chore: add whistle and slc to slai #564

Merged

thesuperRL merged 2 commits from fix-slai-whistle-slc into main 2026-10-31 04:57:53 +00:00

Conversation 8 Commits 2 Files changed 14 +961

thesuperRL commented 2026-10-31 04:45:17 +00:00

Owner

Copy link

No description provided.

thesuperRL added 1 commit 2026-10-31 04:45:17 +00:00

chore: add whistle and slc to slai f040d50bf1

thesuperRL requested reviews from devops-leads, slai-leads 2026-10-31 04:45:17 +00:00

scottylabs-bot commented 2026-10-31 04:45:46 +00:00

Owner

Copy link

Kennel Deployments

Torn down at 2026-10-31 04:57:54 UTC.

<!-- kennel-deployment --> ### Kennel Deployments Torn down at 2026-10-31 04:57:54 UTC.

scottylabs-bot added 1 commit 2026-10-31 04:47:29 +00:00

chore: regenerate from data [skip ci] 9fa961978e

scottylabs-bot commented 2026-10-31 04:48:07 +00:00

Owner

Copy link

Ran Plan for 5 projects:

1. project: git dir: generated/tofu/git workspace: default
2. project: grouper dir: generated/tofu/grouper workspace: default
3. project: keycloak dir: generated/tofu/keycloak workspace: default
4. project: litellm dir: generated/tofu/litellm workspace: default
5. project: openbao dir: generated/tofu/openbao workspace: default

---

1. project: git dir: generated/tofu/git workspace: default

Plan Failed: This project is currently locked by an unapplied plan from pull #539. To continue, delete the lock from #539 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

2. project: grouper dir: generated/tofu/grouper workspace: default

Plan Failed: This project is currently locked by an unapplied plan from pull #539. To continue, delete the lock from #539 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

3. project: keycloak dir: generated/tofu/keycloak workspace: default

Plan Failed: This project is currently locked by an unapplied plan from pull #539. To continue, delete the lock from #539 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

---

4. project: litellm dir: generated/tofu/litellm workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on shared package cache
   Compiling proc-macro2 v1.0.106
   Compiling quote v1.0.45
   Compiling unicode-ident v1.0.24
   Compiling cfg-if v1.0.4
   Compiling libc v0.2.183
   Compiling find-msvc-tools v0.1.9
   Compiling serde_core v1.0.228
   Compiling shlex v1.3.0
   Compiling cc v1.2.57
   Compiling zmij v1.0.21
   Compiling rustversion v1.0.23
   Compiling ring v0.17.14
   Compiling itoa v1.0.18
   Compiling syn v2.0.117
   Compiling anstyle v1.0.14
   Compiling zeroize v1.8.2
   Compiling serde_json v1.0.149
   Compiling scopeguard v1.2.0
   Compiling serde v1.0.228
   Compiling rustls-pki-types v1.14.0
   Compiling encoding_rs v0.8.42
   Compiling serde_derive v1.0.228
   Compiling getrandom v0.2.17
   Compiling crc32fast v1.5.0
   Compiling autocfg v1.5.1
   Compiling httparse v1.10.1
   Compiling smallvec v1.15.1
   Compiling untrusted v0.9.0
   Compiling ref-cast v1.0.25
   Compiling memchr v2.8.0
   Compiling num-traits v0.2.19
   Compiling ref-cast-impl v1.0.25
   Compiling serde_derive_internals v0.29.1
   Compiling multiversion_no_op v1.0.0
   Compiling base64 v0.22.1
   Compiling rustls v0.23.45
   Compiling log v0.4.29
   Compiling parking_lot_core v0.9.12
   Compiling core_detect v1.0.0
   Compiling simd-adler32 v0.3.8
   Compiling simdutf8 v0.1.5
   Compiling adler2 v2.0.1
   Compiling bytes v1.11.1
   Compiling miniz_oxide v0.8.9
   Compiling http v1.4.0
   Compiling schemars_derive v1.2.1
   Compiling rustls-webpki v0.103.15
   Compiling thiserror v2.0.18
   Compiling subtle v2.6.1
   Compiling dyn-clone v1.0.20
   Compiling utf8parse v0.2.2
   Compiling once_cell v1.21.4
   Compiling unicode-width v0.2.2
   Compiling arraydeque v0.5.1
   Compiling granit-parser v2.0.0
   Compiling annotate-snippets v0.12.17
   Compiling anstyle-parse v1.0.0
   Compiling ureq-proto v0.6.0
   Compiling flate2 v1.1.9
   Compiling encoding_rs_io v0.1.8
   Compiling webpki-roots v1.0.6
   Compiling schemars v1.2.1
   Compiling lock_api v0.4.14
   Compiling thiserror-impl v2.0.18
   Compiling colorchoice v1.0.5
   Compiling percent-encoding v2.3.2
   Compiling nohash-hasher v0.2.0
   Compiling anstyle-query v1.1.5
   Compiling is_terminal_polyfill v1.70.2
   Compiling utf8-zero v0.8.1
   Compiling anstream v1.0.0
   Compiling ureq v3.3.0
   Compiling serde-saphyr v2.0.0
   Compiling parking_lot v0.12.5
   Compiling heck v0.5.0
   Compiling anyhow v1.0.104
   Compiling strsim v0.11.1
   Compiling clap_lex v1.1.0
   Compiling governance-schema v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/564/default/crates/governance-schema)
   Compiling clap_builder v4.6.0
   Compiling clap_derive v4.6.0
   Compiling clap v4.6.0
   Compiling dotenvy v0.15.7
   Compiling governance-core v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/564/default/crates/governance-core)
   Compiling governance-tfgen v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/564/default/crates/governance-tfgen)
   Compiling governance v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/564/default/crates/governance-cli)
    Finished `release` profile [optimized] target(s) in 31.70s

ephemeral.vault_kv_secret_v2.litellm_master_key: Closing...
ephemeral.vault_kv_secret_v2.litellm_master_key: Close complete after 0s

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create

OpenTofu will perform the following actions:

  # litellm_key.slc_dev will be created
+ resource "litellm_key" "slc_dev" {
+       aliases                    = (known after apply)
+       allowed_cache_controls     = (known after apply)
+       allowed_passthrough_routes = (known after apply)
+       allowed_routes             = (known after apply)
+       blocked                    = (known after apply)
+       budget_duration            = "monthly"
+       config                     = (known after apply)
+       config_json                = (sensitive value)
+       enforced_params            = (known after apply)
+       guardrails                 = (known after apply)
+       id                         = (known after apply)
+       key                        = (sensitive value)
+       key_alias                  = "slc-dev"
+       key_wo                     = (write-only attribute)
+       max_budget                 = 5
+       max_parallel_requests      = 20
+       metadata                   = (sensitive value)
+       metadata_json              = (sensitive value)
+       model_max_budget           = (known after apply)
+       model_rpm_limit            = (known after apply)
+       model_tpm_limit            = (known after apply)
+       models                     = (known after apply)
+       permissions                = (known after apply)
+       permissions_json           = (sensitive value)
+       prompts                    = (known after apply)
+       rpm_limit                  = 200
+       send_invite_email          = (write-only attribute)
+       soft_budget                = (known after apply)
+       tags                       = (known after apply)
+       team_id                    = (known after apply)
+       tpm_limit                  = 1000000
    }

  # litellm_key.slc_prod will be created
+ resource "litellm_key" "slc_prod" {
+       aliases                    = (known after apply)
+       allowed_cache_controls     = (known after apply)
+       allowed_passthrough_routes = (known after apply)
+       allowed_routes             = (known after apply)
+       blocked                    = (known after apply)
+       budget_duration            = "monthly"
+       config                     = (known after apply)
+       config_json                = (sensitive value)
+       enforced_params            = (known after apply)
+       guardrails                 = (known after apply)
+       id                         = (known after apply)
+       key                        = (sensitive value)
+       key_alias                  = "slc-prod"
+       key_wo                     = (write-only attribute)
+       max_budget                 = 20
+       max_parallel_requests      = 100
+       metadata                   = (sensitive value)
+       metadata_json              = (sensitive value)
+       model_max_budget           = (known after apply)
+       model_rpm_limit            = (known after apply)
+       model_tpm_limit            = (known after apply)
+       models                     = (known after apply)
+       permissions                = (known after apply)
+       permissions_json           = (sensitive value)
+       prompts                    = (known after apply)
+       rpm_limit                  = 1000
+       send_invite_email          = (write-only attribute)
+       soft_budget                = (known after apply)
+       tags                       = (known after apply)
+       team_id                    = (known after apply)
+       tpm_limit                  = 4000000
    }

  # litellm_team.slai will be created
+ resource "litellm_team" "slai" {
+       access_group_ids        = (known after apply)
+       blocked                 = false
+       guardrails              = (known after apply)
+       id                      = (known after apply)
+       metadata                = (known after apply)
+       metadata_json           = (sensitive value)
+       model_aliases           = (known after apply)
+       model_rpm_limit         = (known after apply)
+       model_tpm_limit         = (known after apply)
+       models                  = (known after apply)
+       prompts                 = (known after apply)
+       tags                    = (known after apply)
+       team_alias              = "slai"
+       team_id                 = (known after apply)
+       team_member_permissions = []
    }

  # vault_kv_secret_v2.slc_dev_litellm_api_key will be created
+ resource "vault_kv_secret_v2" "slc_dev_litellm_api_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/dev/LITELLM_API_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_dev_litellm_base_url will be created
+ resource "vault_kv_secret_v2" "slc_dev_litellm_base_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/dev/LITELLM_BASE_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_preview_litellm_api_key will be created
+ resource "vault_kv_secret_v2" "slc_preview_litellm_api_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/preview/LITELLM_API_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_preview_litellm_base_url will be created
+ resource "vault_kv_secret_v2" "slc_preview_litellm_base_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/preview/LITELLM_BASE_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_prod_litellm_api_key will be created
+ resource "vault_kv_secret_v2" "slc_prod_litellm_api_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/prod/LITELLM_API_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_prod_litellm_base_url will be created
+ resource "vault_kv_secret_v2" "slc_prod_litellm_base_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/prod/LITELLM_BASE_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_staging_litellm_api_key will be created
+ resource "vault_kv_secret_v2" "slc_staging_litellm_api_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/staging/LITELLM_API_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_staging_litellm_base_url will be created
+ resource "vault_kv_secret_v2" "slc_staging_litellm_base_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/staging/LITELLM_BASE_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

Plan: 11 to add, 0 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -p litellm
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p litellm
  

Plan: 11 to add, 0 to change, 0 to destroy.

---

5. project: openbao dir: generated/tofu/openbao workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on build directory
    Finished `release` profile [optimized] target(s) in 31.71s


OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create

OpenTofu will perform the following actions:

  # vault_identity_entity.slc_ci will be created
+ resource "vault_identity_entity" "slc_ci" {
+       external_policies = false
+       id                = (known after apply)
+       name              = "ci-slc"
+       policies          = [
+           "ci-slc",
        ]
    }

  # vault_identity_entity.whistle_ci will be created
+ resource "vault_identity_entity" "whistle_ci" {
+       external_policies = false
+       id                = (known after apply)
+       name              = "ci-whistle"
+       policies          = [
+           "ci-whistle",
        ]
    }

  # vault_identity_entity_alias.slc_ci will be created
+ resource "vault_identity_entity_alias" "slc_ci" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_jwt_d7c2ba6c"
+       name           = "ScottyLabs/slc"
    }

  # vault_identity_entity_alias.whistle_ci will be created
+ resource "vault_identity_entity_alias" "whistle_ci" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_jwt_d7c2ba6c"
+       name           = "ScottyLabs/whistle"
    }

  # vault_identity_group.slc_admins will be created
+ resource "vault_identity_group" "slc_admins" {
+       external_member_entity_ids = false
+       external_member_group_ids  = false
+       external_policies          = false
+       id                         = (known after apply)
+       name                       = "slc-admins"
+       policies                   = [
+           "slc-prod",
        ]
+       type                       = "external"
    }

  # vault_identity_group.slc_members will be created
+ resource "vault_identity_group" "slc_members" {
+       external_member_entity_ids = false
+       external_member_group_ids  = false
+       external_policies          = false
+       id                         = (known after apply)
+       name                       = "slc-members"
+       policies                   = [
+           "slc-dev",
        ]
+       type                       = "external"
    }

  # vault_identity_group.whistle_admins will be created
+ resource "vault_identity_group" "whistle_admins" {
+       external_member_entity_ids = false
+       external_member_group_ids  = false
+       external_policies          = false
+       id                         = (known after apply)
+       name                       = "whistle-admins"
+       policies                   = [
+           "whistle-prod",
        ]
+       type                       = "external"
    }

  # vault_identity_group.whistle_members will be created
+ resource "vault_identity_group" "whistle_members" {
+       external_member_entity_ids = false
+       external_member_group_ids  = false
+       external_policies          = false
+       id                         = (known after apply)
+       name                       = "whistle-members"
+       policies                   = [
+           "whistle-dev",
        ]
+       type                       = "external"
    }

  # vault_identity_group_alias.slc_admins will be created
+ resource "vault_identity_group_alias" "slc_admins" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_oidc_375ac979"
+       name           = "/projects/slc/admins"
    }

  # vault_identity_group_alias.slc_members will be created
+ resource "vault_identity_group_alias" "slc_members" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_oidc_375ac979"
+       name           = "/projects/slc"
    }

  # vault_identity_group_alias.whistle_admins will be created
+ resource "vault_identity_group_alias" "whistle_admins" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_oidc_375ac979"
+       name           = "/projects/whistle/admins"
    }

  # vault_identity_group_alias.whistle_members will be created
+ resource "vault_identity_group_alias" "whistle_members" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_oidc_375ac979"
+       name           = "/projects/whistle"
    }

  # vault_policy.slc_ci will be created
+ resource "vault_policy" "slc_ci" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "ci-slc"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/slc/ci/*" = {
+                       capabilities = [
+                           "read",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.slc_dev will be created
+ resource "vault_policy" "slc_dev" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "slc-dev"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/slc/dev/*"         = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/slc/preview/*"     = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec"               = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/slc"           = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/dev/*"     = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/preview/*" = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.slc_prod will be created
+ resource "vault_policy" "slc_prod" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "slc-prod"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/slc/ci/*"          = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/slc/prod/*"        = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/slc/staging/*"     = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec"               = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/slc"           = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/ci/*"      = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/prod/*"    = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/staging/*" = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.whistle_ci will be created
+ resource "vault_policy" "whistle_ci" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "ci-whistle"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/whistle/ci/*" = {
+                       capabilities = [
+                           "read",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.whistle_dev will be created
+ resource "vault_policy" "whistle_dev" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "whistle-dev"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/whistle/dev/*"         = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/whistle/preview/*"     = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec"                   = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle"           = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/dev/*"     = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/preview/*" = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.whistle_prod will be created
+ resource "vault_policy" "whistle_prod" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "whistle-prod"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/whistle/ci/*"          = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/whistle/prod/*"        = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/whistle/staging/*"     = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec"                   = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle"           = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/ci/*"      = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/prod/*"    = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/staging/*" = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                }
            }
        )
    }

Plan: 18 to add, 0 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -p openbao
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p openbao
  

Plan: 18 to add, 0 to change, 0 to destroy.

