Changelog¶

v1.1.0 - 2026-10-06¶

Ask for an image again when its download task failed. The node fetches the image itself, over whatever egress it has, so the task fails for reasons that have nothing to do with the intent – observed as download failed: wget: unable to resolve host address – and a failed task leaves nothing behind to clean up. A task that is merely still running when we stop waiting for it is not retried: starting over would only spend the 30 minute timeout again.
Add login-ticket authentication (Credentials.username/password) for the VM options PVE reserves for root@pam (affinity, hostpciN, args). See the README.
Add NodeInfo, a read-only resource reporting a node’s CPU topology as facts, and failing its deploy when the node is not the expected hardware.

Add the VlanInterface resource: a VLAN interface on a node, such as vmbr1.1001, the way to give the node’s own address on a VLAN-aware bridge a VLAN tag.
Remove the APIToken resource. PVE returns a token secret only once, and the handler parked it in an Inmanta fact, which is plain text in the orchestrator database and a cache rather than a system of record: losing it meant recreating the token. A generated secret belongs in a secret store.