Sergey Antropoff
48df10b17e
- Harden DB-backed handlers and seed profiles; align client wire shapes for cluster resources, QEMU config, and node SSL fields - Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and terminate HTTPS at Kubernetes Ingress - Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and make pulumi-tests - Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions (make ci + Compose/Helm validation)
1001 B
1001 B
Language / Язык: English | Русский
Troubleshooting clients
| Symptom | Fix |
|---|---|
| TLS certificate errors | Compose default is http://localhost:8006 (no TLS). For proxmoxer use docker compose --profile tls and https://localhost:8443 with verify disabled only locally (curl -sk, verify_ssl=False, insecure=true). On Kubernetes use your Ingress hostname with cert-manager TLS. |
| CSRF failure | Send CSRFPreventionToken with ticket mutations; prefer token auth in scripts |
| Node not found | small seed uses pve01 |
| 403 on power | You may be using auditor@pve / readonly token — switch to root or operator |
| Provider create vs UPID | Poll tasks; many providers already wait — raw HTTP clients often forget |
| Drift after reseed | Refresh/recreate Terraform/Pulumi/Ansible state |
| Wrong schema fields | Hot-swap or cold-start the intended major; confirm /version |