---

Plan Summary

5 projects, 2 with changes, 0 with no changes, 3 failed

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for 5 projects: 1. project: `git` dir: `generated/tofu/git` workspace: `default` 1. project: `grouper` dir: `generated/tofu/grouper` workspace: `default` 1. project: `keycloak` dir: `generated/tofu/keycloak` workspace: `default` 1. project: `litellm` dir: `generated/tofu/litellm` workspace: `default` 1. project: `openbao` dir: `generated/tofu/openbao` workspace: `default` --- ### 1. project: `git` dir: `generated/tofu/git` workspace: `default` **Plan Failed**: This project is currently locked by an unapplied plan from pull #539. To continue, delete the lock from #539 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 2. project: `grouper` dir: `generated/tofu/grouper` workspace: `default` **Plan Failed**: This project is currently locked by an unapplied plan from pull #539. To continue, delete the lock from #539 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 3. project: `keycloak` dir: `generated/tofu/keycloak` workspace: `default` **Plan Failed**: This project is currently locked by an unapplied plan from pull #539. To continue, delete the lock from #539 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 4. project: `litellm` dir: `generated/tofu/litellm` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on shared package cache Compiling proc-macro2 v1.0.106 Compiling quote v1.0.45 Compiling unicode-ident v1.0.24 Compiling cfg-if v1.0.4 Compiling libc v0.2.183 Compiling find-msvc-tools v0.1.9 Compiling serde_core v1.0.228 Compiling shlex v1.3.0 Compiling cc v1.2.57 Compiling zmij v1.0.21 Compiling rustversion v1.0.23 Compiling ring v0.17.14 Compiling itoa v1.0.18 Compiling syn v2.0.117 Compiling anstyle v1.0.14 Compiling zeroize v1.8.2 Compiling serde_json v1.0.149 Compiling scopeguard v1.2.0 Compiling serde v1.0.228 Compiling rustls-pki-types v1.14.0 Compiling encoding_rs v0.8.42 Compiling serde_derive v1.0.228 Compiling getrandom v0.2.17 Compiling crc32fast v1.5.0 Compiling autocfg v1.5.1 Compiling httparse v1.10.1 Compiling smallvec v1.15.1 Compiling untrusted v0.9.0 Compiling ref-cast v1.0.25 Compiling memchr v2.8.0 Compiling num-traits v0.2.19 Compiling ref-cast-impl v1.0.25 Compiling serde_derive_internals v0.29.1 Compiling multiversion_no_op v1.0.0 Compiling base64 v0.22.1 Compiling rustls v0.23.45 Compiling log v0.4.29 Compiling parking_lot_core v0.9.12 Compiling core_detect v1.0.0 Compiling simd-adler32 v0.3.8 Compiling simdutf8 v0.1.5 Compiling adler2 v2.0.1 Compiling bytes v1.11.1 Compiling miniz_oxide v0.8.9 Compiling http v1.4.0 Compiling schemars_derive v1.2.1 Compiling rustls-webpki v0.103.15 Compiling thiserror v2.0.18 Compiling subtle v2.6.1 Compiling dyn-clone v1.0.20 Compiling utf8parse v0.2.2 Compiling once_cell v1.21.4 Compiling unicode-width v0.2.2 Compiling arraydeque v0.5.1 Compiling granit-parser v2.0.0 Compiling annotate-snippets v0.12.17 Compiling anstyle-parse v1.0.0 Compiling ureq-proto v0.6.0 Compiling flate2 v1.1.9 Compiling encoding_rs_io v0.1.8 Compiling webpki-roots v1.0.6 Compiling schemars v1.2.1 Compiling lock_api v0.4.14 Compiling thiserror-impl v2.0.18 Compiling colorchoice v1.0.5 Compiling percent-encoding v2.3.2 Compiling nohash-hasher v0.2.0 Compiling anstyle-query v1.1.5 Compiling is_terminal_polyfill v1.70.2 Compiling utf8-zero v0.8.1 Compiling anstream v1.0.0 Compiling ureq v3.3.0 Compiling serde-saphyr v2.0.0 Compiling parking_lot v0.12.5 Compiling heck v0.5.0 Compiling anyhow v1.0.104 Compiling strsim v0.11.1 Compiling clap_lex v1.1.0 Compiling governance-schema v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/564/default/crates/governance-schema) Compiling clap_builder v4.6.0 Compiling clap_derive v4.6.0 Compiling clap v4.6.0 Compiling dotenvy v0.15.7 Compiling governance-core v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/564/default/crates/governance-core) Compiling governance-tfgen v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/564/default/crates/governance-tfgen) Compiling governance v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/564/default/crates/governance-cli) Finished `release` profile [optimized] target(s) in 31.70s ephemeral.vault_kv_secret_v2.litellm_master_key: Closing... ephemeral.vault_kv_secret_v2.litellm_master_key: Close complete after 0s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create OpenTofu will perform the following actions: # litellm_key.slc_dev will be created + resource "litellm_key" "slc_dev" { + aliases = (known after apply) + allowed_cache_controls = (known after apply) + allowed_passthrough_routes = (known after apply) + allowed_routes = (known after apply) + blocked = (known after apply) + budget_duration = "monthly" + config = (known after apply) + config_json = (sensitive value) + enforced_params = (known after apply) + guardrails = (known after apply) + id = (known after apply) + key = (sensitive value) + key_alias = "slc-dev" + key_wo = (write-only attribute) + max_budget = 5 + max_parallel_requests = 20 + metadata = (sensitive value) + metadata_json = (sensitive value) + model_max_budget = (known after apply) + model_rpm_limit = (known after apply) + model_tpm_limit = (known after apply) + models = (known after apply) + permissions = (known after apply) + permissions_json = (sensitive value) + prompts = (known after apply) + rpm_limit = 200 + send_invite_email = (write-only attribute) + soft_budget = (known after apply) + tags = (known after apply) + team_id = (known after apply) + tpm_limit = 1000000 } # litellm_key.slc_prod will be created + resource "litellm_key" "slc_prod" { + aliases = (known after apply) + allowed_cache_controls = (known after apply) + allowed_passthrough_routes = (known after apply) + allowed_routes = (known after apply) + blocked = (known after apply) + budget_duration = "monthly" + config = (known after apply) + config_json = (sensitive value) + enforced_params = (known after apply) + guardrails = (known after apply) + id = (known after apply) + key = (sensitive value) + key_alias = "slc-prod" + key_wo = (write-only attribute) + max_budget = 20 + max_parallel_requests = 100 + metadata = (sensitive value) + metadata_json = (sensitive value) + model_max_budget = (known after apply) + model_rpm_limit = (known after apply) + model_tpm_limit = (known after apply) + models = (known after apply) + permissions = (known after apply) + permissions_json = (sensitive value) + prompts = (known after apply) + rpm_limit = 1000 + send_invite_email = (write-only attribute) + soft_budget = (known after apply) + tags = (known after apply) + team_id = (known after apply) + tpm_limit = 4000000 } # litellm_team.slai will be created + resource "litellm_team" "slai" { + access_group_ids = (known after apply) + blocked = false + guardrails = (known after apply) + id = (known after apply) + metadata = (known after apply) + metadata_json = (sensitive value) + model_aliases = (known after apply) + model_rpm_limit = (known after apply) + model_tpm_limit = (known after apply) + models = (known after apply) + prompts = (known after apply) + tags = (known after apply) + team_alias = "slai" + team_id = (known after apply) + team_member_permissions = [] } # vault_kv_secret_v2.slc_dev_litellm_api_key will be created + resource "vault_kv_secret_v2" "slc_dev_litellm_api_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/dev/LITELLM_API_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_dev_litellm_base_url will be created + resource "vault_kv_secret_v2" "slc_dev_litellm_base_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/dev/LITELLM_BASE_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_preview_litellm_api_key will be created + resource "vault_kv_secret_v2" "slc_preview_litellm_api_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/preview/LITELLM_API_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_preview_litellm_base_url will be created + resource "vault_kv_secret_v2" "slc_preview_litellm_base_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/preview/LITELLM_BASE_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_prod_litellm_api_key will be created + resource "vault_kv_secret_v2" "slc_prod_litellm_api_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/prod/LITELLM_API_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_prod_litellm_base_url will be created + resource "vault_kv_secret_v2" "slc_prod_litellm_base_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/prod/LITELLM_BASE_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_staging_litellm_api_key will be created + resource "vault_kv_secret_v2" "slc_staging_litellm_api_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/staging/LITELLM_API_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_staging_litellm_base_url will be created + resource "vault_kv_secret_v2" "slc_staging_litellm_base_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/staging/LITELLM_BASE_URL" + path = (known after apply) + custom_metadata (known after apply) } Plan: 11 to add, 0 to change, 0 to destroy. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Fgovernance%252Fgenerated%252Ftofu%252Flitellm%252Fdefault%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` Plan: 11 to add, 0 to change, 0 to destroy. --- ### 5. project: `openbao` dir: `generated/tofu/openbao` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on build directory Finished `release` profile [optimized] target(s) in 31.71s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create OpenTofu will perform the following actions: # vault_identity_entity.slc_ci will be created + resource "vault_identity_entity" "slc_ci" { + external_policies = false + id = (known after apply) + name = "ci-slc" + policies = [ + "ci-slc", ] } # vault_identity_entity.whistle_ci will be created + resource "vault_identity_entity" "whistle_ci" { + external_policies = false + id = (known after apply) + name = "ci-whistle" + policies = [ + "ci-whistle", ] } # vault_identity_entity_alias.slc_ci will be created + resource "vault_identity_entity_alias" "slc_ci" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_jwt_d7c2ba6c" + name = "ScottyLabs/slc" } # vault_identity_entity_alias.whistle_ci will be created + resource "vault_identity_entity_alias" "whistle_ci" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_jwt_d7c2ba6c" + name = "ScottyLabs/whistle" } # vault_identity_group.slc_admins will be created + resource "vault_identity_group" "slc_admins" { + external_member_entity_ids = false + external_member_group_ids = false + external_policies = false + id = (known after apply) + name = "slc-admins" + policies = [ + "slc-prod", ] + type = "external" } # vault_identity_group.slc_members will be created + resource "vault_identity_group" "slc_members" { + external_member_entity_ids = false + external_member_group_ids = false + external_policies = false + id = (known after apply) + name = "slc-members" + policies = [ + "slc-dev", ] + type = "external" } # vault_identity_group.whistle_admins will be created + resource "vault_identity_group" "whistle_admins" { + external_member_entity_ids = false + external_member_group_ids = false + external_policies = false + id = (known after apply) + name = "whistle-admins" + policies = [ + "whistle-prod", ] + type = "external" } # vault_identity_group.whistle_members will be created + resource "vault_identity_group" "whistle_members" { + external_member_entity_ids = false + external_member_group_ids = false + external_policies = false + id = (known after apply) + name = "whistle-members" + policies = [ + "whistle-dev", ] + type = "external" } # vault_identity_group_alias.slc_admins will be created + resource "vault_identity_group_alias" "slc_admins" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_oidc_375ac979" + name = "/projects/slc/admins" } # vault_identity_group_alias.slc_members will be created + resource "vault_identity_group_alias" "slc_members" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_oidc_375ac979" + name = "/projects/slc" } # vault_identity_group_alias.whistle_admins will be created + resource "vault_identity_group_alias" "whistle_admins" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_oidc_375ac979" + name = "/projects/whistle/admins" } # vault_identity_group_alias.whistle_members will be created + resource "vault_identity_group_alias" "whistle_members" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_oidc_375ac979" + name = "/projects/whistle" } # vault_policy.slc_ci will be created + resource "vault_policy" "slc_ci" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "ci-slc" + policy = jsonencode( { + path = { + "secret/data/secretspec/slc/ci/*" = { + capabilities = [ + "read", ] } } } ) } # vault_policy.slc_dev will be created + resource "vault_policy" "slc_dev" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "slc-dev" + policy = jsonencode( { + path = { + "secret/data/secretspec/slc/dev/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/slc/preview/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/metadata/secretspec" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/slc" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/slc/dev/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/slc/preview/*" = { + capabilities = [ + "list", + "read", + "delete", ] } } } ) } # vault_policy.slc_prod will be created + resource "vault_policy" "slc_prod" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "slc-prod" + policy = jsonencode( { + path = { + "secret/data/secretspec/slc/ci/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/slc/prod/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/slc/staging/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/metadata/secretspec" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/slc" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/slc/ci/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/slc/prod/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/slc/staging/*" = { + capabilities = [ + "list", + "read", + "delete", ] } } } ) } # vault_policy.whistle_ci will be created + resource "vault_policy" "whistle_ci" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "ci-whistle" + policy = jsonencode( { + path = { + "secret/data/secretspec/whistle/ci/*" = { + capabilities = [ + "read", ] } } } ) } # vault_policy.whistle_dev will be created + resource "vault_policy" "whistle_dev" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "whistle-dev" + policy = jsonencode( { + path = { + "secret/data/secretspec/whistle/dev/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/whistle/preview/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/metadata/secretspec" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/whistle" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/whistle/dev/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/whistle/preview/*" = { + capabilities = [ + "list", + "read", + "delete", ] } } } ) } # vault_policy.whistle_prod will be created + resource "vault_policy" "whistle_prod" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "whistle-prod" + policy = jsonencode( { + path = { + "secret/data/secretspec/whistle/ci/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/whistle/prod/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/whistle/staging/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/metadata/secretspec" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/whistle" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/whistle/ci/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/whistle/prod/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/whistle/staging/*" = { + capabilities = [ + "list", + "read", + "delete", ] } } } ) } Plan: 18 to add, 0 to change, 0 to destroy. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Fgovernance%252Fgenerated%252Ftofu%252Fopenbao%252Fdefault%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` Plan: 18 to add, 0 to change, 0 to destroy. --- ### Plan Summary 5 projects, 2 with changes, 0 with no changes, 3 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

thesuperRL commented 2026-10-31 04:49:22 +00:00

Author

Owner

Copy link

atlantis plan

atlantis plan

scottylabs-bot commented 2026-10-31 04:50:07 +00:00

Owner

Copy link

Ran Plan for 5 projects:

1. project: litellm dir: generated/tofu/litellm workspace: default
2. project: openbao dir: generated/tofu/openbao workspace: default
3. project: grouper dir: generated/tofu/grouper workspace: default
4. project: keycloak dir: generated/tofu/keycloak workspace: default
5. project: git dir: generated/tofu/git workspace: default

---

1. project: litellm dir: generated/tofu/litellm workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `release` profile [optimized] target(s) in 0.15s

ephemeral.vault_kv_secret_v2.litellm_master_key: Closing...
ephemeral.vault_kv_secret_v2.litellm_master_key: Close complete after 0s

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create

OpenTofu will perform the following actions:

  # litellm_key.slc_dev will be created
+ resource "litellm_key" "slc_dev" {
+       aliases                    = (known after apply)
+       allowed_cache_controls     = (known after apply)
+       allowed_passthrough_routes = (known after apply)
+       allowed_routes             = (known after apply)
+       blocked                    = (known after apply)
+       budget_duration            = "monthly"
+       config                     = (known after apply)
+       config_json                = (sensitive value)
+       enforced_params            = (known after apply)
+       guardrails                 = (known after apply)
+       id                         = (known after apply)
+       key                        = (sensitive value)
+       key_alias                  = "slc-dev"
+       key_wo                     = (write-only attribute)
+       max_budget                 = 5
+       max_parallel_requests      = 20
+       metadata                   = (sensitive value)
+       metadata_json              = (sensitive value)
+       model_max_budget           = (known after apply)
+       model_rpm_limit            = (known after apply)
+       model_tpm_limit            = (known after apply)
+       models                     = (known after apply)
+       permissions                = (known after apply)
+       permissions_json           = (sensitive value)
+       prompts                    = (known after apply)
+       rpm_limit                  = 200
+       send_invite_email          = (write-only attribute)
+       soft_budget                = (known after apply)
+       tags                       = (known after apply)
+       team_id                    = (known after apply)
+       tpm_limit                  = 1000000
    }

  # litellm_key.slc_prod will be created
+ resource "litellm_key" "slc_prod" {
+       aliases                    = (known after apply)
+       allowed_cache_controls     = (known after apply)
+       allowed_passthrough_routes = (known after apply)
+       allowed_routes             = (known after apply)
+       blocked                    = (known after apply)
+       budget_duration            = "monthly"
+       config                     = (known after apply)
+       config_json                = (sensitive value)
+       enforced_params            = (known after apply)
+       guardrails                 = (known after apply)
+       id                         = (known after apply)
+       key                        = (sensitive value)
+       key_alias                  = "slc-prod"
+       key_wo                     = (write-only attribute)
+       max_budget                 = 20
+       max_parallel_requests      = 100
+       metadata                   = (sensitive value)
+       metadata_json              = (sensitive value)
+       model_max_budget           = (known after apply)
+       model_rpm_limit            = (known after apply)
+       model_tpm_limit            = (known after apply)
+       models                     = (known after apply)
+       permissions                = (known after apply)
+       permissions_json           = (sensitive value)
+       prompts                    = (known after apply)
+       rpm_limit                  = 1000
+       send_invite_email          = (write-only attribute)
+       soft_budget                = (known after apply)
+       tags                       = (known after apply)
+       team_id                    = (known after apply)
+       tpm_limit                  = 4000000
    }

  # litellm_team.slai will be created
+ resource "litellm_team" "slai" {
+       access_group_ids        = (known after apply)
+       blocked                 = false
+       guardrails              = (known after apply)
+       id                      = (known after apply)
+       metadata                = (known after apply)
+       metadata_json           = (sensitive value)
+       model_aliases           = (known after apply)
+       model_rpm_limit         = (known after apply)
+       model_tpm_limit         = (known after apply)
+       models                  = (known after apply)
+       prompts                 = (known after apply)
+       tags                    = (known after apply)
+       team_alias              = "slai"
+       team_id                 = (known after apply)
+       team_member_permissions = []
    }

  # vault_kv_secret_v2.slc_dev_litellm_api_key will be created
+ resource "vault_kv_secret_v2" "slc_dev_litellm_api_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/dev/LITELLM_API_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_dev_litellm_base_url will be created
+ resource "vault_kv_secret_v2" "slc_dev_litellm_base_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/dev/LITELLM_BASE_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_preview_litellm_api_key will be created
+ resource "vault_kv_secret_v2" "slc_preview_litellm_api_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/preview/LITELLM_API_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_preview_litellm_base_url will be created
+ resource "vault_kv_secret_v2" "slc_preview_litellm_base_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/preview/LITELLM_BASE_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_prod_litellm_api_key will be created
+ resource "vault_kv_secret_v2" "slc_prod_litellm_api_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/prod/LITELLM_API_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_prod_litellm_base_url will be created
+ resource "vault_kv_secret_v2" "slc_prod_litellm_base_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/prod/LITELLM_BASE_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_staging_litellm_api_key will be created
+ resource "vault_kv_secret_v2" "slc_staging_litellm_api_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/staging/LITELLM_API_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.slc_staging_litellm_base_url will be created
+ resource "vault_kv_secret_v2" "slc_staging_litellm_base_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/slc/staging/LITELLM_BASE_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

Plan: 11 to add, 0 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -p litellm
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p litellm
  

Plan: 11 to add, 0 to change, 0 to destroy.

