fix: render vault-agent files outside /run/secrets #193

Open

kennethz wants to merge 4 commits from fix/vault-agent-file-paths into main

pull from: fix/vault-agent-file-paths

merge into: ScottyLabs:main

ScottyLabs:main

ScottyLabs:renovate/lockfiles

ScottyLabs:renovate/kennel

ScottyLabs:refactor/sops-nix

ScottyLabs:fix/ci-semgrep-aarch64

ScottyLabs:crawler-archive-disk

Conversation 6 Commits 4 Files changed 4 +18 -9

kennethz commented 2026-10-31 21:03:07 +00:00

Member

Copy link

Includes the two CI fixes from #195 (merged in, so CI can run here). They drop out of this diff once #195 is merged.

Part of #129, and has to deploy before sops-nix lands.

sops-nix owns /run/secrets: on activation it deletes the directory if it is not its own symlink, then points it at a generation directory that is pruned on the next activation. The files vault agent on infra-01 currently renders three files there:

• discord-webhook-alerts and slack-webhook-alerts, read by the Grafana contact points through $__file{}
• cli-proxy-api-key, read by cliproxyapi

This moves all three to /run/vault-agent/, created by a tmpfiles rule (0755 root, the files stay 0400 to their readers).

Deploying

Only infra-01 changes. colmena apply --on scottylabs-infra-01, which restarts vault-agent-files, Grafana and cliproxyapi.

Checking

• sudo ls -l /run/vault-agent/ lists the three files with the same owners as in /run/secrets/
• Grafana: Alerting > Contact points > Test on discord and slack
• curl -s -H "Authorization: Bearer <key>" http://127.0.0.1:8317/v1/models on infra-01 still answers, and LiteLLM requests routed to cliproxyapi still work

The old copies under /run/secrets/ are unused afterwards and go away on reboot (or sudo rm -r /run/secrets).

> Includes the two CI fixes from https://git.cmu.dev/ScottyLabs/infrastructure/pulls/195 (merged in, so CI can run here). They drop out of this diff once #195 is merged. Part of https://git.cmu.dev/ScottyLabs/infrastructure/issues/129, and has to deploy before sops-nix lands. sops-nix owns `/run/secrets`: on activation it deletes the directory if it is not its own symlink, then points it at a generation directory that is pruned on the next activation. The `files` vault agent on infra-01 currently renders three files there: - `discord-webhook-alerts` and `slack-webhook-alerts`, read by the Grafana contact points through `$__file{}` - `cli-proxy-api-key`, read by cliproxyapi This moves all three to `/run/vault-agent/`, created by a tmpfiles rule (0755 root, the files stay 0400 to their readers). ## Deploying Only infra-01 changes. `colmena apply --on scottylabs-infra-01`, which restarts `vault-agent-files`, Grafana and cliproxyapi. ## Checking - `sudo ls -l /run/vault-agent/` lists the three files with the same owners as in `/run/secrets/` - Grafana: Alerting > Contact points > Test on `discord` and `slack` - `curl -s -H "Authorization: Bearer <key>" http://127.0.0.1:8317/v1/models` on infra-01 still answers, and LiteLLM requests routed to cliproxyapi still work The old copies under `/run/secrets/` are unused afterwards and go away on reboot (or `sudo rm -r /run/secrets`).

kennethz added 1 commit 2026-10-31 21:03:07 +00:00

fix: render vault-agent files outside /run/secrets ... e76c67c8cd

sops-nix replaces /run/secrets with a symlink to its own generation
directory and removes anything already there, so the alert webhook URLs
and the cliproxyapi key would disappear once it is enabled (#129).

scottylabs-bot commented 2026-10-31 21:03:36 +00:00

Owner

Copy link

Kennel Deployments

Service	URL
docs	https://infrastructure-docs-pr-193.scottylabs.net

Last updated for commit 4c3ff6f.

<!-- kennel-deployment --> ### Kennel Deployments | Service | URL | | --- | --- | | docs | https://infrastructure-docs-pr-193.scottylabs.net | Last updated for commit `4c3ff6f`.

scottylabs-bot commented 2026-10-31 21:03:47 +00:00

Owner

Copy link

Ran Plan for 22 projects:

1. project: forgejo dir: . workspace: forgejo
2. project: occ dir: . workspace: occ
3. project: mail dir: . workspace: mail
4. project: governance dir: . workspace: governance
5. project: atlantis dir: . workspace: atlantis
6. project: headscale dir: . workspace: headscale
7. project: kennel dir: . workspace: kennel
8. project: litellm dir: . workspace: litellm
9. project: matrix dir: . workspace: matrix
10. project: observability dir: . workspace: observability
11. project: cloudflare-tokens dir: . workspace: cloudflare-tokens
12. project: garage-webadmin dir: . workspace: garage-webadmin
13. project: keycloak dir: . workspace: keycloak
14. project: nixbot dir: . workspace: nixbot
15. project: hosts dir: . workspace: hosts
16. project: posthog dir: . workspace: posthog
17. project: openbao dir: . workspace: openbao
18. project: snot dir: . workspace: snot
19. project: ricochet dir: . workspace: ricochet
20. project: vaultwarden dir: . workspace: vaultwarden
21. project: webhook dir: . workspace: webhook
22. project: search-console dir: . workspace: search-console

---

1. project: forgejo dir: . workspace: forgejo

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p forgejo
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p forgejo
  

No changes. Your infrastructure matches the configuration.

---

2. project: occ dir: . workspace: occ

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p occ
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p occ
  

No changes. Your infrastructure matches the configuration.

---

3. project: mail dir: . workspace: mail

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50]
cloudflare_dns_record.this["cmu-dev-dmarc"]: Refreshing state... [id=0d3fd67366a456cee1c6d14be0dd6b6f]
cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c]
cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a]
cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a]
cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677]
cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d]
cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871]
cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd]
cloudflare_dns_record.this["scottylabs-org-dmarc"]: Refreshing state... [id=ea71a2845b01a4734db1a0f6233eb1d7]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p mail
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p mail
  

No changes. Your infrastructure matches the configuration.

---

4. project: governance dir: . workspace: governance

Show Output

copying 1 paths...
copying path '/nix/store/8crhx37yybvl2kg72nwhz3fzwnfph7s1-config.tf.json.drv' to 'daemon'...
copying path '/nix/store/za20v1vwh492da54qj2mi71lf2m7k5ra-jq-1.8.2-dev' from 'http://localhost:5000'...
copying path '/nix/store/c3k15jk20fccs90qgffdwzhxy15b5fdj-stdenv-linux-no-cc' from 'http://localhost:5000'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
vault_policy.governance: Refreshing state... [id=governance]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p governance
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p governance
  

No changes. Your infrastructure matches the configuration.

---

5. project: atlantis dir: . workspace: atlantis

Show Output

copying 1 paths...
copying path '/nix/store/526q6976ja68m7mnr6f99m7kbpgiak7a-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing svalabs/forgejo v1.7.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed svalabs/forgejo v1.7.0 (unauthenticated)
- Using svalabs/forgejo v1.7.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
forgejo_repository_webhook.infrastructure: Refreshing state...
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.governance: Refreshing state...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p atlantis
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p atlantis
  

No changes. Your infrastructure matches the configuration.

---

6. project: headscale dir: . workspace: headscale

Show Output

copying 1 paths...
copying path '/nix/store/3fhja8ibp72sh1jvkmsirikfhaw43ydb-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p headscale
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p headscale
  

No changes. Your infrastructure matches the configuration.

---

7. project: kennel dir: . workspace: kennel

Show Output

copying 1 paths...
copying path '/nix/store/m1298kr42nwxyjqmakh3b50z8v27hqhz-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p kennel
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p kennel
  

No changes. Your infrastructure matches the configuration.

---

8. project: litellm dir: . workspace: litellm

Show Output

copying 1 paths...
copying path '/nix/store/f5waki3bmz7w3wblbwxfq7952iqhkv06-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_salt_key: Refreshing state... [id=none]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p litellm
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p litellm
  

No changes. Your infrastructure matches the configuration.

---

9. project: matrix dir: . workspace: matrix

Show Output

copying 1 paths...
copying path '/nix/store/fq4yc5jrszb3bvz1slf7d2idkm9h9v1s-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p matrix
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p matrix
  

No changes. Your infrastructure matches the configuration.

---

10. project: observability dir: . workspace: observability

Show Output

copying 1 paths...
copying path '/nix/store/ihhx61m8j5zk2bq27mi79fxq8h0l8v0q-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p observability
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p observability
  

No changes. Your infrastructure matches the configuration.

---

11. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

Show Output

copying 1 paths...
copying path '/nix/store/x6n4m6lfj8vnagm1bkwmv840p44dawn2-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.cloudflare_api_token_permission_groups_list.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
data.cloudflare_api_token_permission_groups_list.all: Read complete after 2s
cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2]
cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b]
cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71]
cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04]
cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012]
vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel]
vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns]
vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail]
vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp]
vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p cloudflare-tokens
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p cloudflare-tokens
  

No changes. Your infrastructure matches the configuration.

---

12. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output

copying 1 paths...
copying path '/nix/store/g02x0bvl888yy46cw51vck1m5q687x6y-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p garage-webadmin
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p garage-webadmin
  

No changes. Your infrastructure matches the configuration.

---

13. project: keycloak dir: . workspace: keycloak

Show Output

copying 1 paths...
copying path '/nix/store/sq7j3zrmhz480bcq5ws4lwd1fgjz39i6-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.forgejo_idp: Opening...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening...
data.vault_kv_secret_v2.keycloak_idp: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s
data.keycloak_realm.labrador: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.master: Reading...
keycloak_realm.scottylabs: Refreshing state... [id=scottylabs]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad]
data.keycloak_realm.master: Read complete after 0s [id=master]
data.keycloak_realm.labrador: Read complete after 0s [id=labrador]
keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_openid_client.labrador_identity_links: Refreshing state... [id=7c7291d7-ae37-489f-9340-80be842169d5]
data.keycloak_role.master_admin: Reading...
data.keycloak_openid_client.labrador_realm_management: Reading...
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs]
keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
data.keycloak_openid_client.labrador_realm_management: Read complete after 0s [id=b21eb763-41d0-41c7-a1d4-786ddd8961e0]
keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad]
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4]
ephemeral.vault_kv_secret_v2.forgejo_idp: Closing...
keycloak_openid_client_service_account_role.labrador_identity_links["view-users"]: Refreshing state... [id=d8ee7c50-a3df-445a-8f25-6242ba792c3b/1638ca45-3d3b-4779-ab8b-9264383df21d]
vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix]
keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_openid_client_service_account_role.labrador_identity_links["view-identity-providers"]: Refreshing state... [id=d8ee7c50-a3df-445a-8f25-6242ba792c3b/2a48cec1-d827-415c-818d-646aca4b9fbf]
ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s
ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.keycloak_idp,
│   on config.tf.json line 30, in data.vault_kv_secret_v2.keycloak_idp:
│   30:       }
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 503, in resource.keycloak_oidc_google_identity_provider.google:
│  503:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵

• ▶️ To apply this plan, comment:

  atlantis apply -p keycloak
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p keycloak
  

No changes. Your infrastructure matches the configuration.

---

14. project: nixbot dir: . workspace: nixbot

Show Output

copying 1 paths...
copying path '/nix/store/9d7kgqmanpw6r2wlkhhcb1mpnzj7j070-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing svalabs/forgejo v1.7.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed svalabs/forgejo v1.7.0 (unauthenticated)
- Using svalabs/forgejo v1.7.0 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.nixbot_forgejo: Refreshing state... [id=none]
forgejo_team.nixbot: Refreshing state... [name=nixbot]
forgejo_user.nixbot: Refreshing state...
forgejo_team_member.nixbot: Refreshing state...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731]
cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f]
vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p nixbot
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p nixbot
  

No changes. Your infrastructure matches the configuration.

---

15. project: hosts dir: . workspace: hosts

Show Output

copying 1 paths...
copying path '/nix/store/dnz6n879bndm6w2bzcisid9kaqx5g8dy-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8]
cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44]
cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e]
cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696]
cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849]
cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p hosts
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p hosts
  

No changes. Your infrastructure matches the configuration.

---

16. project: posthog dir: . workspace: posthog

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding posthog/posthog versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installing posthog/posthog v1.0.27 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed posthog/posthog v1.0.27 (unauthenticated)
- Using posthog/posthog v1.0.27 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - posthog/posthog
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p posthog
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p posthog
  

No changes. Your infrastructure matches the configuration.

---

17. project: openbao dir: . workspace: openbao

Show Output

copying 1 paths...
copying path '/nix/store/yrrkzfw1qn228svbmc6wnl5y3dw58amv-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_mount.kv: Refreshing state... [id=secret]
vault_identity_oidc_key.terranix: Refreshing state... [id=terranix]
vault_policy.infra: Refreshing state... [id=infra]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_policy.ci: Refreshing state... [id=ci]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_policy.devops: Refreshing state... [id=devops]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
data.vault_auth_backend.token: Reading...
vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00]
data.vault_auth_backend.token: Read complete after 0s [id=token]
vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01]
vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["tartan-01"]: Refreshing state... [id=auth/approle/role/tartan-01]
vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p openbao
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p openbao
  

No changes. Your infrastructure matches the configuration.

---

18. project: snot dir: . workspace: snot

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p snot
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p snot
  

No changes. Your infrastructure matches the configuration.

---

19. project: ricochet dir: . workspace: ricochet

Show Output

copying 1 paths...
copying path '/nix/store/rkj9gn6ikjn7yijhqkbbfhxixrpicgid-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p ricochet
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p ricochet
  

No changes. Your infrastructure matches the configuration.

---

20. project: vaultwarden dir: . workspace: vaultwarden

Show Output

copying 1 paths...
copying path '/nix/store/xc4lxb832rk23ndxfffskk695867g60s-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p vaultwarden
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p vaultwarden
  

No changes. Your infrastructure matches the configuration.

---

21. project: webhook dir: . workspace: webhook

Show Output

copying 1 paths...
copying path '/nix/store/xqxh6acvlfm25snkh8ngp0kdnn5smclf-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing svalabs/forgejo v1.7.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed svalabs/forgejo v1.7.0 (unauthenticated)
- Using svalabs/forgejo v1.7.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.forgejo_repository.kennel: Reading...
data.forgejo_repository.kennel: Read complete after 0s [name=kennel]
forgejo_repository_webhook.kennel_renovate: Refreshing state...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p webhook
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p webhook
  

No changes. Your infrastructure matches the configuration.

---

22. project: search-console dir: . workspace: search-console

Show Output

copying 2 paths...
copying path '/nix/store/6p1870a8swj71hw603f1biw7is8pkdj3-openbao-google-token.drv' to 'daemon'...
copying path '/nix/store/x8x9ayg50n4wl80k4j60vlzbzfj3j3cw-config.tf.json.drv' to 'daemon'...
copying path '/nix/store/aa7i752awnz9k2fkm840fixm62kq504a-ShellCheck-0.11.0' from 'http://localhost:5000'...
copying 0 paths...
copying 1 paths...
copying path '/nix/store/z5gmh2f0yn773f84r1x84czcng97ac6x-openbao-google-token' from 'ssh-ng://eu.nixbuild.net'...
✔  config.tf.json.drv (0s)
✔  openbao-google-token (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/google versions matching "~> 7.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installing hashicorp/google v7.46.2 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory
- Installed hashicorp/google v7.46.2 (unauthenticated)
- Using hashicorp/google v7.46.2 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/google
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.google_site_verification_token.scottygo_com: Reading...
data.google_site_verification_token.terrier_build: Reading...
data.google_site_verification_token.collegecart_org: Reading...
data.google_site_verification_token.cmumaps_com: Reading...
data.google_site_verification_token.rent-pgh_com: Reading...
data.google_site_verification_token.doggylabs_org: Reading...
data.google_site_verification_token.cmucourses_com: Reading...
data.google_site_verification_token.scottylabs_net: Reading...
data.google_site_verification_token.tartanhacks_com: Reading...
data.google_site_verification_token.scottylabs_org: Reading...
data.google_site_verification_token.scottygo_com: Read complete after 0s [id=scottygo.com]
data.google_site_verification_token.tartanhacks_com: Read complete after 0s [id=tartanhacks.com]
data.google_site_verification_token.cmu_do: Reading...
data.google_site_verification_token.cmugpt_com: Reading...
data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org]
data.google_site_verification_token.tartan_vote: Reading...
data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com]
data.google_site_verification_token.cmu_lol: Reading...
data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do]
data.google_site_verification_token.cmubulletin_com: Reading...
data.google_site_verification_token.tartan_vote: Read complete after 0s [id=tartan.vote]
data.google_site_verification_token.cmu_courses: Reading...
data.google_site_verification_token.cmugpt_com: Read complete after 0s [id=cmugpt.com]
data.google_site_verification_token.cmuinsta_com: Reading...
data.google_site_verification_token.cmumaps_com: Read complete after 0s [id=cmumaps.com]
data.google_site_verification_token.andrew-inbox_com: Reading...
data.google_site_verification_token.rent-pgh_com: Read complete after 0s [id=rent-pgh.com]
data.google_site_verification_token.scottylabs_org: Read complete after 0s [id=scottylabs.org]
data.google_site_verification_token.terrier_build: Read complete after 0s [id=terrier.build]
data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org]
data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net]
data.google_site_verification_token.cmu_dev: Reading...
data.google_site_verification_token.cmu_homes: Reading...
data.google_site_verification_token.cmuservice_shop: Reading...
data.google_site_verification_token.scotty_lol: Reading...
data.google_site_verification_token.cmustudy_com: Reading...
data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol]
data.google_site_verification_token.cmu_guide: Reading...
data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com]
data.google_site_verification_token.scottylabs_dev: Reading...
data.google_site_verification_token.cmu_courses: Read complete after 0s [id=cmu.courses]
data.google_site_verification_token.cmuhousing_com: Reading...
data.google_site_verification_token.cmuinsta_com: Read complete after 0s [id=cmuinsta.com]
data.google_site_verification_token.tartanhacks_org: Reading...
data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com]
data.google_site_verification_token.cmueats_com: Reading...
data.google_site_verification_token.cmu_dev: Read complete after 0s [id=cmu.dev]
data.google_site_verification_token.cmuservice_shop: Read complete after 0s [id=cmuservice.shop]
data.google_site_verification_token.roomies_live: Reading...
data.google_site_verification_token.cmucal_com: Reading...
data.google_site_verification_token.cmustudy_com: Read complete after 0s [id=cmustudy.com]
data.google_site_verification_token.scotty_lol: Read complete after 0s [id=scotty.lol]
data.google_site_verification_token.occ_build: Reading...
data.google_site_verification_token.cmu_quest: Reading...
data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide]
data.google_site_verification_token.scottylabs_dev: Read complete after 0s [id=scottylabs.dev]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
data.google_site_verification_token.cmu_homes: Read complete after 0s [id=cmu.homes]
data.google_site_verification_token.cmuhousing_com: Read complete after 0s [id=cmuhousing.com]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org]
data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live]
data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest]
data.google_site_verification_token.cmueats_com: Read complete after 0s [id=cmueats.com]
data.google_site_verification_token.occ_build: Read complete after 0s [id=occ.build]
data.google_site_verification_token.cmucal_com: Read complete after 1s [id=cmucal.com]
cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb]
cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe]
cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857]
cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb]
cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790]
cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f]
cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b]
cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493]
cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f]
cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3]
cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc]
cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14]
cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978]
cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40]
cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4]
cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4]
cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234]
cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237]
cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57]
cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43]
cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169]
cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666]
cloudflare_dns_record.this["scottygo.com-search-console"]: Refreshing state... [id=f842d9865ff180039ca1d4feb4997c42]
cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0]
cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199]
cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d]
cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116]
cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a]
cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c]
cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4]
cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a]
cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com]
google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol]
google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide]
google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop]
google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com]
google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net]
google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev]
google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest]
google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com]
google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com]
google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com]
google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build]
google_site_verification_web_resource.scottygo_com: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com]
google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com]
google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org]
google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev]
google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org]
google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com]
google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com]
google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com]
google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com]
google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote]
google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com]
google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com]
google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org]
google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do]
google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol]
google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes]
google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build]
google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org]
google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live]
google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses]
google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org]
google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org]
google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org]
google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org]
google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org]
google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org]
google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org]
google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org]
google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org]
google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org]
google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org]
google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org]
google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org]
google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org]
google_site_verification_owner.scottygo_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/admin@scottylabs.org]
google_site_verification_owner.scottygo_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/ops@scottylabs.org]
google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org]
google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org]
google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org]
google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org]
google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org]
google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org]
google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org]
google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org]
google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org]
google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org]
google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org]
google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org]
google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org]
google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org]
google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org]
google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org]
google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org]
google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org]
google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org]
google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org]
google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org]
google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org]
google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org]
google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org]
google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org]
google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org]
google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org]
google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org]
google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org]
google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org]
google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org]
google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org]
google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org]
google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org]
google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org]
google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org]
google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org]
google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org]
google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org]
google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org]
google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org]
google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org]
google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org]
google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p search-console
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p search-console
  

