VM.Monitor permission dropped in favour of Sys.Audit

[ion-ize]

According to the release notes for PVE 9.0 the VM.Monitor permisssion was dropped and instead will need to use Sys.Audit. This causes an error since this provider plugin is hard coded to use the VM.Monitor permission scope.

See release notes here for more information on permission changes, this is just the one I noticed preventing me from running this now.

[ion-ize]

Additionally if the permission scopes could be defined by variables that would make this easier going forward if permissions get updated again later on.

[Tinyblargon]

@ion-ize, there is a way of overwriting it as the hardcoded permissions were moved into a variable recently.

In the future, the plan is to have the SDK project do all the permissions validation based on what you try to accomplish.

Due to us figuring out these changes when the rest of the community does, we will probably always be 3 months behind when it comes to new features and major versions.

[keschyfoo]

there is a way of overwriting it as the hardcoded permissions were moved into a variable recently

Could you elaborate on that? I am having the same issue.

[maksimsamt]

there is a way of overwriting it as the hardcoded permissions were moved into a variable recently

Could you elaborate on that? I am having the same issue.

As workaround can use these parameters:
minimum_permission_check = false
or
minimum_permission_check = true
minimum_permission_list = [ your_permission_list ]

#1328
#1326

[outbackdingo]

minimum_permission_check = false

okay, for the unfamiliar ones in here, where / how do we set this??

[maksimsamt]

minimum_permission_check

okay, for the unfamiliar ones in here, where / how do we set this??

RT*M:
https://github.com/Telmate/terraform-provider-proxmox/blob/master/docs/index.md#argument-reference

[outbackdingo]

minimum_permission_check

okay, for the unfamiliar ones in here, where / how do we set this??

RT*M: https://github.com/Telmate/terraform-provider-proxmox/blob/master/docs/index.md#argument-reference

sorry mate, not helpful... i set pm_minimum_permission_check, and it does nothing

[outbackdingo]

╷
│ Error: permissions for user/token root@pam are not sufficient, please provide also the following permissions that are missing: [VM.Monitor]
│

provider "proxmox" {
  pm_api_url      = var.proxmox_api_url
  pm_user         = var.proxmox_user
  pm_password     = var.proxmox_password
  pm_parallel     = 1
  pm_tls_insecure = true
  pm_log_enable   = false
  pm_timeout      = 600
  pm_minimum_permission_check = true

terraform version

Terraform v1.12.2
on linux_amd64

• provider registry.terraform.io/hashicorp/kubernetes v2.35.1
• provider registry.terraform.io/hashicorp/local v2.5.3
• provider registry.terraform.io/hashicorp/null v3.2.4
• provider registry.terraform.io/hashicorp/random v3.7.2
• provider registry.terraform.io/telmate/proxmox v3.0.1-rc6

[maksimsamt]

Please read again documentation.

pm_minimum_permission_check = true
As per doc:

Enable minimum permission check. This will check if the user has the minimum permissions required to use the provider.

For your case to skip permission checking you have to set:
pm_minimum_permission_check = false

[outbackdingo]

Please read again documentation.

pm_minimum_permission_check = true As per doc:

Enable minimum permission check. This will check if the user has the minimum permissions required to use the provider.

For your case to skip permission checking you have to set: pm_minimum_permission_check = false

ok changed to false, again failed

│ Error: permissions for user/token root@pam are not sufficient, please provide also the following permissions that are missing: [VM.Monitor]
│

[outbackdingo]

im thinking provider registry.terraform.io/telmate/proxmox v3.0.1-rc6 is the issue
no idea why its not finding 3.0.2-rc03, if i change the version it fails to find it

• Finding telmate/proxmox versions matching ">= 1.0.0, 3.0.1-rc6"...

terraform {
  required_providers {
    kubernetes = {
      source  = "hashicorp/kubernetes"
      version = "~> 2.35.0"
    }
    proxmox = {
      source  = "Telmate/proxmox"
      version = ">=1.0.0"
    }
  }
  required_version = ">= 0.14"
}

# Configure the Proxmox provider
provider "proxmox" {
  pm_api_url      = var.proxmox_api_url
  pm_user         = var.proxmox_user
  pm_password     = var.proxmox_password
  pm_parallel     = 1
  pm_tls_insecure = true
  pm_log_enable   = false
  pm_timeout      = 600
  pm_minimum_permission_check = false

}

[maksimsamt]

Try to define in tf version file exact version, e.g. version = "3.0.2-rc03" or version = ">=3.0.2-rc03"

[maksimsamt]

As well you can try to cleanup providers, like this:

rm -f .terraform.lock.hcl
rm -rf .terraform/
terraform init