---

2. project: openbao dir: generated/tofu/openbao workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `release` profile [optimized] target(s) in 0.11s


OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create

OpenTofu will perform the following actions:

  # vault_identity_entity.slc_ci will be created
+ resource "vault_identity_entity" "slc_ci" {
+       external_policies = false
+       id                = (known after apply)
+       name              = "ci-slc"
+       policies          = [
+           "ci-slc",
        ]
    }

  # vault_identity_entity.whistle_ci will be created
+ resource "vault_identity_entity" "whistle_ci" {
+       external_policies = false
+       id                = (known after apply)
+       name              = "ci-whistle"
+       policies          = [
+           "ci-whistle",
        ]
    }

  # vault_identity_entity_alias.slc_ci will be created
+ resource "vault_identity_entity_alias" "slc_ci" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_jwt_d7c2ba6c"
+       name           = "ScottyLabs/slc"
    }

  # vault_identity_entity_alias.whistle_ci will be created
+ resource "vault_identity_entity_alias" "whistle_ci" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_jwt_d7c2ba6c"
+       name           = "ScottyLabs/whistle"
    }

  # vault_identity_group.slc_admins will be created
+ resource "vault_identity_group" "slc_admins" {
+       external_member_entity_ids = false
+       external_member_group_ids  = false
+       external_policies          = false
+       id                         = (known after apply)
+       name                       = "slc-admins"
+       policies                   = [
+           "slc-prod",
        ]
+       type                       = "external"
    }

  # vault_identity_group.slc_members will be created
+ resource "vault_identity_group" "slc_members" {
+       external_member_entity_ids = false
+       external_member_group_ids  = false
+       external_policies          = false
+       id                         = (known after apply)
+       name                       = "slc-members"
+       policies                   = [
+           "slc-dev",
        ]
+       type                       = "external"
    }

  # vault_identity_group.whistle_admins will be created
+ resource "vault_identity_group" "whistle_admins" {
+       external_member_entity_ids = false
+       external_member_group_ids  = false
+       external_policies          = false
+       id                         = (known after apply)
+       name                       = "whistle-admins"
+       policies                   = [
+           "whistle-prod",
        ]
+       type                       = "external"
    }

  # vault_identity_group.whistle_members will be created
+ resource "vault_identity_group" "whistle_members" {
+       external_member_entity_ids = false
+       external_member_group_ids  = false
+       external_policies          = false
+       id                         = (known after apply)
+       name                       = "whistle-members"
+       policies                   = [
+           "whistle-dev",
        ]
+       type                       = "external"
    }

  # vault_identity_group_alias.slc_admins will be created
+ resource "vault_identity_group_alias" "slc_admins" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_oidc_375ac979"
+       name           = "/projects/slc/admins"
    }

  # vault_identity_group_alias.slc_members will be created
+ resource "vault_identity_group_alias" "slc_members" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_oidc_375ac979"
+       name           = "/projects/slc"
    }

  # vault_identity_group_alias.whistle_admins will be created
+ resource "vault_identity_group_alias" "whistle_admins" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_oidc_375ac979"
+       name           = "/projects/whistle/admins"
    }

  # vault_identity_group_alias.whistle_members will be created
+ resource "vault_identity_group_alias" "whistle_members" {
+       canonical_id   = (known after apply)
+       id             = (known after apply)
+       mount_accessor = "auth_oidc_375ac979"
+       name           = "/projects/whistle"
    }

  # vault_policy.slc_ci will be created
+ resource "vault_policy" "slc_ci" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "ci-slc"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/slc/ci/*" = {
+                       capabilities = [
+                           "read",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.slc_dev will be created
+ resource "vault_policy" "slc_dev" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "slc-dev"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/slc/dev/*"         = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/slc/preview/*"     = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec"               = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/slc"           = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/dev/*"     = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/preview/*" = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.slc_prod will be created
+ resource "vault_policy" "slc_prod" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "slc-prod"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/slc/ci/*"          = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/slc/prod/*"        = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/slc/staging/*"     = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec"               = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/slc"           = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/ci/*"      = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/prod/*"    = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/slc/staging/*" = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.whistle_ci will be created
+ resource "vault_policy" "whistle_ci" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "ci-whistle"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/whistle/ci/*" = {
+                       capabilities = [
+                           "read",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.whistle_dev will be created
+ resource "vault_policy" "whistle_dev" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "whistle-dev"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/whistle/dev/*"         = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/whistle/preview/*"     = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec"                   = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle"           = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/dev/*"     = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/preview/*" = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                }
            }
        )
    }

  # vault_policy.whistle_prod will be created
+ resource "vault_policy" "whistle_prod" {
+       allow_overwrite = (known after apply)
+       id              = (known after apply)
+       name            = "whistle-prod"
+       policy          = jsonencode(
            {
+               path = {
                  + "secret/data/secretspec/whistle/ci/*"          = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/whistle/prod/*"        = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/data/secretspec/whistle/staging/*"     = {
+                       capabilities = [
+                           "create",
+                           "read",
+                           "update",
+                           "patch",
+                           "delete",
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec"                   = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle"           = {
+                       capabilities = [
+                           "list",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/ci/*"      = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/prod/*"    = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                  + "secret/metadata/secretspec/whistle/staging/*" = {
+                       capabilities = [
+                           "list",
+                           "read",
+                           "delete",
                        ]
                    }
                }
            }
        )
    }

Plan: 18 to add, 0 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -p openbao
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p openbao
  

Plan: 18 to add, 0 to change, 0 to destroy.

---

3. project: grouper dir: generated/tofu/grouper workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `release` profile [optimized] target(s) in 0.14s

ephemeral.vault_kv_secret_v2.grouper_password: Closing...
ephemeral.vault_kv_secret_v2.grouper_password: Close complete after 0s

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
! update in-place (current -> planned)

OpenTofu will perform the following actions:

  # grouper_folder.ref__committees__tech__teams__slc will be created
+ resource "grouper_folder" "ref__committees__tech__teams__slc" {
+       display_extension = "ScottyLabs Code (SLC)"
+       id                = (known after apply)
+       name              = "Community:Department:ScottyLabs:ref:committees:tech:teams:slc"
    }

  # grouper_folder.ref__committees__tech__teams__whistle will be created
+ resource "grouper_folder" "ref__committees__tech__teams__whistle" {
+       display_extension = "Whistle"
+       id                = (known after apply)
+       name              = "Community:Department:ScottyLabs:ref:committees:tech:teams:whistle"
    }

  # grouper_group.ref__committees__tech__teams__slc__general will be created
+ resource "grouper_group" "ref__committees__tech__teams__slc__general" {
+       display_extension = "general"
+       id                = (known after apply)
+       name              = "Community:Department:ScottyLabs:ref:committees:tech:teams:slc:general"
    }

  # grouper_group.ref__committees__tech__teams__slc__members will be created
+ resource "grouper_group" "ref__committees__tech__teams__slc__members" {
+       display_extension = "members"
+       id                = (known after apply)
+       name              = "Community:Department:ScottyLabs:ref:committees:tech:teams:slc:members"
    }

  # grouper_group.ref__committees__tech__teams__whistle__general will be created
+ resource "grouper_group" "ref__committees__tech__teams__whistle__general" {
+       display_extension = "general"
+       id                = (known after apply)
+       name              = "Community:Department:ScottyLabs:ref:committees:tech:teams:whistle:general"
    }

  # grouper_group.ref__committees__tech__teams__whistle__members will be created
+ resource "grouper_group" "ref__committees__tech__teams__whistle__members" {
+       display_extension = "members"
+       id                = (known after apply)
+       name              = "Community:Department:ScottyLabs:ref:committees:tech:teams:whistle:members"
    }

  # grouper_group_members.google__sl_exec__Managers_Include will be updated in-place
! resource "grouper_group_members" "google__sl_exec__Managers_Include" {
!       subjects  = {
          - "ldap" = [
-               "apallati",
            ] -> null
        }
        # (3 unchanged attributes hidden)
    }

  # grouper_group_members.ref__committees__tech__members will be updated in-place
! resource "grouper_group_members" "ref__committees__tech__members" {
!       groups    = [
          + (known after apply),
          + (known after apply),
            # (37 unchanged elements hidden)
        ]
        # (3 unchanged attributes hidden)
    }

  # grouper_group_members.ref__committees__tech__teams__slc__general will be created
+ resource "grouper_group_members" "ref__committees__tech__teams__slc__general" {
+       group     = (known after apply)
+       groups    = []
+       scheduled = []
+       subjects  = {
          + "ldap" = [
+               "aaronz2",
+               "aasingh",
+               "abthakka",
+               "adamzhu",
+               "ajz2",
+               "akhanal2",
+               "alvinngo",
+               "andywu2",
+               "angelaji",
+               "angelayu",
+               "bbchou",
+               "chloezha",
+               "dfz2",
+               "egadde",
+               "elliott3",
+               "elvinz",
+               "hcw2",
+               "ikunwar",
+               "iychen",
+               "izb",
+               "jcz2",
+               "jeffl2",
+               "jgaspard",
+               "jiayingz",
+               "jliao2",
+               "jocelyn5",
+               "johnsonj",
+               "jsong5",
+               "jyuan4",
+               "keviny2",
+               "kgawandi",
+               "lmalipat",
+               "luluj",
+               "mcai5",
+               "mday3",
+               "michell9",
+               "mofany",
+               "nakshatg",
+               "niyelh",
+               "peteryao",
+               "qge",
+               "qizheny",
+               "rijulm",
+               "rjfernan",
+               "rzhu3",
+               "saanvik",
+               "saic2",
+               "sarahhuo",
+               "sarahzho",
+               "spola2",
+               "sskambha",
+               "vihank",
+               "vishnup",
+               "walterh",
+               "wchee",
+               "yinshanc",
+               "youyid",
+               "yuxizhen",
+               "zhaojiel",
+               "zhengyu4",
            ]
        }
    }

  # grouper_group_members.ref__committees__tech__teams__slc__members will be created
+ resource "grouper_group_members" "ref__committees__tech__teams__slc__members" {
+       group     = (known after apply)
+       groups    = [
+           "3f2ff15f03a14572a48202101796263d",
          + (known after apply),
        ]
+       scheduled = []
+       subjects  = {}
    }

  # grouper_group_members.ref__committees__tech__teams__whistle__general will be created
+ resource "grouper_group_members" "ref__committees__tech__teams__whistle__general" {
+       group     = (known after apply)
+       groups    = []
+       scheduled = []
+       subjects  = {
          + "ldap" = [
+               "aaronz2",
+               "aasingh",
+               "abthakka",
+               "adamzhu",
+               "ajz2",
+               "akhanal2",
+               "alvinngo",
+               "andywu2",
+               "angelaji",
+               "angelayu",
+               "bbchou",
+               "chloezha",
+               "dfz2",
+               "egadde",
+               "elliott3",
+               "elvinz",
+               "hcw2",
+               "ikunwar",
+               "iychen",
+               "izb",
+               "jcz2",
+               "jeffl2",
+               "jgaspard",
+               "jiayingz",
+               "jliao2",
+               "jocelyn5",
+               "johnsonj",
+               "jsong5",
+               "jyuan4",
+               "keviny2",
+               "kgawandi",
+               "lmalipat",
+               "luluj",
+               "mcai5",
+               "mday3",
+               "michell9",
+               "mofany",
+               "nakshatg",
+               "niyelh",
+               "peteryao",
+               "qge",
+               "qizheny",
+               "rijulm",
+               "rjfernan",
+               "rzhu3",
+               "saanvik",
+               "saic2",
+               "sarahhuo",
+               "sarahzho",
+               "spola2",
+               "sskambha",
+               "vihank",
+               "vishnup",
+               "walterh",
+               "wchee",
+               "yinshanc",
+               "youyid",
+               "yuxizhen",
+               "zhaojiel",
+               "zhengyu4",
            ]
        }
    }

  # grouper_group_members.ref__committees__tech__teams__whistle__members will be created
+ resource "grouper_group_members" "ref__committees__tech__teams__whistle__members" {
+       group     = (known after apply)
+       groups    = [
+           "3f2ff15f03a14572a48202101796263d",
          + (known after apply),
        ]
+       scheduled = []
+       subjects  = {}
    }

Plan: 10 to add, 2 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -p grouper
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p grouper
  

Plan: 10 to add, 2 to change, 0 to destroy.

---

4. project: keycloak dir: generated/tofu/keycloak workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on build directory
    Finished `release` profile [optimized] target(s) in 0.12s

data.external.identities: Still reading... [10s elapsed]
data.external.identities: Still reading... [20s elapsed]
data.external.identities: Still reading... [30s elapsed]
data.external.identities: Read complete after 31s [id=-]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create

OpenTofu will perform the following actions:

  # keycloak_group.project_slai_slc will be created
+ resource "keycloak_group" "project_slai_slc" {
+       id        = (known after apply)
+       name      = "slc"
+       parent_id = "9e6890c8-50a0-4b82-86b9-91791fffac25"
+       path      = (known after apply)
+       realm_id  = "scottylabs"
    }

  # keycloak_group.project_slai_slc_admins will be created
+ resource "keycloak_group" "project_slai_slc_admins" {
+       id        = (known after apply)
+       name      = "admins"
+       parent_id = (known after apply)
+       path      = (known after apply)
+       realm_id  = "scottylabs"
    }

  # keycloak_group.project_slai_whistle will be created
+ resource "keycloak_group" "project_slai_whistle" {
+       id        = (known after apply)
+       name      = "whistle"
+       parent_id = "9e6890c8-50a0-4b82-86b9-91791fffac25"
+       path      = (known after apply)
+       realm_id  = "scottylabs"
    }

  # keycloak_group.project_slai_whistle_admins will be created
+ resource "keycloak_group" "project_slai_whistle_admins" {
+       id        = (known after apply)
+       name      = "admins"
+       parent_id = (known after apply)
+       path      = (known after apply)
+       realm_id  = "scottylabs"
    }

  # keycloak_group_memberships.project_slai_slc will be created
+ resource "keycloak_group_memberships" "project_slai_slc" {
+       group_id = (known after apply)
+       id       = (known after apply)
+       members  = [
+           "aaronz2",
+           "aasingh",
+           "abthakka",
+           "adamzhu",
+           "ajz2",
+           "akhanal2",
+           "alvinngo",
+           "andywu2",
+           "angelaji",
+           "angelayu",
+           "apallati",
+           "bbchou",
+           "chloezha",
+           "dfz2",
+           "egadde",
+           "elliott3",
+           "elvinz",
+           "hcw2",
+           "ikunwar",
+           "iychen",
+           "izb",
+           "jcz2",
+           "jeffl2",
+           "jessec2",
+           "jgaspard",
+           "jiayingz",
+           "jiyas",
+           "jliao2",
+           "jocelyn5",
+           "johnsonj",
+           "jsong5",
+           "jyuan4",
+           "keviny2",
+           "kgawandi",
+           "krishsax",
+           "lmalipat",
+           "luluj",
+           "mcai5",
+           "mday3",
+           "michell9",
+           "mofany",
+           "nakshatg",
+           "niyelh",
+           "peteryao",
+           "qge",
+           "qizheny",
+           "rijulm",
+           "rjfernan",
+           "rzhu3",
+           "saanvik",
+           "saic2",
+           "sarahhuo",
+           "sarahzho",
+           "spola2",
+           "sskambha",
+           "vihank",
+           "vishnup",
+           "walterh",
+           "wchee",
+           "yinshanc",
+           "youyid",
+           "yuxizhen",
+           "zhaojiel",
+           "zhengyu4",
        ]
+       realm_id = "scottylabs"
    }

  # keycloak_group_memberships.project_slai_slc_admins will be created
+ resource "keycloak_group_memberships" "project_slai_slc_admins" {
+       group_id = (known after apply)
+       id       = (known after apply)
+       members  = [
+           "apallati",
+           "jessec2",
+           "jiyas",
+           "krishsax",
        ]
+       realm_id = "scottylabs"
    }

  # keycloak_group_memberships.project_slai_whistle will be created
+ resource "keycloak_group_memberships" "project_slai_whistle" {
+       group_id = (known after apply)
+       id       = (known after apply)
+       members  = [
+           "aaronz2",
+           "aasingh",
+           "abthakka",
+           "adamzhu",
+           "ajz2",
+           "akhanal2",
+           "alvinngo",
+           "andywu2",
+           "angelaji",
+           "angelayu",
+           "apallati",
+           "bbchou",
+           "chloezha",
+           "dfz2",
+           "egadde",
+           "elliott3",
+           "elvinz",
+           "hcw2",
+           "ikunwar",
+           "iychen",
+           "izb",
+           "jcz2",
+           "jeffl2",
+           "jessec2",
+           "jgaspard",
+           "jiayingz",
+           "jiyas",
+           "jliao2",
+           "jocelyn5",
+           "johnsonj",
+           "jsong5",
+           "jyuan4",
+           "keviny2",
+           "kgawandi",
+           "krishsax",
+           "lmalipat",
+           "luluj",
+           "mcai5",
+           "mday3",
+           "michell9",
+           "mofany",
+           "nakshatg",
+           "niyelh",
+           "peteryao",
+           "qge",
+           "qizheny",
+           "rijulm",
+           "rjfernan",
+           "rzhu3",
+           "saanvik",
+           "saic2",
+           "sarahhuo",
+           "sarahzho",
+           "spola2",
+           "sskambha",
+           "vihank",
+           "vishnup",
+           "walterh",
+           "wchee",
+           "yinshanc",
+           "youyid",
+           "yuxizhen",
+           "zhaojiel",
+           "zhengyu4",
        ]
+       realm_id = "scottylabs"
    }

  # keycloak_group_memberships.project_slai_whistle_admins will be created
+ resource "keycloak_group_memberships" "project_slai_whistle_admins" {
+       group_id = (known after apply)
+       id       = (known after apply)
+       members  = [
+           "apallati",
+           "jessec2",
+           "jiyas",
+           "krishsax",
        ]
+       realm_id = "scottylabs"
    }

Plan: 8 to add, 0 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -p keycloak
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p keycloak
  

Plan: 8 to add, 0 to change, 0 to destroy.

