Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve permission granularity scoping provider to pool #1103

Open
ardubev16 opened this issue Sep 12, 2024 · 0 comments
Open

Improve permission granularity scoping provider to pool #1103

ardubev16 opened this issue Sep 12, 2024 · 0 comments

Comments

@ardubev16
Copy link

I've found myself wanting to manage just a part of my Proxmox cluster using Terraform. To avoid doing damages I created a Pool and gave the Terraform user the permissions specified in the doc just in that pool.

This however doesn't work since the provider only checks the permissions for the / path and my user doesn't have any (the permissions are instead in /pool/<my_pool>).

To handle this scenario I propose the following changes:

  • a new provider variable pm_pool_scope to define the pool Terraform is supposed to use;
  • all resources will also have the pool field populated by default (idk if it's feasible, I just started playing with Terraform) and will be created inside that pool;
  • the permissions will be checked just for that pool and not globally.

In case this is a welcome proposal, I'd like to work on it! I took a quick look at the code and think there would be also the need to modify something in the proxmox-api-go library.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant