Proxmox 9 + Terraform provider: Missing VM.Monitor permission, but it doesn't exist

[ksilva-kwn]

Hi everyone,

I'm trying to use the Telmate/Proxmox Terraform provider
with Proxmox 9, but I'm stuck on a permissions issue.

When I run terraform plan, I get the following error:

Error: permissions for user/token terraform@pve are not sufficient, please provide also the following permissions that are missing: [VM.Monitor]
with provider["registry.terraform.io/telmate/proxmox"],
on provider.tf line 29, in provider "proxmox":
29: provider "proxmox" {

The problem is:

In Proxmox 9, there is no VM.Monitor privilege listed in pveum role list.

I’ve already assigned the Administrator role to both the user and the API token, but Terraform still complains about the missing VM.Monitor.

I tried creating a custom role with all VM privileges (VM.Audit, VM.Console, etc.), but the error persists.

Has anyone else faced this issue on Proxmox 9 with Terraform?
How did you resolve the missing VM.Monitor permission requirement?

 

[jsterr]

Hi everyone,

I'm trying to use the Telmate/Proxmox Terraform provider
with Proxmox 9, but I'm stuck on a permissions issue.

When I run terraform plan, I get the following error:

Error: permissions for user/token terraform@pve are not sufficient, please provide also the following permissions that are missing: [VM.Monitor]
with provider["registry.terraform.io/telmate/proxmox"],
on provider.tf line 29, in provider "proxmox":
29: provider "proxmox" {

The problem is:

In Proxmox 9, there is no VM.Monitor privilege listed in pveum role list.

I’ve already assigned the Administrator role to both the user and the API token, but Terraform still complains about the missing VM.Monitor.

I tried creating a custom role with all VM privileges (VM.Audit, VM.Console, etc.), but the error persists.

Has anyone else faced this issue on Proxmox 9 with Terraform?
How did you resolve the missing VM.Monitor permission requirement?

"Drop the VM.Monitor privilege and instead require the Sys.Audit privilege for basic access to the KVM monitor.Commands besides basic informational commands require the Sys.Modify privilege, and some commands are restricted to the root user."

https://pve.proxmox.com/wiki/Roadmap#Proxmox_VE_9.0

Try with Sys.Audit Privilege, VM.Monitor was removed. If its notw orking with Sys.Audit Privilege, contact the Terraform-Provider Creator, its most likely not updated yet to work with PVE-9.

Edit: seems like they updated it yesterday: https://github.com/Telmate/terraform-provider-proxmox/releases/tag/v3.0.2-rc04

Fixed issue where default permissions where incompatible with PVE9

What's Changed​

• Feat: LXC mounts by @Tinyblargon in #1381
• Fix: Remove VM.Monitor from required permissions for Proxmox 9 compatibility by @dbryuhanov542 in #1382
• Feat: Handle Delete with protected guest. by @Tinyblargon in #1384

 

[ksilva-kwn]

Thanks for the help!!

I updated the Terraform provider version and it started working normally again.