---

5. project: git dir: generated/tofu/git workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `release` profile [optimized] target(s) in 0.15s


OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create

OpenTofu will perform the following actions:

  # forgejo_branch_protection.slai_slc_default_branch will be created
+ resource "forgejo_branch_protection" "slai_slc_default_branch" {
+       approvals_whitelist_teams         = [
+           "slai-leads",
        ]
+       approvals_whitelist_usernames     = []
+       block_on_official_review_requests = false
+       block_on_outdated_branch          = true
+       block_on_rejected_reviews         = true
+       branch_name                       = "main"
+       dismiss_stale_approvals           = false
+       enable_approvals_whitelist        = true
+       enable_merge_whitelist            = true
+       enable_push                       = true
+       enable_push_whitelist             = true
+       enable_status_check               = false
+       merge_whitelist_teams             = [
+           "slai-leads",
        ]
+       merge_whitelist_usernames         = []
+       push_whitelist_deploy_keys        = false
+       push_whitelist_teams              = [
+           "slai-leads",
        ]
+       push_whitelist_usernames          = []
+       repository_id                     = (known after apply)
+       require_signed_commits            = false
+       required_approvals                = 1
+       status_check_contexts             = []
    }

  # forgejo_branch_protection.slai_whistle_default_branch will be created
+ resource "forgejo_branch_protection" "slai_whistle_default_branch" {
+       approvals_whitelist_teams         = [
+           "slai-leads",
        ]
+       approvals_whitelist_usernames     = []
+       block_on_official_review_requests = false
+       block_on_outdated_branch          = true
+       block_on_rejected_reviews         = true
+       branch_name                       = "main"
+       dismiss_stale_approvals           = false
+       enable_approvals_whitelist        = true
+       enable_merge_whitelist            = true
+       enable_push                       = true
+       enable_push_whitelist             = true
+       enable_status_check               = false
+       merge_whitelist_teams             = [
+           "slai-leads",
        ]
+       merge_whitelist_usernames         = []
+       push_whitelist_deploy_keys        = false
+       push_whitelist_teams              = [
+           "slai-leads",
        ]
+       push_whitelist_usernames          = []
+       repository_id                     = (known after apply)
+       require_signed_commits            = false
+       required_approvals                = 1
+       status_check_contexts             = []
    }

  # forgejo_repository.slai_slc will be created
+ resource "forgejo_repository" "slai_slc" {
+       allow_fast_forward_only_merge     = true
+       allow_manual_merge                = false
+       allow_merge_commits               = false
+       allow_rebase                      = true
+       allow_rebase_explicit             = false
+       allow_rebase_update               = true
+       allow_squash_merge                = true
+       archive_on_destroy                = false
+       archived                          = false
+       auto_init                         = true
+       autodetect_manual_merge           = false
+       avatar_url                        = (known after apply)
+       clone_addr                        = (known after apply)
+       clone_url                         = (known after apply)
+       created_at                        = (known after apply)
+       default_allow_maintainer_edit     = true
+       default_branch                    = "main"
+       default_delete_branch_after_merge = true
+       default_merge_style               = "fast-forward-only"
+       default_update_style              = "rebase"
+       description                       = "Agentic Coding Agent"
+       empty                             = (known after apply)
+       enable_prune                      = false
+       external_tracker                  = (known after apply)
+       external_wiki                     = (known after apply)
+       fork                              = (known after apply)
+       forks_count                       = (known after apply)
+       full_name                         = (known after apply)
+       globally_editable_wiki            = false
+       has_actions                       = true
+       has_issues                        = true
+       has_packages                      = true
+       has_projects                      = true
+       has_pull_requests                 = true
+       has_releases                      = true
+       has_wiki                          = true
+       html_url                          = (known after apply)
+       id                                = (known after apply)
+       ignore_whitespace_conflicts       = false
+       internal                          = (known after apply)
+       internal_tracker                  = (known after apply)
+       labels                            = false
+       lfs                               = false
+       milestones                        = false
+       mirror                            = false
+       mirror_interval                   = (known after apply)
+       mirror_updated                    = (known after apply)
+       name                              = "slc"
+       open_issues_count                 = (known after apply)
+       open_pr_counter                   = (known after apply)
+       owner                             = "ScottyLabs"
+       parent_id                         = (known after apply)
+       permissions                       = (known after apply)
+       private                           = false
+       release_counter                   = (known after apply)
+       size                              = (known after apply)
+       ssh_url                           = (known after apply)
+       stars_count                       = (known after apply)
+       template                          = false
+       topics                            = [
+           "nixbot",
        ]
+       trust_model                       = "default"
+       updated_at                        = (known after apply)
+       watchers_count                    = (known after apply)
    }

  # forgejo_repository.slai_whistle will be created
+ resource "forgejo_repository" "slai_whistle" {
+       allow_fast_forward_only_merge     = true
+       allow_manual_merge                = false
+       allow_merge_commits               = false
+       allow_rebase                      = true
+       allow_rebase_explicit             = false
+       allow_rebase_update               = true
+       allow_squash_merge                = true
+       archive_on_destroy                = false
+       archived                          = false
+       auto_init                         = true
+       autodetect_manual_merge           = false
+       avatar_url                        = (known after apply)
+       clone_addr                        = (known after apply)
+       clone_url                         = (known after apply)
+       created_at                        = (known after apply)
+       default_allow_maintainer_edit     = true
+       default_branch                    = "main"
+       default_delete_branch_after_merge = true
+       default_merge_style               = "fast-forward-only"
+       default_update_style              = "rebase"
+       description                       = "Summarization Platform for Nova"
+       empty                             = (known after apply)
+       enable_prune                      = false
+       external_tracker                  = (known after apply)
+       external_wiki                     = (known after apply)
+       fork                              = (known after apply)
+       forks_count                       = (known after apply)
+       full_name                         = (known after apply)
+       globally_editable_wiki            = false
+       has_actions                       = true
+       has_issues                        = true
+       has_packages                      = true
+       has_projects                      = true
+       has_pull_requests                 = true
+       has_releases                      = true
+       has_wiki                          = true
+       html_url                          = (known after apply)
+       id                                = (known after apply)
+       ignore_whitespace_conflicts       = false
+       internal                          = (known after apply)
+       internal_tracker                  = (known after apply)
+       labels                            = false
+       lfs                               = false
+       milestones                        = false
+       mirror                            = false
+       mirror_interval                   = (known after apply)
+       mirror_updated                    = (known after apply)
+       name                              = "whistle"
+       open_issues_count                 = (known after apply)
+       open_pr_counter                   = (known after apply)
+       owner                             = "ScottyLabs"
+       parent_id                         = (known after apply)
+       permissions                       = (known after apply)
+       private                           = false
+       release_counter                   = (known after apply)
+       size                              = (known after apply)
+       ssh_url                           = (known after apply)
+       stars_count                       = (known after apply)
+       template                          = false
+       topics                            = [
+           "nixbot",
        ]
+       trust_model                       = "default"
+       updated_at                        = (known after apply)
+       watchers_count                    = (known after apply)
    }

  # forgejo_team_repository.slai_leads_slc will be created
+ resource "forgejo_team_repository" "slai_leads_slc" {
+       id            = (known after apply)
+       repository_id = (known after apply)
+       team_id       = 74
    }

  # forgejo_team_repository.slai_leads_whistle will be created
+ resource "forgejo_team_repository" "slai_leads_whistle" {
+       id            = (known after apply)
+       repository_id = (known after apply)
+       team_id       = 74
    }

  # forgejo_team_repository.slai_slc will be created
+ resource "forgejo_team_repository" "slai_slc" {
+       id            = (known after apply)
+       repository_id = (known after apply)
+       team_id       = 8
    }

  # forgejo_team_repository.slai_whistle will be created
+ resource "forgejo_team_repository" "slai_whistle" {
+       id            = (known after apply)
+       repository_id = (known after apply)
+       team_id       = 8
    }

  # github_actions_repository_permissions.slai_slc_actions will be created
+ resource "github_actions_repository_permissions" "slai_slc_actions" {
+       enabled              = false
+       id                   = (known after apply)
+       repository           = "slc"
+       sha_pinning_required = (known after apply)
    }

  # github_actions_repository_permissions.slai_whistle_actions will be created
+ resource "github_actions_repository_permissions" "slai_whistle_actions" {
+       enabled              = false
+       id                   = (known after apply)
+       repository           = "whistle"
+       sha_pinning_required = (known after apply)
    }

  # github_repository.slai_slc will be created
+ resource "github_repository" "slai_slc" {
+       allow_auto_merge                        = false
+       allow_forking                           = (known after apply)
+       allow_merge_commit                      = true
+       allow_rebase_merge                      = true
+       allow_squash_merge                      = true
+       archived                                = false
+       default_branch                          = (known after apply)
+       delete_branch_on_merge                  = false
+       description                             = "READ-ONLY MIRROR"
+       etag                                    = (known after apply)
+       fork                                    = (known after apply)
+       full_name                               = (known after apply)
+       git_clone_url                           = (known after apply)
+       has_discussions                         = false
+       has_issues                              = false
+       has_projects                            = false
+       has_wiki                                = false
+       homepage_url                            = "https://git.cmu.dev/ScottyLabs/slc"
+       html_url                                = (known after apply)
+       http_clone_url                          = (known after apply)
+       id                                      = (known after apply)
+       ignore_vulnerability_alerts_during_read = false
+       merge_commit_message                    = "PR_TITLE"
+       merge_commit_title                      = "MERGE_MESSAGE"
+       name                                    = "slc"
+       node_id                                 = (known after apply)
+       primary_language                        = (known after apply)
+       private                                 = (known after apply)
+       repo_id                                 = (known after apply)
+       source_owner                            = (known after apply)
+       source_repo                             = (known after apply)
+       squash_merge_commit_message             = "COMMIT_MESSAGES"
+       squash_merge_commit_title               = "COMMIT_OR_PR_TITLE"
+       ssh_clone_url                           = (known after apply)
+       svn_url                                 = (known after apply)
+       topics                                  = (known after apply)
+       visibility                              = "public"
+       vulnerability_alerts                    = (known after apply)
+       web_commit_signoff_required             = (known after apply)

+       security_and_analysis (known after apply)
    }

  # github_repository.slai_whistle will be created
+ resource "github_repository" "slai_whistle" {
+       allow_auto_merge                        = false
+       allow_forking                           = (known after apply)
+       allow_merge_commit                      = true
+       allow_rebase_merge                      = true
+       allow_squash_merge                      = true
+       archived                                = false
+       default_branch                          = (known after apply)
+       delete_branch_on_merge                  = false
+       description                             = "READ-ONLY MIRROR"
+       etag                                    = (known after apply)
+       fork                                    = (known after apply)
+       full_name                               = (known after apply)
+       git_clone_url                           = (known after apply)
+       has_discussions                         = false
+       has_issues                              = false
+       has_projects                            = false
+       has_wiki                                = false
+       homepage_url                            = "https://git.cmu.dev/ScottyLabs/whistle"
+       html_url                                = (known after apply)
+       http_clone_url                          = (known after apply)
+       id                                      = (known after apply)
+       ignore_vulnerability_alerts_during_read = false
+       merge_commit_message                    = "PR_TITLE"
+       merge_commit_title                      = "MERGE_MESSAGE"
+       name                                    = "whistle"
+       node_id                                 = (known after apply)
+       primary_language                        = (known after apply)
+       private                                 = (known after apply)
+       repo_id                                 = (known after apply)
+       source_owner                            = (known after apply)
+       source_repo                             = (known after apply)
+       squash_merge_commit_message             = "COMMIT_MESSAGES"
+       squash_merge_commit_title               = "COMMIT_OR_PR_TITLE"
+       ssh_clone_url                           = (known after apply)
+       svn_url                                 = (known after apply)
+       topics                                  = (known after apply)
+       visibility                              = "public"
+       vulnerability_alerts                    = (known after apply)
+       web_commit_signoff_required             = (known after apply)

+       security_and_analysis (known after apply)
    }

  # github_repository_deploy_key.slai_slc_mirror_deploy_key will be created
+ resource "github_repository_deploy_key" "slai_slc_mirror_deploy_key" {
+       etag       = (known after apply)
+       id         = (known after apply)
+       key        = (known after apply)
+       read_only  = false
+       repository = "slc"
+       title      = "Forgejo mirror"
    }

  # github_repository_deploy_key.slai_whistle_mirror_deploy_key will be created
+ resource "github_repository_deploy_key" "slai_whistle_mirror_deploy_key" {
+       etag       = (known after apply)
+       id         = (known after apply)
+       key        = (known after apply)
+       read_only  = false
+       repository = "whistle"
+       title      = "Forgejo mirror"
    }

  # github_repository_ruleset.slai_slc_ruleset will be created
+ resource "github_repository_ruleset" "slai_slc_ruleset" {
+       enforcement = "active"
+       etag        = (known after apply)
+       id          = (known after apply)
+       name        = "Default"
+       node_id     = (known after apply)
+       repository  = "slc"
+       ruleset_id  = (known after apply)
+       target      = "branch"

+       bypass_actors {
+           actor_id    = (known after apply)
+           actor_type  = "DeployKey"
+           bypass_mode = "always"
        }

+       conditions {
+           ref_name {
+               exclude = []
+               include = [
+                   "~ALL",
                ]
            }
        }

+       rules {
+           creation                      = true
+           deletion                      = true
+           non_fast_forward              = true
+           update                        = true
+           update_allows_fetch_and_merge = false

+           pull_request {
+               allowed_merge_methods             = (known after apply)
+               dismiss_stale_reviews_on_push     = false
+               require_code_owner_review         = false
+               require_last_push_approval        = false
+               required_approving_review_count   = 1
+               required_review_thread_resolution = false
            }
        }
    }

  # github_repository_ruleset.slai_whistle_ruleset will be created
+ resource "github_repository_ruleset" "slai_whistle_ruleset" {
+       enforcement = "active"
+       etag        = (known after apply)
+       id          = (known after apply)
+       name        = "Default"
+       node_id     = (known after apply)
+       repository  = "whistle"
+       ruleset_id  = (known after apply)
+       target      = "branch"

+       bypass_actors {
+           actor_id    = (known after apply)
+           actor_type  = "DeployKey"
+           bypass_mode = "always"
        }

+       conditions {
+           ref_name {
+               exclude = []
+               include = [
+                   "~ALL",
                ]
            }
        }

+       rules {
+           creation                      = true
+           deletion                      = true
+           non_fast_forward              = true
+           update                        = true
+           update_allows_fetch_and_merge = false

+           pull_request {
+               allowed_merge_methods             = (known after apply)
+               dismiss_stale_reviews_on_push     = false
+               require_code_owner_review         = false
+               require_last_push_approval        = false
+               required_approving_review_count   = 1
+               required_review_thread_resolution = false
            }
        }
    }

  # restapi_object.slai_slc_kennel_webhook will be created
+ resource "restapi_object" "slai_slc_kennel_webhook" {
+       api_data        = (known after apply)
+       api_response    = (known after apply)
+       create_response = (known after apply)
+       data            = (sensitive value)
+       id              = (known after apply)
+       id_attribute    = "id"
+       path            = "/api/v1/repos/ScottyLabs/slc/hooks"
+       update_method   = "PATCH"
    }

  # restapi_object.slai_slc_push_mirror will be created
+ resource "restapi_object" "slai_slc_push_mirror" {
+       api_data        = (known after apply)
+       api_response    = (known after apply)
+       create_response = (known after apply)
+       data            = jsonencode(
            {
+               interval       = "8h0m0s"
+               remote_address = "git@github.com:ScottyLabs/slc.git"
+               sync_on_commit = true
+               use_ssh        = true
            }
        )
+       id              = (known after apply)
+       id_attribute    = "remote_name"
+       path            = "/api/v1/repos/ScottyLabs/slc/push_mirrors"
    }

  # restapi_object.slai_whistle_kennel_webhook will be created
+ resource "restapi_object" "slai_whistle_kennel_webhook" {
+       api_data        = (known after apply)
+       api_response    = (known after apply)
+       create_response = (known after apply)
+       data            = (sensitive value)
+       id              = (known after apply)
+       id_attribute    = "id"
+       path            = "/api/v1/repos/ScottyLabs/whistle/hooks"
+       update_method   = "PATCH"
    }

  # restapi_object.slai_whistle_push_mirror will be created
+ resource "restapi_object" "slai_whistle_push_mirror" {
+       api_data        = (known after apply)
+       api_response    = (known after apply)
+       create_response = (known after apply)
+       data            = jsonencode(
            {
+               interval       = "8h0m0s"
+               remote_address = "git@github.com:ScottyLabs/whistle.git"
+               sync_on_commit = true
+               use_ssh        = true
            }
        )
+       id              = (known after apply)
+       id_attribute    = "remote_name"
+       path            = "/api/v1/repos/ScottyLabs/whistle/push_mirrors"
    }

Plan: 20 to add, 0 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -p git
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p git
  

Plan: 20 to add, 0 to change, 0 to destroy.

