Damien/iac-homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: add Proxmox setup guide for Terraform #2

Merged
Damien merged 4 commits from feature/docs-proxmox-setup into dev 2025-12-07 13:08:16 +00:00
Conversation 0 Commits 4 Files Changed 4 +10 -10
2 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 51bcd79e05 - Show all commits

6
docs/proxmox-setup.md
View File

@@ -11,10 +11,10 @@ Instead of using the `Administrator` role, we create a dedicated `TerraformRole`
## Required Privileges (Proxmox 9.1) ## Required Privileges (Proxmox 9.1)
| Category | Privileges | | Category | Privileges |
| --------- | ------------------------------------------------------------------------------------------------------------ | | --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Datastore | `Allocate`, `AllocateSpace`, `AllocateTemplate`, `Audit` | | Datastore | `Allocate`, `AllocateSpace`, `AllocateTemplate`, `Audit` |
| System | `Audit`, `Console`, `Modify` | | System | `Audit`, `Console`, `Modify` |
| VM | `Allocate`, `Audit`, `Clone`, `Config.*`, `Console`, `Migrate`, `PowerMgmt`, `Snapshot`, `Snapshot.Rollback` | | VM | `Allocate`, `Audit`, `Clone`, `Config.*`, `Console`, `Migrate`, `PowerMgmt`, `Snapshot`, `Snapshot.Rollback`,`GuestAgent.Audit`, `GuestAgent.FileRead` |
| Pool | `Allocate`, `Audit` | | Pool | `Allocate`, `Audit` |
| SDN | `Use` | | SDN | `Use` |
@@ -73,7 +73,7 @@ Instead of using the `Administrator` role, we create a dedicated `TerraformRole`
```bash ```bash
# 1. Create role # 1. Create role
pveum role add TerraformRole -privs "Datastore.Allocate,Datastore.AllocateSpace,Datastore.AllocateTemplate,Datastore.Audit,Pool.Allocate,Pool.Audit,SDN.Use,Sys.Audit,Sys.Console,Sys.Modify,VM.Allocate,VM.Audit,VM.Clone,VM.Config.CDROM,VM.Config.Cloudinit,VM.Config.CPU,VM.Config.Disk,VM.Config.HWType,VM.Config.Memory,VM.Config.Network,VM.Config.Options,VM.Console,VM.Migrate,VM.PowerMgmt,VM.Snapshot,VM.Snapshot.Rollback" pveum role add TerraformRole -privs "Datastore.Allocate,Datastore.AllocateSpace,Datastore.AllocateTemplate,Datastore.Audit,Pool.Allocate,Pool.Audit,SDN.Use,Sys.Audit,Sys.Console,Sys.Modify,VM.Allocate,VM.Audit,VM.Clone,VM.Config.CDROM,VM.Config.Cloudinit,VM.Config.CPU,VM.Config.Disk,VM.Config.HWType,VM.Config.Memory,VM.Config.Network,VM.Config.Options,VM.Console,VM.Migrate,VM.PowerMgmt,VM.Snapshot,VM.Snapshot.Rollback,VM.GuestAgent.Audit,VM.GuestAgent.FileRead "
# 2. Create user # 2. Create user
pveum user add terraform@pve --comment "Terraform automation" pveum user add terraform@pve --comment "Terraform automation"

2
terraform/prod/variables.tf
View File

@@ -59,7 +59,7 @@ variable "virtual_machines" {
disk_format = optional(string, "raw") disk_format = optional(string, "raw")
network_bridge = optional(string, "vmbr0") network_bridge = optional(string, "vmbr0")
network_model = optional(string, "virtio") network_model = optional(string, "virtio")
username = optional(string) username = optional(string, "damien")
on_boot = optional(bool, true) on_boot = optional(bool, true)
tags = optional(list(string), []) tags = optional(list(string), [])