Bugzilla: https://bugzilla.proxmox.com/show_bug.cgi?id=8013
I've filed a bug report on this (see above), but I also wanted to open a thread here in case anyone else has figured out a way around this.
tl;dr The PDM 1.1.7 dashboard reports a Tuxis PBS node as "Unreachable" because Tuxis PBS users only have Datastore.* permissions. So, the dashboard reports failure to "reach" the PBS node, even though the Remote -> Node page is populating with information about the datastore without issue (see above).
So, the PDM Dashboard is giving incorrect information re: the health of the PBS server and the datastore. It also seems like PDM should be able to handle PBS shared hosting situations where the user wants to monitor a PBS instance but doesn't have Sys.* level permissions, especially as those sorts of services are likely to become more common in the future.
I've got a Tuxis PBS account--essentially, an account with limited permissions on a shared PBS server. On my datastore, my user has Datastore.Audit, Datastore.Backup, Datastore.Modify, Datastore.Prune, Datastore.Read, and Datastore.Verify. I have no Sys.* permissions at all.
Since I just want to monitor my datastore in PDM, this is actually fine when I'm in the section of the PDM UI for my PBS remote.
However, I've got an issue on the main dashboard, as shown in the attached images. I think that because I don't have any Sys.* level permissions, PDM can't talk to whatever it's supposed to hook into to ask if a PBS server is alive. (I understand that I'm not going to get actual Resource Usage stats from the Tuxis PBS server without Sys.* permissions.)
However, it seems like PDM *should* know that the PBS server is alive (online) when it's actively getting live data from it. The Dashboard seems to only rely on Sys.* level permissions and not include some sort of fallback check for the "cannot talk to whole server, but clearly have access to at least one datastore" condition.
In the bug report, I suggested that when PDM doesn't have full Sys.* level API access, maybe the node could be marked on the PDM Dashboard as "Online (Datastore Only)," "Online (Limited Access)" or something similar in this sort of case.
I've filed a bug report on this (see above), but I also wanted to open a thread here in case anyone else has figured out a way around this.
tl;dr The PDM 1.1.7 dashboard reports a Tuxis PBS node as "Unreachable" because Tuxis PBS users only have Datastore.* permissions. So, the dashboard reports failure to "reach" the PBS node, even though the Remote -> Node page is populating with information about the datastore without issue (see above).
So, the PDM Dashboard is giving incorrect information re: the health of the PBS server and the datastore. It also seems like PDM should be able to handle PBS shared hosting situations where the user wants to monitor a PBS instance but doesn't have Sys.* level permissions, especially as those sorts of services are likely to become more common in the future.
I've got a Tuxis PBS account--essentially, an account with limited permissions on a shared PBS server. On my datastore, my user has Datastore.Audit, Datastore.Backup, Datastore.Modify, Datastore.Prune, Datastore.Read, and Datastore.Verify. I have no Sys.* permissions at all.
Since I just want to monitor my datastore in PDM, this is actually fine when I'm in the section of the PDM UI for my PBS remote.
However, I've got an issue on the main dashboard, as shown in the attached images. I think that because I don't have any Sys.* level permissions, PDM can't talk to whatever it's supposed to hook into to ask if a PBS server is alive. (I understand that I'm not going to get actual Resource Usage stats from the Tuxis PBS server without Sys.* permissions.)
However, it seems like PDM *should* know that the PBS server is alive (online) when it's actively getting live data from it. The Dashboard seems to only rely on Sys.* level permissions and not include some sort of fallback check for the "cannot talk to whole server, but clearly have access to at least one datastore" condition.
In the bug report, I suggested that when PDM doesn't have full Sys.* level API access, maybe the node could be marked on the PDM Dashboard as "Online (Datastore Only)," "Online (Limited Access)" or something similar in this sort of case.