---

Plan Summary

5 projects, 5 with changes, 0 with no changes, 0 failed

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for 5 projects: 1. project: `litellm` dir: `generated/tofu/litellm` workspace: `default` 1. project: `openbao` dir: `generated/tofu/openbao` workspace: `default` 1. project: `grouper` dir: `generated/tofu/grouper` workspace: `default` 1. project: `keycloak` dir: `generated/tofu/keycloak` workspace: `default` 1. project: `git` dir: `generated/tofu/git` workspace: `default` --- ### 1. project: `litellm` dir: `generated/tofu/litellm` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Finished `release` profile [optimized] target(s) in 0.15s ephemeral.vault_kv_secret_v2.litellm_master_key: Closing... ephemeral.vault_kv_secret_v2.litellm_master_key: Close complete after 0s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create OpenTofu will perform the following actions: # litellm_key.slc_dev will be created + resource "litellm_key" "slc_dev" { + aliases = (known after apply) + allowed_cache_controls = (known after apply) + allowed_passthrough_routes = (known after apply) + allowed_routes = (known after apply) + blocked = (known after apply) + budget_duration = "monthly" + config = (known after apply) + config_json = (sensitive value) + enforced_params = (known after apply) + guardrails = (known after apply) + id = (known after apply) + key = (sensitive value) + key_alias = "slc-dev" + key_wo = (write-only attribute) + max_budget = 5 + max_parallel_requests = 20 + metadata = (sensitive value) + metadata_json = (sensitive value) + model_max_budget = (known after apply) + model_rpm_limit = (known after apply) + model_tpm_limit = (known after apply) + models = (known after apply) + permissions = (known after apply) + permissions_json = (sensitive value) + prompts = (known after apply) + rpm_limit = 200 + send_invite_email = (write-only attribute) + soft_budget = (known after apply) + tags = (known after apply) + team_id = (known after apply) + tpm_limit = 1000000 } # litellm_key.slc_prod will be created + resource "litellm_key" "slc_prod" { + aliases = (known after apply) + allowed_cache_controls = (known after apply) + allowed_passthrough_routes = (known after apply) + allowed_routes = (known after apply) + blocked = (known after apply) + budget_duration = "monthly" + config = (known after apply) + config_json = (sensitive value) + enforced_params = (known after apply) + guardrails = (known after apply) + id = (known after apply) + key = (sensitive value) + key_alias = "slc-prod" + key_wo = (write-only attribute) + max_budget = 20 + max_parallel_requests = 100 + metadata = (sensitive value) + metadata_json = (sensitive value) + model_max_budget = (known after apply) + model_rpm_limit = (known after apply) + model_tpm_limit = (known after apply) + models = (known after apply) + permissions = (known after apply) + permissions_json = (sensitive value) + prompts = (known after apply) + rpm_limit = 1000 + send_invite_email = (write-only attribute) + soft_budget = (known after apply) + tags = (known after apply) + team_id = (known after apply) + tpm_limit = 4000000 } # litellm_team.slai will be created + resource "litellm_team" "slai" { + access_group_ids = (known after apply) + blocked = false + guardrails = (known after apply) + id = (known after apply) + metadata = (known after apply) + metadata_json = (sensitive value) + model_aliases = (known after apply) + model_rpm_limit = (known after apply) + model_tpm_limit = (known after apply) + models = (known after apply) + prompts = (known after apply) + tags = (known after apply) + team_alias = "slai" + team_id = (known after apply) + team_member_permissions = [] } # vault_kv_secret_v2.slc_dev_litellm_api_key will be created + resource "vault_kv_secret_v2" "slc_dev_litellm_api_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/dev/LITELLM_API_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_dev_litellm_base_url will be created + resource "vault_kv_secret_v2" "slc_dev_litellm_base_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/dev/LITELLM_BASE_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_preview_litellm_api_key will be created + resource "vault_kv_secret_v2" "slc_preview_litellm_api_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/preview/LITELLM_API_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_preview_litellm_base_url will be created + resource "vault_kv_secret_v2" "slc_preview_litellm_base_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/preview/LITELLM_BASE_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_prod_litellm_api_key will be created + resource "vault_kv_secret_v2" "slc_prod_litellm_api_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/prod/LITELLM_API_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_prod_litellm_base_url will be created + resource "vault_kv_secret_v2" "slc_prod_litellm_base_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/prod/LITELLM_BASE_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_staging_litellm_api_key will be created + resource "vault_kv_secret_v2" "slc_staging_litellm_api_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/staging/LITELLM_API_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.slc_staging_litellm_base_url will be created + resource "vault_kv_secret_v2" "slc_staging_litellm_base_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/slc/staging/LITELLM_BASE_URL" + path = (known after apply) + custom_metadata (known after apply) } Plan: 11 to add, 0 to change, 0 to destroy. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Fgovernance%252Fgenerated%252Ftofu%252Flitellm%252Fdefault%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` Plan: 11 to add, 0 to change, 0 to destroy. --- ### 2. project: `openbao` dir: `generated/tofu/openbao` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Finished `release` profile [optimized] target(s) in 0.11s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create OpenTofu will perform the following actions: # vault_identity_entity.slc_ci will be created + resource "vault_identity_entity" "slc_ci" { + external_policies = false + id = (known after apply) + name = "ci-slc" + policies = [ + "ci-slc", ] } # vault_identity_entity.whistle_ci will be created + resource "vault_identity_entity" "whistle_ci" { + external_policies = false + id = (known after apply) + name = "ci-whistle" + policies = [ + "ci-whistle", ] } # vault_identity_entity_alias.slc_ci will be created + resource "vault_identity_entity_alias" "slc_ci" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_jwt_d7c2ba6c" + name = "ScottyLabs/slc" } # vault_identity_entity_alias.whistle_ci will be created + resource "vault_identity_entity_alias" "whistle_ci" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_jwt_d7c2ba6c" + name = "ScottyLabs/whistle" } # vault_identity_group.slc_admins will be created + resource "vault_identity_group" "slc_admins" { + external_member_entity_ids = false + external_member_group_ids = false + external_policies = false + id = (known after apply) + name = "slc-admins" + policies = [ + "slc-prod", ] + type = "external" } # vault_identity_group.slc_members will be created + resource "vault_identity_group" "slc_members" { + external_member_entity_ids = false + external_member_group_ids = false + external_policies = false + id = (known after apply) + name = "slc-members" + policies = [ + "slc-dev", ] + type = "external" } # vault_identity_group.whistle_admins will be created + resource "vault_identity_group" "whistle_admins" { + external_member_entity_ids = false + external_member_group_ids = false + external_policies = false + id = (known after apply) + name = "whistle-admins" + policies = [ + "whistle-prod", ] + type = "external" } # vault_identity_group.whistle_members will be created + resource "vault_identity_group" "whistle_members" { + external_member_entity_ids = false + external_member_group_ids = false + external_policies = false + id = (known after apply) + name = "whistle-members" + policies = [ + "whistle-dev", ] + type = "external" } # vault_identity_group_alias.slc_admins will be created + resource "vault_identity_group_alias" "slc_admins" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_oidc_375ac979" + name = "/projects/slc/admins" } # vault_identity_group_alias.slc_members will be created + resource "vault_identity_group_alias" "slc_members" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_oidc_375ac979" + name = "/projects/slc" } # vault_identity_group_alias.whistle_admins will be created + resource "vault_identity_group_alias" "whistle_admins" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_oidc_375ac979" + name = "/projects/whistle/admins" } # vault_identity_group_alias.whistle_members will be created + resource "vault_identity_group_alias" "whistle_members" { + canonical_id = (known after apply) + id = (known after apply) + mount_accessor = "auth_oidc_375ac979" + name = "/projects/whistle" } # vault_policy.slc_ci will be created + resource "vault_policy" "slc_ci" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "ci-slc" + policy = jsonencode( { + path = { + "secret/data/secretspec/slc/ci/*" = { + capabilities = [ + "read", ] } } } ) } # vault_policy.slc_dev will be created + resource "vault_policy" "slc_dev" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "slc-dev" + policy = jsonencode( { + path = { + "secret/data/secretspec/slc/dev/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/slc/preview/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/metadata/secretspec" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/slc" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/slc/dev/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/slc/preview/*" = { + capabilities = [ + "list", + "read", + "delete", ] } } } ) } # vault_policy.slc_prod will be created + resource "vault_policy" "slc_prod" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "slc-prod" + policy = jsonencode( { + path = { + "secret/data/secretspec/slc/ci/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/slc/prod/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/slc/staging/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/metadata/secretspec" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/slc" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/slc/ci/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/slc/prod/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/slc/staging/*" = { + capabilities = [ + "list", + "read", + "delete", ] } } } ) } # vault_policy.whistle_ci will be created + resource "vault_policy" "whistle_ci" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "ci-whistle" + policy = jsonencode( { + path = { + "secret/data/secretspec/whistle/ci/*" = { + capabilities = [ + "read", ] } } } ) } # vault_policy.whistle_dev will be created + resource "vault_policy" "whistle_dev" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "whistle-dev" + policy = jsonencode( { + path = { + "secret/data/secretspec/whistle/dev/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/whistle/preview/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/metadata/secretspec" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/whistle" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/whistle/dev/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/whistle/preview/*" = { + capabilities = [ + "list", + "read", + "delete", ] } } } ) } # vault_policy.whistle_prod will be created + resource "vault_policy" "whistle_prod" { + allow_overwrite = (known after apply) + id = (known after apply) + name = "whistle-prod" + policy = jsonencode( { + path = { + "secret/data/secretspec/whistle/ci/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/whistle/prod/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/data/secretspec/whistle/staging/*" = { + capabilities = [ + "create", + "read", + "update", + "patch", + "delete", + "list", ] } + "secret/metadata/secretspec" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/whistle" = { + capabilities = [ + "list", ] } + "secret/metadata/secretspec/whistle/ci/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/whistle/prod/*" = { + capabilities = [ + "list", + "read", + "delete", ] } + "secret/metadata/secretspec/whistle/staging/*" = { + capabilities = [ + "list", + "read", + "delete", ] } } } ) } Plan: 18 to add, 0 to change, 0 to destroy. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Fgovernance%252Fgenerated%252Ftofu%252Fopenbao%252Fdefault%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` Plan: 18 to add, 0 to change, 0 to destroy. --- ### 3. project: `grouper` dir: `generated/tofu/grouper` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Finished `release` profile [optimized] target(s) in 0.14s ephemeral.vault_kv_secret_v2.grouper_password: Closing... ephemeral.vault_kv_secret_v2.grouper_password: Close complete after 0s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create ! update in-place (current -> planned) OpenTofu will perform the following actions: # grouper_folder.ref__committees__tech__teams__slc will be created + resource "grouper_folder" "ref__committees__tech__teams__slc" { + display_extension = "ScottyLabs Code (SLC)" + id = (known after apply) + name = "Community:Department:ScottyLabs:ref:committees:tech:teams:slc" } # grouper_folder.ref__committees__tech__teams__whistle will be created + resource "grouper_folder" "ref__committees__tech__teams__whistle" { + display_extension = "Whistle" + id = (known after apply) + name = "Community:Department:ScottyLabs:ref:committees:tech:teams:whistle" } # grouper_group.ref__committees__tech__teams__slc__general will be created + resource "grouper_group" "ref__committees__tech__teams__slc__general" { + display_extension = "general" + id = (known after apply) + name = "Community:Department:ScottyLabs:ref:committees:tech:teams:slc:general" } # grouper_group.ref__committees__tech__teams__slc__members will be created + resource "grouper_group" "ref__committees__tech__teams__slc__members" { + display_extension = "members" + id = (known after apply) + name = "Community:Department:ScottyLabs:ref:committees:tech:teams:slc:members" } # grouper_group.ref__committees__tech__teams__whistle__general will be created + resource "grouper_group" "ref__committees__tech__teams__whistle__general" { + display_extension = "general" + id = (known after apply) + name = "Community:Department:ScottyLabs:ref:committees:tech:teams:whistle:general" } # grouper_group.ref__committees__tech__teams__whistle__members will be created + resource "grouper_group" "ref__committees__tech__teams__whistle__members" { + display_extension = "members" + id = (known after apply) + name = "Community:Department:ScottyLabs:ref:committees:tech:teams:whistle:members" } # grouper_group_members.google__sl_exec__Managers_Include will be updated in-place ! resource "grouper_group_members" "google__sl_exec__Managers_Include" { ! subjects = { - "ldap" = [ - "apallati", ] -> null } # (3 unchanged attributes hidden) } # grouper_group_members.ref__committees__tech__members will be updated in-place ! resource "grouper_group_members" "ref__committees__tech__members" { ! groups = [ + (known after apply), + (known after apply), # (37 unchanged elements hidden) ] # (3 unchanged attributes hidden) } # grouper_group_members.ref__committees__tech__teams__slc__general will be created + resource "grouper_group_members" "ref__committees__tech__teams__slc__general" { + group = (known after apply) + groups = [] + scheduled = [] + subjects = { + "ldap" = [ + "aaronz2", + "aasingh", + "abthakka", + "adamzhu", + "ajz2", + "akhanal2", + "alvinngo", + "andywu2", + "angelaji", + "angelayu", + "bbchou", + "chloezha", + "dfz2", + "egadde", + "elliott3", + "elvinz", + "hcw2", + "ikunwar", + "iychen", + "izb", + "jcz2", + "jeffl2", + "jgaspard", + "jiayingz", + "jliao2", + "jocelyn5", + "johnsonj", + "jsong5", + "jyuan4", + "keviny2", + "kgawandi", + "lmalipat", + "luluj", + "mcai5", + "mday3", + "michell9", + "mofany", + "nakshatg", + "niyelh", + "peteryao", + "qge", + "qizheny", + "rijulm", + "rjfernan", + "rzhu3", + "saanvik", + "saic2", + "sarahhuo", + "sarahzho", + "spola2", + "sskambha", + "vihank", + "vishnup", + "walterh", + "wchee", + "yinshanc", + "youyid", + "yuxizhen", + "zhaojiel", + "zhengyu4", ] } } # grouper_group_members.ref__committees__tech__teams__slc__members will be created + resource "grouper_group_members" "ref__committees__tech__teams__slc__members" { + group = (known after apply) + groups = [ + "3f2ff15f03a14572a48202101796263d", + (known after apply), ] + scheduled = [] + subjects = {} } # grouper_group_members.ref__committees__tech__teams__whistle__general will be created + resource "grouper_group_members" "ref__committees__tech__teams__whistle__general" { + group = (known after apply) + groups = [] + scheduled = [] + subjects = { + "ldap" = [ + "aaronz2", + "aasingh", + "abthakka", + "adamzhu", + "ajz2", + "akhanal2", + "alvinngo", + "andywu2", + "angelaji", + "angelayu", + "bbchou", + "chloezha", + "dfz2", + "egadde", + "elliott3", + "elvinz", + "hcw2", + "ikunwar", + "iychen", + "izb", + "jcz2", + "jeffl2", + "jgaspard", + "jiayingz", + "jliao2", + "jocelyn5", + "johnsonj", + "jsong5", + "jyuan4", + "keviny2", + "kgawandi", + "lmalipat", + "luluj", + "mcai5", + "mday3", + "michell9", + "mofany", + "nakshatg", + "niyelh", + "peteryao", + "qge", + "qizheny", + "rijulm", + "rjfernan", + "rzhu3", + "saanvik", + "saic2", + "sarahhuo", + "sarahzho", + "spola2", + "sskambha", + "vihank", + "vishnup", + "walterh", + "wchee", + "yinshanc", + "youyid", + "yuxizhen", + "zhaojiel", + "zhengyu4", ] } } # grouper_group_members.ref__committees__tech__teams__whistle__members will be created + resource "grouper_group_members" "ref__committees__tech__teams__whistle__members" { + group = (known after apply) + groups = [ + "3f2ff15f03a14572a48202101796263d", + (known after apply), ] + scheduled = [] + subjects = {} } Plan: 10 to add, 2 to change, 0 to destroy. