Proxmox VE

Overview

The Proxmox VE integration connects one Proxmox VE server or cluster to Oneleet. It syncs the server’s users as user account assets and its authentication realms as assets, so Oneleet can monitor who can sign in to your virtualization infrastructure and whether sign-in requires two-factor authentication.

What does Oneleet monitor?

• Proxmox VE users (user accounts), including their realm, groups, roles, whether they’re disabled, and whether they have two-factor authentication set up
• Proxmox VE authentication realms, including whether they require two-factor authentication

Setup

To set up the Proxmox VE integration, navigate to Integrations > Add integration > Proxmox VE.

Oneleet connects with a read-only API token.

1. In the Proxmox VE web interface, select Datacenter, open Permissions → API Tokens, and click Add.
2. Pick a user, enter a token ID, leave Privilege Separation checked, and click Add.
3. Paste the full Token ID (for example root@pam!compliance) and the Secret into Oneleet.
4. Under Permissions, click Add → API Token Permission and give the token the PVEAuditor role on the path /.
5. Enter your Server Address with its port (for example pve.example.com:8006) and click Connect.

The server address must be a public hostname (not an IP address) reachable from the internet, and the server must use a TLS certificate from a public certificate authority. To monitor several Proxmox VE clusters, connect each one separately.