN Use

⚠️ VM.Monitor deprecated in Proxmox 9 — use VM.GuestAgent.Audit and VM.GuestAgent.FileRead instead.

Related

Closes #1

## Summary Add Proxmox setup documentation for Terraform with dedicated role and minimal privileges. ## Changes - Add `docs/proxmox-setup.md` with complete setup guide - Dedicated `TerraformRole` (no Administrator role needed) - Both Web UI and CLI procedures - SSH configuration for bpg/proxmox provider ## Privileges (Proxmox 9.1) | Category | Privileges | |-----------|------------| | Datastore | `Allocate`, `AllocateSpace`, `AllocateTemplate`, `Audit` | | System | `Audit`, `Console`, `Modify` | | VM | `Allocate`, `Audit`, `Clone`, `Config.*`, `Console`, `Migrate`, `PowerMgmt`, `Snapshot`, `Snapshot.Rollback`, `GuestAgent.Audit`, `GuestAgent.FileRead` | | Pool | `Allocate`, `Audit` | | SDN | `Use` | > ⚠️ `VM.Monitor` deprecated in Proxmox 9 — use `VM.GuestAgent.Audit` and `VM.GuestAgent.FileRead` instead. ## Related Closes #1
Damien added 4 commits 2025-12-07 13:06:56 +00:00
docs: add Proxmox setup guide for Terraform 1b02d43ec4 
Closes #1

- Add dedicated TerraformRole with minimal privileges
- Document Web UI and CLI setup procedures
- Include SSH configuration for bpg/proxmox provider
- Remove deprecated VM.Monitor privilege for Proxmox 9.1
chore(deps): upgrade bpg/proxmox provider to v0.89.0 4623674632 
Updates the `bpg/proxmox` Terraform provider from version 0.43.0 to 0.89.0 in the production lock file to pull in the latest upstream changes.

Additionally, applies automatic markdown formatting to tables in `docs/proxmox-setup.md` to align columns and improve readability.
docs: update proxmox role privs and default vm user 51bcd79e05 
This commit updates the documentation and Terraform variables to reflect recent changes in the Proxmox environment setup.

- `docs/proxmox-setup.md`: Added `VM.GuestAgent.Audit` and `VM.GuestAgent.FileRead` to the required privileges list and the CLI command example. This ensures Terraform can properly interact with the QEMU Guest Agent.
- `terraform/prod/variables.tf`: Set a default value ("damien") for the `username` variable in the `virtual_machines` object to simplify configuration for the primary user.
docs: fix trailing whitespace in proxmox role creation command 2751555890
Damien merged commit 90232da467 into dev 2025-12-07 13:08:16 +00:00
Damien deleted branch feature/docs-proxmox-setup 2025-12-07 13:08:17 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
Damien
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Damien/iac-homelab#2
Delete Branch "feature/docs-proxmox-setup"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?