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p grouper ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Fgovernance%252Fgenerated%252Ftofu%252Fgrouper%252Fdefault%252Fgrouper) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p grouper ``` Plan: 10 to add, 2 to change, 0 to destroy. --- ### 4. project: `keycloak` dir: `generated/tofu/keycloak` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on build directory Finished `release` profile [optimized] target(s) in 0.12s data.external.identities: Still reading... [10s elapsed] data.external.identities: Still reading... [20s elapsed] data.external.identities: Still reading... [30s elapsed] data.external.identities: Read complete after 31s [id=-] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create OpenTofu will perform the following actions: # keycloak_group.project_slai_slc will be created + resource "keycloak_group" "project_slai_slc" { + id = (known after apply) + name = "slc" + parent_id = "9e6890c8-50a0-4b82-86b9-91791fffac25" + path = (known after apply) + realm_id = "scottylabs" } # keycloak_group.project_slai_slc_admins will be created + resource "keycloak_group" "project_slai_slc_admins" { + id = (known after apply) + name = "admins" + parent_id = (known after apply) + path = (known after apply) + realm_id = "scottylabs" } # keycloak_group.project_slai_whistle will be created + resource "keycloak_group" "project_slai_whistle" { + id = (known after apply) + name = "whistle" + parent_id = "9e6890c8-50a0-4b82-86b9-91791fffac25" + path = (known after apply) + realm_id = "scottylabs" } # keycloak_group.project_slai_whistle_admins will be created + resource "keycloak_group" "project_slai_whistle_admins" { + id = (known after apply) + name = "admins" + parent_id = (known after apply) + path = (known after apply) + realm_id = "scottylabs" } # keycloak_group_memberships.project_slai_slc will be created + resource "keycloak_group_memberships" "project_slai_slc" { + group_id = (known after apply) + id = (known after apply) + members = [ + "aaronz2", + "aasingh", + "abthakka", + "adamzhu", + "ajz2", + "akhanal2", + "alvinngo", + "andywu2", + "angelaji", + "angelayu", + "apallati", + "bbchou", + "chloezha", + "dfz2", + "egadde", + "elliott3", + "elvinz", + "hcw2", + "ikunwar", + "iychen", + "izb", + "jcz2", + "jeffl2", + "jessec2", + "jgaspard", + "jiayingz", + "jiyas", + "jliao2", + "jocelyn5", + "johnsonj", + "jsong5", + "jyuan4", + "keviny2", + "kgawandi", + "krishsax", + "lmalipat", + "luluj", + "mcai5", + "mday3", + "michell9", + "mofany", + "nakshatg", + "niyelh", + "peteryao", + "qge", + "qizheny", + "rijulm", + "rjfernan", + "rzhu3", + "saanvik", + "saic2", + "sarahhuo", + "sarahzho", + "spola2", + "sskambha", + "vihank", + "vishnup", + "walterh", + "wchee", + "yinshanc", + "youyid", + "yuxizhen", + "zhaojiel", + "zhengyu4", ] + realm_id = "scottylabs" } # keycloak_group_memberships.project_slai_slc_admins will be created + resource "keycloak_group_memberships" "project_slai_slc_admins" { + group_id = (known after apply) + id = (known after apply) + members = [ + "apallati", + "jessec2", + "jiyas", + "krishsax", ] + realm_id = "scottylabs" } # keycloak_group_memberships.project_slai_whistle will be created + resource "keycloak_group_memberships" "project_slai_whistle" { + group_id = (known after apply) + id = (known after apply) + members = [ + "aaronz2", + "aasingh", + "abthakka", + "adamzhu", + "ajz2", + "akhanal2", + "alvinngo", + "andywu2", + "angelaji", + "angelayu", + "apallati", + "bbchou", + "chloezha", + "dfz2", + "egadde", + "elliott3", + "elvinz", + "hcw2", + "ikunwar", + "iychen", + "izb", + "jcz2", + "jeffl2", + "jessec2", + "jgaspard", + "jiayingz", + "jiyas", + "jliao2", + "jocelyn5", + "johnsonj", + "jsong5", + "jyuan4", + "keviny2", + "kgawandi", + "krishsax", + "lmalipat", + "luluj", + "mcai5", + "mday3", + "michell9", + "mofany", + "nakshatg", + "niyelh", + "peteryao", + "qge", + "qizheny", + "rijulm", + "rjfernan", + "rzhu3", + "saanvik", + "saic2", + "sarahhuo", + "sarahzho", + "spola2", + "sskambha", + "vihank", + "vishnup", + "walterh", + "wchee", + "yinshanc", + "youyid", + "yuxizhen", + "zhaojiel", + "zhengyu4", ] + realm_id = "scottylabs" } # keycloak_group_memberships.project_slai_whistle_admins will be created + resource "keycloak_group_memberships" "project_slai_whistle_admins" { + group_id = (known after apply) + id = (known after apply) + members = [ + "apallati", + "jessec2", + "jiyas", + "krishsax", ] + realm_id = "scottylabs" } Plan: 8 to add, 0 to change, 0 to destroy. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Fgovernance%252Fgenerated%252Ftofu%252Fkeycloak%252Fdefault%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` Plan: 8 to add, 0 to change, 0 to destroy. --- ### 5. project: `git` dir: `generated/tofu/git` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Finished `release` profile [optimized] target(s) in 0.15s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create OpenTofu will perform the following actions: # forgejo_branch_protection.slai_slc_default_branch will be created + resource "forgejo_branch_protection" "slai_slc_default_branch" { + approvals_whitelist_teams = [ + "slai-leads", ] + approvals_whitelist_usernames = [] + block_on_official_review_requests = false + block_on_outdated_branch = true + block_on_rejected_reviews = true + branch_name = "main" + dismiss_stale_approvals = false + enable_approvals_whitelist = true + enable_merge_whitelist = true + enable_push = true + enable_push_whitelist = true + enable_status_check = false + merge_whitelist_teams = [ + "slai-leads", ] + merge_whitelist_usernames = [] + push_whitelist_deploy_keys = false + push_whitelist_teams = [ + "slai-leads", ] + push_whitelist_usernames = [] + repository_id = (known after apply) + require_signed_commits = false + required_approvals = 1 + status_check_contexts = [] } # forgejo_branch_protection.slai_whistle_default_branch will be created + resource "forgejo_branch_protection" "slai_whistle_default_branch" { + approvals_whitelist_teams = [ + "slai-leads", ] + approvals_whitelist_usernames = [] + block_on_official_review_requests = false + block_on_outdated_branch = true + block_on_rejected_reviews = true + branch_name = "main" + dismiss_stale_approvals = false + enable_approvals_whitelist = true + enable_merge_whitelist = true + enable_push = true + enable_push_whitelist = true + enable_status_check = false + merge_whitelist_teams = [ + "slai-leads", ] + merge_whitelist_usernames = [] + push_whitelist_deploy_keys = false + push_whitelist_teams = [ + "slai-leads", ] + push_whitelist_usernames = [] + repository_id = (known after apply) + require_signed_commits = false + required_approvals = 1 + status_check_contexts = [] } # forgejo_repository.slai_slc will be created + resource "forgejo_repository" "slai_slc" { + allow_fast_forward_only_merge = true + allow_manual_merge = false + allow_merge_commits = false + allow_rebase = true + allow_rebase_explicit = false + allow_rebase_update = true + allow_squash_merge = true + archive_on_destroy = false + archived = false + auto_init = true + autodetect_manual_merge = false + avatar_url = (known after apply) + clone_addr = (known after apply) + clone_url = (known after apply) + created_at = (known after apply) + default_allow_maintainer_edit = true + default_branch = "main" + default_delete_branch_after_merge = true + default_merge_style = "fast-forward-only" + default_update_style = "rebase" + description = "Agentic Coding Agent" + empty = (known after apply) + enable_prune = false + external_tracker = (known after apply) + external_wiki = (known after apply) + fork = (known after apply) + forks_count = (known after apply) + full_name = (known after apply) + globally_editable_wiki = false + has_actions = true + has_issues = true + has_packages = true + has_projects = true + has_pull_requests = true + has_releases = true + has_wiki = true + html_url = (known after apply) + id = (known after apply) + ignore_whitespace_conflicts = false + internal = (known after apply) + internal_tracker = (known after apply) + labels = false + lfs = false + milestones = false + mirror = false + mirror_interval = (known after apply) + mirror_updated = (known after apply) + name = "slc" + open_issues_count = (known after apply) + open_pr_counter = (known after apply) + owner = "ScottyLabs" + parent_id = (known after apply) + permissions = (known after apply) + private = false + release_counter = (known after apply) + size = (known after apply) + ssh_url = (known after apply) + stars_count = (known after apply) + template = false + topics = [ + "nixbot", ] + trust_model = "default" + updated_at = (known after apply) + watchers_count = (known after apply) } # forgejo_repository.slai_whistle will be created + resource "forgejo_repository" "slai_whistle" { + allow_fast_forward_only_merge = true + allow_manual_merge = false + allow_merge_commits = false + allow_rebase = true + allow_rebase_explicit = false + allow_rebase_update = true + allow_squash_merge = true + archive_on_destroy = false + archived = false + auto_init = true + autodetect_manual_merge = false + avatar_url = (known after apply) + clone_addr = (known after apply) + clone_url = (known after apply) + created_at = (known after apply) + default_allow_maintainer_edit = true + default_branch = "main" + default_delete_branch_after_merge = true + default_merge_style = "fast-forward-only" + default_update_style = "rebase" + description = "Summarization Platform for Nova" + empty = (known after apply) + enable_prune = false + external_tracker = (known after apply) + external_wiki = (known after apply) + fork = (known after apply) + forks_count = (known after apply) + full_name = (known after apply) + globally_editable_wiki = false + has_actions = true + has_issues = true + has_packages = true + has_projects = true + has_pull_requests = true + has_releases = true + has_wiki = true + html_url = (known after apply) + id = (known after apply) + ignore_whitespace_conflicts = false + internal = (known after apply) + internal_tracker = (known after apply) + labels = false + lfs = false + milestones = false + mirror = false + mirror_interval = (known after apply) + mirror_updated = (known after apply) + name = "whistle" + open_issues_count = (known after apply) + open_pr_counter = (known after apply) + owner = "ScottyLabs" + parent_id = (known after apply) + permissions = (known after apply) + private = false + release_counter = (known after apply) + size = (known after apply) + ssh_url = (known after apply) + stars_count = (known after apply) + template = false + topics = [ + "nixbot", ] + trust_model = "default" + updated_at = (known after apply) + watchers_count = (known after apply) } # forgejo_team_repository.slai_leads_slc will be created + resource "forgejo_team_repository" "slai_leads_slc" { + id = (known after apply) + repository_id = (known after apply) + team_id = 74 } # forgejo_team_repository.slai_leads_whistle will be created + resource "forgejo_team_repository" "slai_leads_whistle" { + id = (known after apply) + repository_id = (known after apply) + team_id = 74 } # forgejo_team_repository.slai_slc will be created + resource "forgejo_team_repository" "slai_slc" { + id = (known after apply) + repository_id = (known after apply) + team_id = 8 } # forgejo_team_repository.slai_whistle will be created + resource "forgejo_team_repository" "slai_whistle" { + id = (known after apply) + repository_id = (known after apply) + team_id = 8 } # github_actions_repository_permissions.slai_slc_actions will be created + resource "github_actions_repository_permissions" "slai_slc_actions" { + enabled = false + id = (known after apply) + repository = "slc" + sha_pinning_required = (known after apply) } # github_actions_repository_permissions.slai_whistle_actions will be created + resource "github_actions_repository_permissions" "slai_whistle_actions" { + enabled = false + id = (known after apply) + repository = "whistle" + sha_pinning_required = (known after apply) } # github_repository.slai_slc will be created + resource "github_repository" "slai_slc" { + allow_auto_merge = false + allow_forking = (known after apply) + allow_merge_commit = true + allow_rebase_merge = true + allow_squash_merge = true + archived = false + default_branch = (known after apply) + delete_branch_on_merge = false + description = "READ-ONLY MIRROR" + etag = (known after apply) + fork = (known after apply) + full_name = (known after apply) + git_clone_url = (known after apply) + has_discussions = false + has_issues = false + has_projects = false + has_wiki = false + homepage_url = "https://git.cmu.dev/ScottyLabs/slc" + html_url = (known after apply) + http_clone_url = (known after apply) + id = (known after apply) + ignore_vulnerability_alerts_during_read = false + merge_commit_message = "PR_TITLE" + merge_commit_title = "MERGE_MESSAGE" + name = "slc" + node_id = (known after apply) + primary_language = (known after apply) + private = (known after apply) + repo_id = (known after apply) + source_owner = (known after apply) + source_repo = (known after apply) + squash_merge_commit_message = "COMMIT_MESSAGES" + squash_merge_commit_title = "COMMIT_OR_PR_TITLE" + ssh_clone_url = (known after apply) + svn_url = (known after apply) + topics = (known after apply) + visibility = "public" + vulnerability_alerts = (known after apply) + web_commit_signoff_required = (known after apply) + security_and_analysis (known after apply) } # github_repository.slai_whistle will be created + resource "github_repository" "slai_whistle" { + allow_auto_merge = false + allow_forking = (known after apply) + allow_merge_commit = true + allow_rebase_merge = true + allow_squash_merge = true + archived = false + default_branch = (known after apply) + delete_branch_on_merge = false + description = "READ-ONLY MIRROR" + etag = (known after apply) + fork = (known after apply) + full_name = (known after apply) + git_clone_url = (known after apply) + has_discussions = false + has_issues = false + has_projects = false + has_wiki = false + homepage_url = "https://git.cmu.dev/ScottyLabs/whistle" + html_url = (known after apply) + http_clone_url = (known after apply) + id = (known after apply) + ignore_vulnerability_alerts_during_read = false + merge_commit_message = "PR_TITLE" + merge_commit_title = "MERGE_MESSAGE" + name = "whistle" + node_id = (known after apply) + primary_language = (known after apply) + private = (known after apply) + repo_id = (known after apply) + source_owner = (known after apply) + source_repo = (known after apply) + squash_merge_commit_message = "COMMIT_MESSAGES" + squash_merge_commit_title = "COMMIT_OR_PR_TITLE" + ssh_clone_url = (known after apply) + svn_url = (known after apply) + topics = (known after apply) + visibility = "public" + vulnerability_alerts = (known after apply) + web_commit_signoff_required = (known after apply) + security_and_analysis (known after apply) } # github_repository_deploy_key.slai_slc_mirror_deploy_key will be created + resource "github_repository_deploy_key" "slai_slc_mirror_deploy_key" { + etag = (known after apply) + id = (known after apply) + key = (known after apply) + read_only = false + repository = "slc" + title = "Forgejo mirror" } # github_repository_deploy_key.slai_whistle_mirror_deploy_key will be created + resource "github_repository_deploy_key" "slai_whistle_mirror_deploy_key" { + etag = (known after apply) + id = (known after apply) + key = (known after apply) + read_only = false + repository = "whistle" + title = "Forgejo mirror" } # github_repository_ruleset.slai_slc_ruleset will be created + resource "github_repository_ruleset" "slai_slc_ruleset" { + enforcement = "active" + etag = (known after apply) + id = (known after apply) + name = "Default" + node_id = (known after apply) + repository = "slc" + ruleset_id = (known after apply) + target = "branch" + bypass_actors { + actor_id = (known after apply) + actor_type = "DeployKey" + bypass_mode = "always" } + conditions { + ref_name { + exclude = [] + include = [ + "~ALL", ] } } + rules { + creation = true + deletion = true + non_fast_forward = true + update = true + update_allows_fetch_and_merge = false + pull_request { + allowed_merge_methods = (known after apply) + dismiss_stale_reviews_on_push = false + require_code_owner_review = false + require_last_push_approval = false + required_approving_review_count = 1 + required_review_thread_resolution = false } } } # github_repository_ruleset.slai_whistle_ruleset will be created + resource "github_repository_ruleset" "slai_whistle_ruleset" { + enforcement = "active" + etag = (known after apply) + id = (known after apply) + name = "Default" + node_id = (known after apply) + repository = "whistle" + ruleset_id = (known after apply) + target = "branch" + bypass_actors { + actor_id = (known after apply) + actor_type = "DeployKey" + bypass_mode = "always" } + conditions { + ref_name { + exclude = [] + include = [ + "~ALL", ] } } + rules { + creation = true + deletion = true + non_fast_forward = true + update = true + update_allows_fetch_and_merge = false + pull_request { + allowed_merge_methods = (known after apply) + dismiss_stale_reviews_on_push = false + require_code_owner_review = false + require_last_push_approval = false + required_approving_review_count = 1 + required_review_thread_resolution = false } } } # restapi_object.slai_slc_kennel_webhook will be created + resource "restapi_object" "slai_slc_kennel_webhook" { + api_data = (known after apply) + api_response = (known after apply) + create_response = (known after apply) + data = (sensitive value) + id = (known after apply) + id_attribute = "id" + path = "/api/v1/repos/ScottyLabs/slc/hooks" + update_method = "PATCH" } # restapi_object.slai_slc_push_mirror will be created + resource "restapi_object" "slai_slc_push_mirror" { + api_data = (known after apply) + api_response = (known after apply) + create_response = (known after apply) + data = jsonencode( { + interval = "8h0m0s" + remote_address = "git@github.com:ScottyLabs/slc.git" + sync_on_commit = true + use_ssh = true } ) + id = (known after apply) + id_attribute = "remote_name" + path = "/api/v1/repos/ScottyLabs/slc/push_mirrors" } # restapi_object.slai_whistle_kennel_webhook will be created + resource "restapi_object" "slai_whistle_kennel_webhook" { + api_data = (known after apply) + api_response = (known after apply) + create_response = (known after apply) + data = (sensitive value) + id = (known after apply) + id_attribute = "id" + path = "/api/v1/repos/ScottyLabs/whistle/hooks" + update_method = "PATCH" } # restapi_object.slai_whistle_push_mirror will be created + resource "restapi_object" "slai_whistle_push_mirror" { + api_data = (known after apply) + api_response = (known after apply) + create_response = (known after apply) + data = jsonencode( { + interval = "8h0m0s" + remote_address = "git@github.com:ScottyLabs/whistle.git" + sync_on_commit = true + use_ssh = true } ) + id = (known after apply) + id_attribute = "remote_name" + path = "/api/v1/repos/ScottyLabs/whistle/push_mirrors" } Plan: 20 to add, 0 to change, 0 to destroy. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p git ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Fgovernance%252Fgenerated%252Ftofu%252Fgit%252Fdefault%252Fgit) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p git ``` Plan: 20 to add, 0 to change, 0 to destroy. --- ### Plan Summary 5 projects, 5 with changes, 0 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

thesuperRL commented 2026-10-31 04:54:30 +00:00

Author

Owner

Copy link

atlantis apply

atlantis apply

thesuperRL commented 2026-10-31 04:54:57 +00:00

Author

Owner

Copy link

supersedes #563

supersedes #563

scottylabs-bot commented 2026-10-31 04:56:26 +00:00

Owner

Copy link

Ran Apply for 5 projects:

