packer-plugin-proxmox icon indicating copy to clipboard operation
packer-plugin-proxmox copied to clipboard

accept ticket&CSRFPreventionToken as credentials

Open camaeel opened this issue 1 year ago • 4 comments

Please search the existing issues for relevant feature requests, and use the reaction feature (https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to add upvotes to pre-existing requests.

Community Note

Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request. Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request. If you are interested in working on this issue or have submitted a pull request, please leave a comment.

Description

It would be great if a user could provide a ticket & CSRFPreventionToken on his own. Then usage of credential helper like this one: https://github.com/camaeel/proxmox-oidc-credential-helper could be helpful for automatically exchanging oidc credentials for ticket+CSRFPreventionToken pair.

Use Case(s)

I would like to stop using static long running passwords or api tokens in my setup, and use OIDC to obtain ticket+CSRFPreventionToken and use them with packer plugin.

Potential configuration

proxmox_ticket = string
CSRFPreventionToken = string

Potential References

https://github.com/camaeel/proxmox-oidc-credential-helper

camaeel avatar Oct 20 '24 18:10 camaeel

Hi @camaeel

packer-plugin-proxmox uses an upstream SDK library proxmox-api-go to interface with Proxmox backends. proxmox-api-go doesn't support this authentication method at present. Please raise an issue with the upstream SDK and if implemented, happy to look into this further.

mpywell avatar Oct 24 '24 05:10 mpywell

@mpywell I created a ticket for proxmox-api-go.

camaeel avatar Oct 24 '24 21:10 camaeel

@mpywell PR was implemented int proxmox-api-go: https://github.com/Telmate/proxmox-api-go/pull/373

camaeel avatar Nov 24 '24 07:11 camaeel

@mpywell Hi, any chances for having proxmox-api-go bumped to recent version plus additional authentication fields exposed by this plugin?

camaeel avatar Apr 22 '25 10:04 camaeel