7cd7022f6e
- Added lock file exclusions for pnpm in .gitignore. - Removed obsolete package-lock.json from the api and portal directories. - Enhanced Cloudflare adapter with additional interfaces for zones and tunnels. - Improved Proxmox adapter error handling and logging for API requests. - Updated Proxmox VM parameters with validation rules in the API schema. - Enhanced documentation for Proxmox VM specifications and examples.
157 lines
3.8 KiB
Markdown
157 lines
3.8 KiB
Markdown
# Proxmox Credentials Verification Status
|
|
|
|
**Date**: 2025-12-09
|
|
**Status**: ⚠️ **Verification Incomplete**
|
|
|
|
---
|
|
|
|
## Summary
|
|
|
|
Proxmox credentials are configured in `.env` file, but automated verification is encountering authentication failures. Manual verification is recommended.
|
|
|
|
---
|
|
|
|
## Configuration Status
|
|
|
|
### Environment Variables
|
|
- ✅ `.env` file exists
|
|
- ✅ `PROXMOX_ROOT_PASS` is set
|
|
- ✅ `PROXMOX_1_PASS` is set (derived from PROXMOX_ROOT_PASS)
|
|
- ✅ `PROXMOX_2_PASS` is set (derived from PROXMOX_ROOT_PASS)
|
|
- ⚠️ Default API URLs and usernames used (not explicitly set)
|
|
|
|
### Connectivity
|
|
- ✅ Site 1 (192.168.11.10:8006): Reachable
|
|
- ✅ Site 2 (192.168.11.11:8006): Reachable
|
|
|
|
### Authentication
|
|
- ❌ Site 1: Authentication failing
|
|
- ❌ Site 2: Authentication failing
|
|
- ⚠️ Error: "authentication failure"
|
|
|
|
---
|
|
|
|
## Verification Results
|
|
|
|
### Automated Tests
|
|
1. **API Endpoint Connectivity**: ✅ Both sites reachable
|
|
2. **Password Authentication**: ❌ Failing for both sites
|
|
3. **Username Formats Tested**:
|
|
- `root` - Failed
|
|
- `root@pam` - Failed
|
|
- `root@pve` - Not tested
|
|
|
|
### Possible Causes
|
|
1. **Incorrect Password**: Password in `.env` may not match actual Proxmox password
|
|
2. **Username Format**: May require specific realm format
|
|
3. **Special Characters**: Password contains `@` which may need encoding
|
|
4. **API Restrictions**: API access may be restricted or require tokens
|
|
5. **2FA Enabled**: Two-factor authentication may be required
|
|
|
|
---
|
|
|
|
## Recommended Actions
|
|
|
|
### Option 1: Manual Verification via Web UI
|
|
1. Access Proxmox Web UI: https://192.168.11.10:8006
|
|
2. Log in with credentials from `.env`
|
|
3. Verify login works
|
|
4. Check Datacenter → Summary for resources
|
|
5. Document findings
|
|
|
|
### Option 2: Use API Tokens
|
|
1. Log into Proxmox Web UI
|
|
2. Navigate to: Datacenter → Permissions → API Tokens
|
|
3. Create new token:
|
|
- Token ID: `crossplane-site1`
|
|
- User: `root@pam`
|
|
- Expiration: Set as needed
|
|
4. Copy token secret
|
|
5. Update `.env`:
|
|
```bash
|
|
PROXMOX_1_API_TOKEN=your-token-secret
|
|
PROXMOX_1_API_TOKEN_ID=crossplane-site1@root@pam!crossplane-site1
|
|
```
|
|
|
|
### Option 3: Use SSH Access
|
|
If SSH is available:
|
|
```bash
|
|
# Test SSH
|
|
ssh root@192.168.11.10 "pvesh get /nodes/ml110-01/status"
|
|
|
|
# Get resource info
|
|
ssh root@192.168.11.10 "nproc && free -g && pvesm status"
|
|
```
|
|
|
|
### Option 4: Verify Password Correctness
|
|
1. Test password via Web UI login
|
|
2. If password is incorrect, update `.env` file
|
|
3. Re-run verification script
|
|
|
|
---
|
|
|
|
## Next Steps
|
|
|
|
### Immediate
|
|
1. **Manual Verification**: Log into Proxmox Web UI and verify:
|
|
- [ ] Password is correct
|
|
- [ ] Resources are available
|
|
- [ ] API access is enabled
|
|
|
|
2. **Choose Authentication Method**:
|
|
- [ ] Fix password authentication
|
|
- [ ] Switch to API tokens
|
|
- [ ] Use SSH-based scripts
|
|
|
|
3. **Update Configuration**:
|
|
- [ ] Fix `.env` file if needed
|
|
- [ ] Or create API tokens
|
|
- [ ] Test authentication again
|
|
|
|
### For Deployment
|
|
Once authentication is working:
|
|
1. Re-run resource quota check
|
|
2. Verify resources meet requirements
|
|
3. Proceed with deployment
|
|
|
|
---
|
|
|
|
## Resource Requirements Reminder
|
|
|
|
### Total Required
|
|
- **CPU**: 72 cores
|
|
- **RAM**: 140 GiB
|
|
- **Disk**: 278 GiB
|
|
|
|
### Manual Check Template
|
|
When verifying via Web UI, check:
|
|
- Total CPU cores available
|
|
- Total RAM available
|
|
- Storage pool space (local-lvm, ceph-fs, ceph-rbd)
|
|
- Current VM resource usage
|
|
|
|
---
|
|
|
|
## Troubleshooting
|
|
|
|
### If Password Authentication Fails
|
|
- Verify password via Web UI
|
|
- Check for 2FA requirements
|
|
- Try API tokens instead
|
|
|
|
### If API Tokens Don't Work
|
|
- Verify token permissions
|
|
- Check token expiration
|
|
- Verify token ID format
|
|
|
|
### If SSH Doesn't Work
|
|
- Verify SSH access is enabled
|
|
- Check SSH key or password
|
|
- Verify network connectivity
|
|
|
|
---
|
|
|
|
**Last Updated**: 2025-12-09
|
|
**Action Required**: Manual verification of Proxmox credentials and resources
|
|
|