An automated provisioning layer that turns signed API requests into isolated KVM virtual machines with cloud-init networking, SSH key injection, and resource quotas.
Built to bridge customer-facing cloud portals with bare-metal hypervisors without exposing hypervisor root credentials. Uses scoped Proxmox VE API tokens, golden cloud-init templates, and deterministic job queues to provision, resize, snapshot, and suspend virtual machines safely.
Manual VM creation inside hypervisor dashboards does not scale, introduces configuration drift across network bridges and disk throttles, and risks over-privileged operator access when connecting web portals directly to host nodes.
Designed an intermediary orchestration service with strict schema validation, idempotent state transitions, pre-baked Debian/Ubuntu cloud-init templates, and least-privilege Proxmox API tokens scoped solely to designated VM pools and storage targets.
Internal infrastructure prototype developed for LumaCloud compute workflows.
Portal requests pass through schema validation into an asynchronous job runner before communicating over an isolated management link to Proxmox VE cluster nodes.
Rejects malformed specs early and guarantees retried webhooks never spawn duplicate VMs.
Atomically reserves compute capacity and network addressing prior to hypervisor calls.
Clones the OS image, injects SSH keys and netplan config via cloud-init, and polls UPID completion.
Verifies boot readiness and records sanitized status metadata for the customer control plane.
Long-running full disk clones can exceed standard HTTP request timeouts.
DECISION: Decoupled API acceptance from execution using persistent task polling on Proxmox UPIDs.
OUTCOME: Zero dropped provisioning jobs even during multi-gigabyte NVMe storage migrations.
Preventing tenant ARP spoofing or unauthorized IP claiming on shared bridges.
DECISION: Enforced hypervisor-level IP/MAC filter rules alongside cloud-init static network configs.
OUTCOME: Strong L2/L3 tenant isolation without requiring complex SDN overlays on day one.
Idempotency keys are mandatory whenever billing webhooks trigger physical resource allocation.
Least-privilege hypervisor tokens dramatically shrink blast radius compared to root PAM credentials.
Pre-tested cloud-init images cut VM readiness from minutes of post-install scripting down to seconds.
