emersonfelipesp/netbox-proxbox v0.0.31

on GitHub

netbox-proxbox 0.0.31

Version 0.0.31 adds native NetBox cluster binding for Proxmox endpoints, endpoint-owned SSH application services, and verified Cloud Image SSH bindings. It also makes the browser console work after an ordinary synchronization and adds an option for full node network topology synchronization.

Deploy proxbox-api 0.0.29 or later before upgrading the plugin.

Highlights

• Native cluster binding. Each Proxmox endpoint can own one native NetBox Cluster. The protected sync-cluster action reconciles the endpoint, native cluster, tracking row, and typed synchronization state in one transaction. It never claims a cluster by name alone.
• Endpoint-owned SSH application services. SSH access uses the chain SSH Credential -> Application Service (type SSH) -> IP Address -> Proxmox Endpoint, with local Fernet-encrypted storage or the optional netbox-openbao integration.
• Verified Cloud Image SSH bindings. Cloud Image builds can bind a selected Proxmox node and backend identity-file path to the endpoint, with durable receipts that make failed updates retryable.

Browser console and synchronization

• The browser console now finds its backend. The backend request context dropped the WebSocket base, so the console reported "No trusted proxbox-api endpoint matches this synchronized guest" for every guest. The console requires Use WebSocket to be enabled on the FastAPI endpoint.
• Sync-state links are bound automatically. After a successful full or selected virtual-machine synchronization, the plugin binds each guest's endpoint, node, and cluster links, so the console no longer reports SYNC_ENDPOINT_LINK_MISSING and the node link follows a migration after the next sync. Binding requires that the endpoint owns the guest's native NetBox cluster; missing, ambiguous, or contradictory identity is left unchanged and reported in the job data.
• Full node network topology (opt-in). Set PLUGINS_CONFIG["netbox_proxbox"]["sync_node_interfaces"] = True to reconcile bridges, bonds, Open vSwitch objects, VLAN interfaces, and their Bridge, LAG, and Parent relationships. The default is False. Restart NetBox application and worker processes after changing it. Linux bond membership additionally depends on the backend network parser.

Fixes

• On NetBox 4.5 and 4.6, a protected or refused delete of an endpoint, application service, or service SSH credential is refused cleanly instead of returning HTTP 500.
• Plugin settings saved with an explicit primary key are inserted correctly.
• Dependency floors clear every published advisory that has a patched release. certifi is deliberately not a runtime dependency of the plugin.

Migrations and upgrade

• 0107_v0_0_30_release creates the native cluster ownership, endpoint-owned SSH service, and Cloud Image SSH binding schema.
• 0108_v0_0_31_schema_validation validates the objects created by 0107 and does not repair unexpected schema automatically.

Back up the database and configuration before upgrading. Deploy proxbox-api first, install netbox-proxbox 0.0.31, run migrations and collectstatic, and restart all NetBox application and worker processes.

Compatibility

Versions 0.0.30 and the 0.0.31 release candidates were not published as final releases; this release follows 0.0.29.post6.

Full notes: https://emersonfelipesp.github.io/netbox-proxbox/release-notes/version-0.0.31/