# Proxmox Deployment Plan Generated: 2025-12-07T12:09:24-08:00 ## Current Status ### Proxmox Instances - **Instance 1**: https://192.168.11.10:8006 - **Instance 2**: https://192.168.11.11:8006 ### Configuration Sites - **us-east-1**: https://pve1.sankofa.nexus:8006 (node: pve1) - **eu-west-1**: https://pve4.sankofa.nexus:8006 (node: pve4) - **apac-1**: https://pve7.sankofa.nexus:8006 (node: pve7) ## Deployment Phases ### Phase 1: Connection and Validation 1. **Verify Connectivity** - [ ] Test connection to Instance 1 - [ ] Test connection to Instance 2 - [ ] Verify API authentication - [ ] Check network connectivity 2. **Status Review** - [ ] Review cluster status for both instances - [ ] Check node health and availability - [ ] Review storage configuration - [ ] Check network configuration - [ ] Review existing VMs and resources ### Phase 2: Configuration Alignment 1. **Site Mapping** - [ ] Map Instance 1 to appropriate site (us-east-1?) - [ ] Map Instance 2 to appropriate site (eu-west-1?) - [ ] Verify DNS/hostname configuration - [ ] Update provider-config.yaml with actual endpoints 2. **Authentication Setup** - [ ] Create API tokens for Instance 1 - [ ] Create API tokens for Instance 2 - [ ] Update credentials in Kubernetes secrets - [ ] Test token authentication 3. **Cloudflare Tunnel Configuration** - [ ] Review tunnel configs for all sites - [ ] Update hostnames in tunnel configs - [ ] Verify tunnel credentials - [ ] Test tunnel connectivity ### Phase 3: Crossplane Provider Deployment 1. **Provider Installation** - [ ] Build Crossplane provider - [ ] Deploy CRDs - [ ] Deploy provider controller - [ ] Verify provider health 2. **Provider Configuration** - [ ] Create ProviderConfig resource - [ ] Configure credentials secret - [ ] Test provider connectivity to both instances - [ ] Verify site configuration ### Phase 4: Infrastructure Deployment 1. **Initial VM Deployment** - [ ] Deploy test VM on Instance 1 - [ ] Deploy test VM on Instance 2 - [ ] Verify VM creation via Crossplane - [ ] Test VM lifecycle operations 2. **Monitoring Setup** - [ ] Deploy Prometheus exporters - [ ] Configure Grafana dashboards - [ ] Set up alerts - [ ] Verify metrics collection 3. **Backup and Recovery** - [ ] Configure backup schedules - [ ] Test backup procedures - [ ] Test recovery procedures ### Phase 5: Production Readiness 1. **Security Hardening** - [ ] Review and update firewall rules - [ ] Enable TLS certificate validation - [ ] Rotate API tokens - [ ] Review access controls 2. **Documentation** - [ ] Document deployment procedures - [ ] Create runbooks - [ ] Update architecture diagrams 3. **Testing and Validation** - [ ] End-to-end testing - [ ] Load testing - [ ] Disaster recovery testing - [ ] Performance validation