aaron/infra-core
1
0
Fork 1
Code Issues Pull requests 11 Projects Releases 1 Packages Wiki Activity Actions

HOMELAB-108: docs: add Proxmox monitoring firewall rule documentation #143

Open
aaron wants to merge 1 commit from plane/HOMELAB-108-opnsense-firewall-rule into live
pull from: plane/HOMELAB-108-opnsense-firewall-rule
merge into: aaron:live
Conversation 0 Commits 1 Files changed 4 +502
aaron commented 2026-04-02 07:53:37 +00:00
Owner
Copy link

Summary

  • Add comprehensive runbook for configuring OPNSense firewall rule to enable Kubernetes VLAN 10 → Proxmox API connectivity
  • Update main OPNSense documentation with Proxmox monitoring rule section
  • Add connectivity verification script with comprehensive testing capabilities

Context

This resolves HOMELAB-108 by documenting the firewall rule needed to allow Kubernetes pods (10.10.10.0/24, VLAN 10) to reach the Proxmox API at 192.168.1.5:8006 TCP. This is required for deploying prometheus-pve-exporter and enabling Proxmox monitoring in Grafana.

Files Changed

  • docs/runbooks/proxmox-monitoring-firewall-rule.md - New comprehensive runbook
  • docs/04-opnsense.md - Updated with Proxmox monitoring rule section
  • scripts/verify-proxmox-connectivity.sh - New connectivity verification script
  • CLAUDE.md - Added reference to new runbook

Test Plan

  • Review documentation for accuracy and completeness
  • Follow runbook to add OPNSense firewall rule
  • Run verification script to test connectivity
  • Proceed with HOMELAB-109 (PVE exporter deployment)

Blocks

This unblocks:

  • HOMELAB-109: Create PVE monitoring token and deploy exporter
  • HOMELAB-110: Create Proxmox Overview Grafana dashboard

🤖 Generated with Claude Code

## Summary - Add comprehensive runbook for configuring OPNSense firewall rule to enable Kubernetes VLAN 10 → Proxmox API connectivity - Update main OPNSense documentation with Proxmox monitoring rule section - Add connectivity verification script with comprehensive testing capabilities ## Context This resolves HOMELAB-108 by documenting the firewall rule needed to allow Kubernetes pods (10.10.10.0/24, VLAN 10) to reach the Proxmox API at 192.168.1.5:8006 TCP. This is required for deploying prometheus-pve-exporter and enabling Proxmox monitoring in Grafana. ## Files Changed - `docs/runbooks/proxmox-monitoring-firewall-rule.md` - New comprehensive runbook - `docs/04-opnsense.md` - Updated with Proxmox monitoring rule section - `scripts/verify-proxmox-connectivity.sh` - New connectivity verification script - `CLAUDE.md` - Added reference to new runbook ## Test Plan - [ ] Review documentation for accuracy and completeness - [ ] Follow runbook to add OPNSense firewall rule - [ ] Run verification script to test connectivity - [ ] Proceed with HOMELAB-109 (PVE exporter deployment) ## Blocks This unblocks: - HOMELAB-109: Create PVE monitoring token and deploy exporter - HOMELAB-110: Create Proxmox Overview Grafana dashboard 🤖 Generated with [Claude Code](https://claude.com/claude-code)
HOMELAB-108: docs: add Proxmox monitoring firewall rule documentation
Some checks failed
0/0 projects applied successfully.
CI Review / ai-review (pull_request) Has been cancelled
Details
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / pr-title (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
379e8de0b8 
- Add comprehensive runbook for configuring OPNSense firewall rule
- Enable Kubernetes VLAN 10 → Proxmox API (192.168.1.5:8006) connectivity
- Update main OPNSense docs with Proxmox monitoring rule section
- Add connectivity verification script with comprehensive testing
- Unblocks prometheus-pve-exporter deployment (HOMELAB-109)

Co-Authored-By: Claude Sonnet 4 <noreply@anthropic.com>
Some checks failed
0/0 projects applied successfully.
CI Review / ai-review (pull_request) Has been cancelled
Details
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / pr-title (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin plane/HOMELAB-108-opnsense-firewall-rule:plane/HOMELAB-108-opnsense-firewall-rule
git switch plane/HOMELAB-108-opnsense-firewall-rule
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!143
No description provided.