1. project: openbao dir: generated/tofu/openbao workspace: default
2. project: litellm dir: generated/tofu/litellm workspace: default
3. project: grouper dir: generated/tofu/grouper workspace: default
4. project: git dir: generated/tofu/git workspace: default
5. project: keycloak dir: generated/tofu/keycloak workspace: default

---

1. project: openbao dir: generated/tofu/openbao workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on shared package cache
    Blocking waiting for file lock on build directory
    Finished `release` profile [optimized] target(s) in 0.19s

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_identity_group.slc_admins: Creating...
vault_identity_group.slc_members: Creating...
vault_policy.whistle_dev: Creating...
vault_policy.slc_ci: Creating...
vault_policy.slc_prod: Creating...
vault_identity_group.whistle_admins: Creating...
vault_policy.whistle_prod: Creating...
vault_policy.whistle_ci: Creating...
vault_policy.slc_dev: Creating...
vault_identity_group.whistle_members: Creating...
vault_identity_group.whistle_admins: Creation complete after 0s [id=aeb7d42c-04cb-acd0-129e-8578079fae8e]
vault_identity_group_alias.whistle_admins: Creating...
vault_identity_group.slc_admins: Creation complete after 0s [id=64676ee8-e005-5951-3438-281b95001f3e]
vault_identity_group_alias.slc_admins: Creating...
vault_identity_group.whistle_members: Creation complete after 0s [id=0c1c9b77-fe67-f7b1-eeba-a92ef39030c8]
vault_identity_group_alias.whistle_members: Creating...
vault_identity_group.slc_members: Creation complete after 0s [id=b8f2267e-856c-7c70-8a7e-710b7bcfb3f0]
vault_identity_group_alias.slc_members: Creating...
vault_policy.slc_dev: Creation complete after 0s [id=slc-dev]
vault_policy.whistle_dev: Creation complete after 0s [id=whistle-dev]
vault_policy.whistle_prod: Creation complete after 0s [id=whistle-prod]
vault_policy.slc_ci: Creation complete after 0s [id=ci-slc]
vault_identity_entity.slc_ci: Creating...
vault_policy.slc_prod: Creation complete after 0s [id=slc-prod]
vault_policy.whistle_ci: Creation complete after 0s [id=ci-whistle]
vault_identity_entity.whistle_ci: Creating...
vault_identity_group_alias.whistle_admins: Creation complete after 0s [id=ac151026-da1c-8fd9-e299-b58930cdc3f2]
vault_identity_entity.slc_ci: Creation complete after 0s [id=88be70de-6797-4ded-0f69-2420a45b9c0e]
vault_identity_entity_alias.slc_ci: Creating...
vault_identity_entity.whistle_ci: Creation complete after 0s [id=464278ce-5cdd-93ea-0d5b-d1e3e1cec5c8]
vault_identity_entity_alias.whistle_ci: Creating...
vault_identity_group_alias.slc_admins: Creation complete after 0s [id=7656a2df-c98b-5ea2-66f2-78e812fa21d5]
vault_identity_group_alias.whistle_members: Creation complete after 0s [id=f6a52e38-628f-1c6e-e1be-2750ed15395b]
vault_identity_entity_alias.slc_ci: Creation complete after 0s [id=2979aa44-d58a-15f2-934c-0cf71a25590a]
vault_identity_group_alias.slc_members: Creation complete after 0s [id=43ade594-74b4-2852-e9dc-94e4a0734208]
vault_identity_entity_alias.whistle_ci: Creation complete after 0s [id=58ebcc10-3f88-2030-f747-1a61e2fffdc6]

Apply complete! Resources: 18 added, 0 changed, 0 destroyed.

---

2. project: litellm dir: generated/tofu/litellm workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `release` profile [optimized] target(s) in 0.19s

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.litellm_master_key: Opening...
vault_kv_secret_v2.slc_staging_litellm_base_url: Creating...
vault_kv_secret_v2.slc_dev_litellm_base_url: Creating...
vault_kv_secret_v2.slc_prod_litellm_base_url: Creating...
vault_kv_secret_v2.slc_preview_litellm_base_url: Creating...
ephemeral.vault_kv_secret_v2.litellm_master_key: Open complete after 0s
litellm_team.slai: Creating...
vault_kv_secret_v2.slc_preview_litellm_base_url: Creation complete after 0s [id=secret/data/secretspec/slc/preview/LITELLM_BASE_URL]
vault_kv_secret_v2.slc_staging_litellm_base_url: Creation complete after 0s [id=secret/data/secretspec/slc/staging/LITELLM_BASE_URL]
vault_kv_secret_v2.slc_dev_litellm_base_url: Creation complete after 0s [id=secret/data/secretspec/slc/dev/LITELLM_BASE_URL]
vault_kv_secret_v2.slc_prod_litellm_base_url: Creation complete after 0s [id=secret/data/secretspec/slc/prod/LITELLM_BASE_URL]
litellm_team.slai: Creation complete after 0s [id=b1850e33-518d-45a0-bbb0-f85ecf2edc0c]
litellm_key.slc_prod: Creating...
litellm_key.slc_dev: Creating...
litellm_key.slc_prod: Creation complete after 0s [id=sha256:6ed8a939741cf34c2107acea16de67a777b24375a33fc36cefd5a2b24b6b617f]
vault_kv_secret_v2.slc_prod_litellm_api_key: Creating...
litellm_key.slc_dev: Creation complete after 0s [id=sha256:7182a3e199056729c1052e6b6c1063230ce6ab5537aae65d630124ab95a5cebd]
vault_kv_secret_v2.slc_dev_litellm_api_key: Creating...
vault_kv_secret_v2.slc_staging_litellm_api_key: Creating...
vault_kv_secret_v2.slc_preview_litellm_api_key: Creating...
vault_kv_secret_v2.slc_prod_litellm_api_key: Creation complete after 0s [id=secret/data/secretspec/slc/prod/LITELLM_API_KEY]
vault_kv_secret_v2.slc_dev_litellm_api_key: Creation complete after 1s [id=secret/data/secretspec/slc/dev/LITELLM_API_KEY]
vault_kv_secret_v2.slc_preview_litellm_api_key: Creation complete after 1s [id=secret/data/secretspec/slc/preview/LITELLM_API_KEY]
vault_kv_secret_v2.slc_staging_litellm_api_key: Creation complete after 1s [id=secret/data/secretspec/slc/staging/LITELLM_API_KEY]
ephemeral.vault_kv_secret_v2.litellm_master_key: Closing...
ephemeral.vault_kv_secret_v2.litellm_master_key: Close complete after 0s

Apply complete! Resources: 11 added, 0 changed, 0 destroyed.

---

3. project: grouper dir: generated/tofu/grouper workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on build directory
    Finished `release` profile [optimized] target(s) in 0.20s

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.grouper_password: Opening...
ephemeral.vault_kv_secret_v2.grouper_password: Open complete after 0s
grouper_group_members.google__sl_exec__Managers_Include: Modifying...
grouper_folder.ref__committees__tech__teams__whistle: Creating...
grouper_folder.ref__committees__tech__teams__slc: Creating...
grouper_group_members.google__sl_exec__Managers_Include: Modifications complete after 2s
grouper_folder.ref__committees__tech__teams__slc: Creation complete after 3s [id=466d443e650141d0b8c5c0a04ec7e6ed]
grouper_group.ref__committees__tech__teams__slc__members: Creating...
grouper_group.ref__committees__tech__teams__slc__general: Creating...
grouper_folder.ref__committees__tech__teams__whistle: Creation complete after 3s [id=d5a9b7081dba4a02aad0f8f32e0181b2]
grouper_group.ref__committees__tech__teams__whistle__general: Creating...
grouper_group.ref__committees__tech__teams__whistle__members: Creating...
grouper_group.ref__committees__tech__teams__whistle__general: Creation complete after 1s [id=03d9723ec7f147dbab44311d292c9f1a]
grouper_group.ref__committees__tech__teams__slc__general: Creation complete after 1s [id=12e971fe41f6466694c6ad86f8058f7e]
grouper_group_members.ref__committees__tech__teams__slc__general: Creating...
grouper_group_members.ref__committees__tech__teams__whistle__general: Creating...
grouper_group.ref__committees__tech__teams__whistle__members: Creation complete after 1s [id=619050884f61464aabd0eef5f66fe439]
grouper_group_members.ref__committees__tech__teams__whistle__members: Creating...
grouper_group.ref__committees__tech__teams__slc__members: Creation complete after 1s [id=773847ce5af64b5b9ad89293ce20ffea]
grouper_group_members.ref__committees__tech__teams__slc__members: Creating...
grouper_group_members.ref__committees__tech__members: Modifying...
grouper_group_members.ref__committees__tech__teams__whistle__members: Creation complete after 1s
grouper_group_members.ref__committees__tech__teams__slc__members: Creation complete after 1s
grouper_group_members.ref__committees__tech__members: Modifications complete after 4s
grouper_group_members.ref__committees__tech__teams__whistle__general: Creation complete after 6s
grouper_group_members.ref__committees__tech__teams__slc__general: Creation complete after 6s
ephemeral.vault_kv_secret_v2.grouper_password: Closing...
ephemeral.vault_kv_secret_v2.grouper_password: Close complete after 0s

Apply complete! Resources: 10 added, 2 changed, 0 destroyed.

---

4. project: git dir: generated/tofu/git workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on build directory
    Finished `release` profile [optimized] target(s) in 0.19s

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
github_repository.slai_slc: Creating...
github_repository.slai_whistle: Creating...
forgejo_repository.slai_slc: Creating...
forgejo_repository.slai_whistle: Creating...
forgejo_repository.slai_slc: Creation complete after 1s [name=slc]
forgejo_team_repository.slai_slc: Creating...
restapi_object.slai_slc_kennel_webhook: Creating...
restapi_object.slai_slc_push_mirror: Creating...
restapi_object.slai_slc_kennel_webhook: Creation complete after 0s [id=81]
restapi_object.slai_slc_push_mirror: Creation complete after 0s [id=remote_mirror_bumrVVJcHeD]
forgejo_team_repository.slai_slc: Creation complete after 0s [id=8/340]
forgejo_team_repository.slai_leads_slc: Creating...
forgejo_team_repository.slai_leads_slc: Creation complete after 0s [id=74/340]
forgejo_branch_protection.slai_slc_default_branch: Creating...
forgejo_branch_protection.slai_slc_default_branch: Creation complete after 0s
forgejo_repository.slai_whistle: Creation complete after 1s [name=whistle]
forgejo_team_repository.slai_whistle: Creating...
restapi_object.slai_whistle_kennel_webhook: Creating...
restapi_object.slai_whistle_push_mirror: Creating...
restapi_object.slai_whistle_kennel_webhook: Creation complete after 0s [id=82]
restapi_object.slai_whistle_push_mirror: Creation complete after 0s [id=remote_mirror_JyuOgHoi2XQ]
forgejo_team_repository.slai_whistle: Creation complete after 0s [id=8/341]
forgejo_team_repository.slai_leads_whistle: Creating...
forgejo_team_repository.slai_leads_whistle: Creation complete after 0s [id=74/341]
forgejo_branch_protection.slai_whistle_default_branch: Creating...
forgejo_branch_protection.slai_whistle_default_branch: Creation complete after 0s
github_repository.slai_slc: Still creating... [10s elapsed]
github_repository.slai_whistle: Still creating... [10s elapsed]
github_repository.slai_slc: Creation complete after 19s [id=slc]
github_actions_repository_permissions.slai_slc_actions: Creating...
github_repository_deploy_key.slai_slc_mirror_deploy_key: Creating...
github_repository.slai_whistle: Creation complete after 19s [id=whistle]
github_repository_deploy_key.slai_whistle_mirror_deploy_key: Creating...
github_actions_repository_permissions.slai_whistle_actions: Creating...
github_actions_repository_permissions.slai_slc_actions: Creation complete after 6s [id=slc]
github_repository_deploy_key.slai_slc_mirror_deploy_key: Creation complete after 6s [id=slc:168268016]
github_repository_ruleset.slai_slc_ruleset: Creating...
github_repository_deploy_key.slai_whistle_mirror_deploy_key: Creation complete after 6s [id=whistle:168268019]
github_repository_ruleset.slai_whistle_ruleset: Creating...
github_actions_repository_permissions.slai_whistle_actions: Creation complete after 6s [id=whistle]
github_repository_ruleset.slai_slc_ruleset: Creation complete after 2s [id=26260887]
github_repository_ruleset.slai_whistle_ruleset: Creation complete after 3s [id=26260888]

Apply complete! Resources: 20 added, 0 changed, 0 destroyed.

---

5. project: keycloak dir: generated/tofu/keycloak workspace: default

Show Output

Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `release` profile [optimized] target(s) in 0.18s

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
keycloak_group.project_slai_slc: Creating...
keycloak_group.project_slai_whistle: Creating...
keycloak_group.project_slai_slc: Creation complete after 0s [id=7ab9910d-cc3b-47d4-a7b3-7a24c6902a08]
keycloak_group.project_slai_slc_admins: Creating...
keycloak_group_memberships.project_slai_slc: Creating...
keycloak_group.project_slai_whistle: Creation complete after 0s [id=61558941-4e5d-48ff-8de4-879186850aaf]
keycloak_group.project_slai_whistle_admins: Creating...
keycloak_group_memberships.project_slai_whistle: Creating...
keycloak_group.project_slai_slc_admins: Creation complete after 0s [id=3310682d-7991-4a83-95f9-ef8c82966ffd]
keycloak_group_memberships.project_slai_slc_admins: Creating...
keycloak_group.project_slai_whistle_admins: Creation complete after 1s [id=566f284d-a77c-4ebe-90e1-53d6cdadb81a]
keycloak_group_memberships.project_slai_whistle_admins: Creating...
keycloak_group_memberships.project_slai_slc_admins: Creation complete after 8s [id=scottylabs/group-memberships/3310682d-7991-4a83-95f9-ef8c82966ffd]
keycloak_group_memberships.project_slai_whistle_admins: Creation complete after 7s [id=scottylabs/group-memberships/566f284d-a77c-4ebe-90e1-53d6cdadb81a]
keycloak_group_memberships.project_slai_slc: Still creating... [10s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [10s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [20s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [20s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [30s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [30s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [40s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [40s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [50s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [50s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [1m0s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [1m0s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [1m10s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [1m10s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [1m20s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [1m20s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [1m30s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [1m30s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [1m40s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [1m40s elapsed]
keycloak_group_memberships.project_slai_slc: Still creating... [1m50s elapsed]
keycloak_group_memberships.project_slai_whistle: Still creating... [1m50s elapsed]
keycloak_group_memberships.project_slai_whistle: Creation complete after 1m54s [id=scottylabs/group-memberships/61558941-4e5d-48ff-8de4-879186850aaf]
keycloak_group_memberships.project_slai_slc: Creation complete after 1m54s [id=scottylabs/group-memberships/7ab9910d-cc3b-47d4-a7b3-7a24c6902a08]

Apply complete! Resources: 8 added, 0 changed, 0 destroyed.

