incus-contrib/notes
Maarten e0faba8980 Fix critical auth validation, role naming, Sys.Audit, and apply_defaults
Safety fix: --cleanup-all, --resources, --labs silently failed when
PROXMOX_TOKEN_SECRET was not set, reporting "No VMs found" instead of
an auth error. Added require_api_auth() gate and error propagation in
pve_list_vms() to fail loudly on API auth failures.

Also:
- Standardize role name to IncusOSDeployer across all docs and scripts
- Add Sys.Audit privilege to all setup command examples
- Document /nodes/pve ACL requirement for scoped permissions
- Update lab-cluster.yaml: apply_defaults: false for joining nodes
  (upstream IncusOS recommendation to avoid 8-command cleanup)
- Add full cluster automation to lab-test phase_cluster:
  core.https_address setup, remote cert fixup, automated join prompts,
  conditional defaults cleanup for apply_defaults: true nodes

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-21 08:51:52 +01:00
..
clustering-guide.md Fix critical auth validation, role naming, Sys.Audit, and apply_defaults 2026-02-21 08:51:52 +01:00
incus-version-compatibility.md version and certificate refinement 2026-02-18 14:49:31 +01:00
iso-download-methods.md Initial Commit 2026-02-18 14:04:05 +01:00
migration-guide.md Add macOS support, multi-lab lifecycle, extended testing, and migration docs 2026-02-20 23:41:06 +01:00
operations-center-guide.md Correct reboot diagnosis: OC-specific, not dqlite/TPM corruption 2026-02-21 00:48:06 +01:00
proxmox-deploy-progress.md Implement end-to-end IncusOS Proxmox deployment via API 2026-02-19 15:26:58 +01:00
utm-support.md Add macOS support, multi-lab lifecycle, extended testing, and migration docs 2026-02-20 23:41:06 +01:00