Proxmox Updates Monitoring

[Flo2103]

Hey, I was trying to monitor available updates on nodes using this endpoint '/api2/json/nodes/{node}/apt/update' but it requires Sys.Modify permissions which i don't really understand since it's only a get request. So I would like to know it there is another solution to monitor proxmox updates without giving write permissions.

 

[cheiss]

Hi,

this indeed seems like the wrong permission, this should probably be Sys.Audit I guess - would at least make more sense to me. Same goes for the /changelog endpoint. I'll take care of that.

In the meantime - AFAIK your only possibility would be to grant your API user/token the Sys.Modify permissions, until this change lands.

Edit: Fabian below put a good point ahead - it's rather sensitive information, that's right.

 

[fabian]

it's true that it doesn't modify, but it's still a rather privileged operation since it potentially would give out the information about vulnerabilities. depending on how you are monitoring, you could ask apt directly or use the notification emails.

 

[Flo2103]

Sys.Audit is to get informations about the system and Sys.Modify is to modify the system. The endpoint i use gives informations about the system and doesnt modify anything. Still makes sense for me to set this endpoint to Sys.Audit permissions.