Connect a project

Last updated

A project in Hetscale is one Hetzner Cloud project, connected with a token that can only read. To connect one, create a Read token in the Hetzner Console, then paste it under Projects → Connect a project. Hetscale checks the token before it stores anything and reads the project right after.

How do I create a Read token?

In the Hetzner Console, open your project, then Security → API tokens → Generate API token, with the Read permission. A Read token cannot create, change or delete anything in the project; Hetzner enforces that, not Hetscale.

How do I connect it?

  1. In the panel, open Projects and choose Connect a project.
  2. Under Name, say how the project is called in the panel, for example “Production”.
  3. Paste the token under Read token and choose Connect.

What does Hetscale check?

A token that fails a check is refused, and nothing is stored:

  • A token that can write is refused: Observe works with a Read token only.
  • A token that another Hetscale organization already holds is refused: each organization connects its own token.
  • A token of a project your organization already connected is refused, and the message names that project. Hetscale recognises the project by a load balancer it knows from it: one of its node groups’ load balancers, archived node groups included, or one its latest read listed. Replace that project’s token there instead: Replace a project’s token.

Every message the panel can show, with what to do, is on A token is refused.

What happens after connecting?

Hetscale reads the project at once: every server and every load balancer, labelled or not. The project’s Load balancers tab lists the load balancers with their targets, health and services, and its Servers tab the servers, yours marked “Yours”: listed, never shut down or deleted. Read again reads the project once more, at most once a minute and not while a read runs; it shows while the project’s token works.

The next step is a node group: Start observing. How long Hetscale keeps a Read token is on the privacy page.

See what Hetscale would have done with your real data — connect read-only, get your report in minutes.

Connect read-only