USB permission error but USB supposed to be ignored

[alfrisch]

Release: v3.0.2-rc07

A VM has several USB devices directly attached (i.e. not via resource mappings), which are configured to be ignored by setting ignore_changes = [usbs].

Running terraform plan shows no changes for USB devices as expected, but when running terraform apply it fails with

 Error: error updating VM: 500 only root can set 'usb0' config for real devices, error status: {"data":null,"message":"only root can set 'usb0' config for real devices\n"} (params: ...

When USB configuration should be ignored, then I would expect that terraform does not need to change the configuration by setting an usb0 device and thus would not fail with missing permissions.

Note, this happens only when other parts of the VM configuration need to be changed.

[Tinyblargon]

@alfrisch ignore_changes doesn't work as intended with this provider. You would have to configure the usb devices in terraform aswell.

[alfrisch]

Which in turn forces us to use resource mappings, because there is also no solution to fulfill permissions for USB devices.

Note, we are running with an API key for user root and have tried a different user with PVEMappingAdmin role without any success.

[Tinyblargon]

@alfrisch The idea behind the clone is that you can set properties in a template that your Terraform user can't set. You will still have to set it in Terraform as absent means remove.

[alfrisch]

but I run into the same permission problem if I mimic the actual USB configuration one-to-one in Terraform

[github-actions]

This issue is stale because it has been open for 60 days with no activity. Please update the provider to the latest version and, in the issue persist, provide full configuration and debug logs