update

infra/crossplane/templates/tofu.yml

@@ -30,6 +30,43 @@ spec:
         key: kv/crossplane/proxmox
         property: pm_user
 
+---
+apiVersion: opentofu.upbound.io/v1beta1
+kind: ProviderConfig
+metadata:
+  name: default
+spec:
+  # Note that unlike most provider configs this one supports an array of
+  # credentials. This is because each tofu workspace uses a single
+  # Crossplane provider config, but could use multiple Terraform providers each
+  # with their own credentials.
+  #credentials:
+  #  - filename: gcp-credentials.json
+  #    source: Secret
+  #    secretRef:
+  #      namespace: upbound-system
+  #      name: opentofu-gcp-creds
+  #      key: credentials
+  # This optional configuration block can be used to inject HCL into any
+  # workspace that uses this provider config, for example to setup Terraform
+  # providers.
+  configuration: |
+
+    // Modules _must_ use remote state. The provider does not persist state.
+    terraform {
+      backend "kubernetes" {
+        secret_suffix     = "providerconfig-default"
+        namespace         = "upbound-system"
+        in_cluster_config = true
+      }
+      required_providers {
+        proxmox = {
+          source  = "Telmate/proxmox"
+          version = "3.0.1-rc8"
+        }
+      }
+    }
+
 ---
 apiVersion: opentofu.upbound.io/v1beta1
 kind: Workspace