---

Apply Summary

5 projects, 5 successful, 0 failed, 0 errored

Ran Apply for 5 projects: 1. project: `openbao` dir: `generated/tofu/openbao` workspace: `default` 1. project: `litellm` dir: `generated/tofu/litellm` workspace: `default` 1. project: `grouper` dir: `generated/tofu/grouper` workspace: `default` 1. project: `git` dir: `generated/tofu/git` workspace: `default` 1. project: `keycloak` dir: `generated/tofu/keycloak` workspace: `default` --- ### 1. project: `openbao` dir: `generated/tofu/openbao` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on shared package cache Blocking waiting for file lock on build directory Finished `release` profile [optimized] target(s) in 0.19s ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_identity_group.slc_admins: Creating... vault_identity_group.slc_members: Creating... vault_policy.whistle_dev: Creating... vault_policy.slc_ci: Creating... vault_policy.slc_prod: Creating... vault_identity_group.whistle_admins: Creating... vault_policy.whistle_prod: Creating... vault_policy.whistle_ci: Creating... vault_policy.slc_dev: Creating... vault_identity_group.whistle_members: Creating... vault_identity_group.whistle_admins: Creation complete after 0s [id=aeb7d42c-04cb-acd0-129e-8578079fae8e] vault_identity_group_alias.whistle_admins: Creating... vault_identity_group.slc_admins: Creation complete after 0s [id=64676ee8-e005-5951-3438-281b95001f3e] vault_identity_group_alias.slc_admins: Creating... vault_identity_group.whistle_members: Creation complete after 0s [id=0c1c9b77-fe67-f7b1-eeba-a92ef39030c8] vault_identity_group_alias.whistle_members: Creating... vault_identity_group.slc_members: Creation complete after 0s [id=b8f2267e-856c-7c70-8a7e-710b7bcfb3f0] vault_identity_group_alias.slc_members: Creating... vault_policy.slc_dev: Creation complete after 0s [id=slc-dev] vault_policy.whistle_dev: Creation complete after 0s [id=whistle-dev] vault_policy.whistle_prod: Creation complete after 0s [id=whistle-prod] vault_policy.slc_ci: Creation complete after 0s [id=ci-slc] vault_identity_entity.slc_ci: Creating... vault_policy.slc_prod: Creation complete after 0s [id=slc-prod] vault_policy.whistle_ci: Creation complete after 0s [id=ci-whistle] vault_identity_entity.whistle_ci: Creating... vault_identity_group_alias.whistle_admins: Creation complete after 0s [id=ac151026-da1c-8fd9-e299-b58930cdc3f2] vault_identity_entity.slc_ci: Creation complete after 0s [id=88be70de-6797-4ded-0f69-2420a45b9c0e] vault_identity_entity_alias.slc_ci: Creating... vault_identity_entity.whistle_ci: Creation complete after 0s [id=464278ce-5cdd-93ea-0d5b-d1e3e1cec5c8] vault_identity_entity_alias.whistle_ci: Creating... vault_identity_group_alias.slc_admins: Creation complete after 0s [id=7656a2df-c98b-5ea2-66f2-78e812fa21d5] vault_identity_group_alias.whistle_members: Creation complete after 0s [id=f6a52e38-628f-1c6e-e1be-2750ed15395b] vault_identity_entity_alias.slc_ci: Creation complete after 0s [id=2979aa44-d58a-15f2-934c-0cf71a25590a] vault_identity_group_alias.slc_members: Creation complete after 0s [id=43ade594-74b4-2852-e9dc-94e4a0734208] vault_identity_entity_alias.whistle_ci: Creation complete after 0s [id=58ebcc10-3f88-2030-f747-1a61e2fffdc6] Apply complete! Resources: 18 added, 0 changed, 0 destroyed. ``` </details> --- ### 2. project: `litellm` dir: `generated/tofu/litellm` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Finished `release` profile [optimized] target(s) in 0.19s ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.litellm_master_key: Opening... vault_kv_secret_v2.slc_staging_litellm_base_url: Creating... vault_kv_secret_v2.slc_dev_litellm_base_url: Creating... vault_kv_secret_v2.slc_prod_litellm_base_url: Creating... vault_kv_secret_v2.slc_preview_litellm_base_url: Creating... ephemeral.vault_kv_secret_v2.litellm_master_key: Open complete after 0s litellm_team.slai: Creating... vault_kv_secret_v2.slc_preview_litellm_base_url: Creation complete after 0s [id=secret/data/secretspec/slc/preview/LITELLM_BASE_URL] vault_kv_secret_v2.slc_staging_litellm_base_url: Creation complete after 0s [id=secret/data/secretspec/slc/staging/LITELLM_BASE_URL] vault_kv_secret_v2.slc_dev_litellm_base_url: Creation complete after 0s [id=secret/data/secretspec/slc/dev/LITELLM_BASE_URL] vault_kv_secret_v2.slc_prod_litellm_base_url: Creation complete after 0s [id=secret/data/secretspec/slc/prod/LITELLM_BASE_URL] litellm_team.slai: Creation complete after 0s [id=b1850e33-518d-45a0-bbb0-f85ecf2edc0c] litellm_key.slc_prod: Creating... litellm_key.slc_dev: Creating... litellm_key.slc_prod: Creation complete after 0s [id=sha256:6ed8a939741cf34c2107acea16de67a777b24375a33fc36cefd5a2b24b6b617f] vault_kv_secret_v2.slc_prod_litellm_api_key: Creating... litellm_key.slc_dev: Creation complete after 0s [id=sha256:7182a3e199056729c1052e6b6c1063230ce6ab5537aae65d630124ab95a5cebd] vault_kv_secret_v2.slc_dev_litellm_api_key: Creating... vault_kv_secret_v2.slc_staging_litellm_api_key: Creating... vault_kv_secret_v2.slc_preview_litellm_api_key: Creating... vault_kv_secret_v2.slc_prod_litellm_api_key: Creation complete after 0s [id=secret/data/secretspec/slc/prod/LITELLM_API_KEY] vault_kv_secret_v2.slc_dev_litellm_api_key: Creation complete after 1s [id=secret/data/secretspec/slc/dev/LITELLM_API_KEY] vault_kv_secret_v2.slc_preview_litellm_api_key: Creation complete after 1s [id=secret/data/secretspec/slc/preview/LITELLM_API_KEY] vault_kv_secret_v2.slc_staging_litellm_api_key: Creation complete after 1s [id=secret/data/secretspec/slc/staging/LITELLM_API_KEY] ephemeral.vault_kv_secret_v2.litellm_master_key: Closing... ephemeral.vault_kv_secret_v2.litellm_master_key: Close complete after 0s Apply complete! Resources: 11 added, 0 changed, 0 destroyed. ``` </details> --- ### 3. project: `grouper` dir: `generated/tofu/grouper` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on build directory Finished `release` profile [optimized] target(s) in 0.20s ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.grouper_password: Opening... ephemeral.vault_kv_secret_v2.grouper_password: Open complete after 0s grouper_group_members.google__sl_exec__Managers_Include: Modifying... grouper_folder.ref__committees__tech__teams__whistle: Creating... grouper_folder.ref__committees__tech__teams__slc: Creating... grouper_group_members.google__sl_exec__Managers_Include: Modifications complete after 2s grouper_folder.ref__committees__tech__teams__slc: Creation complete after 3s [id=466d443e650141d0b8c5c0a04ec7e6ed] grouper_group.ref__committees__tech__teams__slc__members: Creating... grouper_group.ref__committees__tech__teams__slc__general: Creating... grouper_folder.ref__committees__tech__teams__whistle: Creation complete after 3s [id=d5a9b7081dba4a02aad0f8f32e0181b2] grouper_group.ref__committees__tech__teams__whistle__general: Creating... grouper_group.ref__committees__tech__teams__whistle__members: Creating... grouper_group.ref__committees__tech__teams__whistle__general: Creation complete after 1s [id=03d9723ec7f147dbab44311d292c9f1a] grouper_group.ref__committees__tech__teams__slc__general: Creation complete after 1s [id=12e971fe41f6466694c6ad86f8058f7e] grouper_group_members.ref__committees__tech__teams__slc__general: Creating... grouper_group_members.ref__committees__tech__teams__whistle__general: Creating... grouper_group.ref__committees__tech__teams__whistle__members: Creation complete after 1s [id=619050884f61464aabd0eef5f66fe439] grouper_group_members.ref__committees__tech__teams__whistle__members: Creating... grouper_group.ref__committees__tech__teams__slc__members: Creation complete after 1s [id=773847ce5af64b5b9ad89293ce20ffea] grouper_group_members.ref__committees__tech__teams__slc__members: Creating... grouper_group_members.ref__committees__tech__members: Modifying... grouper_group_members.ref__committees__tech__teams__whistle__members: Creation complete after 1s grouper_group_members.ref__committees__tech__teams__slc__members: Creation complete after 1s grouper_group_members.ref__committees__tech__members: Modifications complete after 4s grouper_group_members.ref__committees__tech__teams__whistle__general: Creation complete after 6s grouper_group_members.ref__committees__tech__teams__slc__general: Creation complete after 6s ephemeral.vault_kv_secret_v2.grouper_password: Closing... ephemeral.vault_kv_secret_v2.grouper_password: Close complete after 0s Apply complete! Resources: 10 added, 2 changed, 0 destroyed. ``` </details> --- ### 4. project: `git` dir: `generated/tofu/git` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on build directory Finished `release` profile [optimized] target(s) in 0.19s ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ github_repository.slai_slc: Creating... github_repository.slai_whistle: Creating... forgejo_repository.slai_slc: Creating... forgejo_repository.slai_whistle: Creating... forgejo_repository.slai_slc: Creation complete after 1s [name=slc] forgejo_team_repository.slai_slc: Creating... restapi_object.slai_slc_kennel_webhook: Creating... restapi_object.slai_slc_push_mirror: Creating... restapi_object.slai_slc_kennel_webhook: Creation complete after 0s [id=81] restapi_object.slai_slc_push_mirror: Creation complete after 0s [id=remote_mirror_bumrVVJcHeD] forgejo_team_repository.slai_slc: Creation complete after 0s [id=8/340] forgejo_team_repository.slai_leads_slc: Creating... forgejo_team_repository.slai_leads_slc: Creation complete after 0s [id=74/340] forgejo_branch_protection.slai_slc_default_branch: Creating... forgejo_branch_protection.slai_slc_default_branch: Creation complete after 0s forgejo_repository.slai_whistle: Creation complete after 1s [name=whistle] forgejo_team_repository.slai_whistle: Creating... restapi_object.slai_whistle_kennel_webhook: Creating... restapi_object.slai_whistle_push_mirror: Creating... restapi_object.slai_whistle_kennel_webhook: Creation complete after 0s [id=82] restapi_object.slai_whistle_push_mirror: Creation complete after 0s [id=remote_mirror_JyuOgHoi2XQ] forgejo_team_repository.slai_whistle: Creation complete after 0s [id=8/341] forgejo_team_repository.slai_leads_whistle: Creating... forgejo_team_repository.slai_leads_whistle: Creation complete after 0s [id=74/341] forgejo_branch_protection.slai_whistle_default_branch: Creating... forgejo_branch_protection.slai_whistle_default_branch: Creation complete after 0s github_repository.slai_slc: Still creating... [10s elapsed] github_repository.slai_whistle: Still creating... [10s elapsed] github_repository.slai_slc: Creation complete after 19s [id=slc] github_actions_repository_permissions.slai_slc_actions: Creating... github_repository_deploy_key.slai_slc_mirror_deploy_key: Creating... github_repository.slai_whistle: Creation complete after 19s [id=whistle] github_repository_deploy_key.slai_whistle_mirror_deploy_key: Creating... github_actions_repository_permissions.slai_whistle_actions: Creating... github_actions_repository_permissions.slai_slc_actions: Creation complete after 6s [id=slc] github_repository_deploy_key.slai_slc_mirror_deploy_key: Creation complete after 6s [id=slc:168268016] github_repository_ruleset.slai_slc_ruleset: Creating... github_repository_deploy_key.slai_whistle_mirror_deploy_key: Creation complete after 6s [id=whistle:168268019] github_repository_ruleset.slai_whistle_ruleset: Creating... github_actions_repository_permissions.slai_whistle_actions: Creation complete after 6s [id=whistle] github_repository_ruleset.slai_slc_ruleset: Creation complete after 2s [id=26260887] github_repository_ruleset.slai_whistle_ruleset: Creation complete after 3s [id=26260888] Apply complete! Resources: 20 added, 0 changed, 0 destroyed. ``` </details> --- ### 5. project: `keycloak` dir: `generated/tofu/keycloak` workspace: `default` <details><summary>Show Output</summary> ```diff Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Finished `release` profile [optimized] target(s) in 0.18s ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ keycloak_group.project_slai_slc: Creating... keycloak_group.project_slai_whistle: Creating... keycloak_group.project_slai_slc: Creation complete after 0s [id=7ab9910d-cc3b-47d4-a7b3-7a24c6902a08] keycloak_group.project_slai_slc_admins: Creating... keycloak_group_memberships.project_slai_slc: Creating... keycloak_group.project_slai_whistle: Creation complete after 0s [id=61558941-4e5d-48ff-8de4-879186850aaf] keycloak_group.project_slai_whistle_admins: Creating... keycloak_group_memberships.project_slai_whistle: Creating... keycloak_group.project_slai_slc_admins: Creation complete after 0s [id=3310682d-7991-4a83-95f9-ef8c82966ffd] keycloak_group_memberships.project_slai_slc_admins: Creating... keycloak_group.project_slai_whistle_admins: Creation complete after 1s [id=566f284d-a77c-4ebe-90e1-53d6cdadb81a] keycloak_group_memberships.project_slai_whistle_admins: Creating... keycloak_group_memberships.project_slai_slc_admins: Creation complete after 8s [id=scottylabs/group-memberships/3310682d-7991-4a83-95f9-ef8c82966ffd] keycloak_group_memberships.project_slai_whistle_admins: Creation complete after 7s [id=scottylabs/group-memberships/566f284d-a77c-4ebe-90e1-53d6cdadb81a] keycloak_group_memberships.project_slai_slc: Still creating... [10s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [10s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [20s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [20s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [30s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [30s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [40s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [40s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [50s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [50s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [1m0s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [1m0s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [1m10s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [1m10s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [1m20s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [1m20s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [1m30s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [1m30s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [1m40s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [1m40s elapsed] keycloak_group_memberships.project_slai_slc: Still creating... [1m50s elapsed] keycloak_group_memberships.project_slai_whistle: Still creating... [1m50s elapsed] keycloak_group_memberships.project_slai_whistle: Creation complete after 1m54s [id=scottylabs/group-memberships/61558941-4e5d-48ff-8de4-879186850aaf] keycloak_group_memberships.project_slai_slc: Creation complete after 1m54s [id=scottylabs/group-memberships/7ab9910d-cc3b-47d4-a7b3-7a24c6902a08] Apply complete! Resources: 8 added, 0 changed, 0 destroyed. ``` </details> --- ### Apply Summary 5 projects, 5 successful, 0 failed, 0 errored

thesuperRL merged commit 8809e4b44c into main 2026-10-31 04:57:53 +00:00

thesuperRL deleted branch fix-slai-whistle-slc 2026-10-31 04:57:53 +00:00

scottylabs-bot commented 2026-10-31 04:57:54 +00:00

Owner

Copy link

Locks and plans deleted for the projects and workspaces modified in this pull request:

• dir: generated/tofu/git workspace: default
• dir: generated/tofu/grouper workspace: default
• dir: generated/tofu/keycloak workspace: default
• dir: generated/tofu/litellm workspace: default
• dir: generated/tofu/openbao workspace: default

Locks and plans deleted for the projects and workspaces modified in this pull request: - dir: `generated/tofu/git` workspace: `default` - dir: `generated/tofu/grouper` workspace: `default` - dir: `generated/tofu/keycloak` workspace: `default` - dir: `generated/tofu/litellm` workspace: `default` - dir: `generated/tofu/openbao` workspace: `default`

thesuperRL referenced this pull request from a commit 2026-10-31 04:57:54 +00:00

chore: add whistle and slc to slai (#564)

Sign in to join this conversation.

Reviewers

No reviewers

ScottyLabs/slai-leads

ScottyLabs/devops-leads

Labels

Clear labels   

needs/linking

Issue is pending on account linking

  

needs/docs

Must have documentation written

  

needs/research

Discuss the ideal implementation with the tech lead

  

needs/upstream

Needs a contribution to an upstream project

  

type/bug

Something not working as intended

  

type/external

Lives outside of code

  

type/feature

New functionality

  

type/refactor

Improving existing code

  

urgency

high

This is currently causing issues

  

urgency

immediate

This is making a project or feature unusable

  

urgency

low

This can happen whenever

  

urgency

medium

This is expected to cause issues soon

No labels

needs/linking

needs/docs

needs/research

needs/upstream

type/bug

type/external

type/feature

type/refactor

urgency

high

urgency

immediate

urgency

low

urgency

medium

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

ScottyLabs/governance!564

No description provided.