No changes. Your infrastructure matches the configuration.

---

Plan Summary

22 projects, 0 with changes, 22 with no changes, 0 failed

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for 22 projects: 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `occ` dir: `.` workspace: `occ` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `search-console` dir: `.` workspace: `search-console` --- ### 1. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `occ` dir: `.` workspace: `occ` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p occ ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Focc%252Focc) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p occ ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `mail` dir: `.` workspace: `mail` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50] cloudflare_dns_record.this["cmu-dev-dmarc"]: Refreshing state... [id=0d3fd67366a456cee1c6d14be0dd6b6f] cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c] cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a] cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a] cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677] cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d] cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871] cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd] cloudflare_dns_record.this["scottylabs-org-dmarc"]: Refreshing state... [id=ea71a2845b01a4734db1a0f6233eb1d7] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p mail ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmail%252Fmail) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p mail ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/8crhx37yybvl2kg72nwhz3fzwnfph7s1-config.tf.json.drv' to 'daemon'... copying path '/nix/store/za20v1vwh492da54qj2mi71lf2m7k5ra-jq-1.8.2-dev' from 'http://localhost:5000'... copying path '/nix/store/c3k15jk20fccs90qgffdwzhxy15b5fdj-stdenv-linux-no-cc' from 'http://localhost:5000'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s vault_policy.governance: Refreshing state... [id=governance] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/526q6976ja68m7mnr6f99m7kbpgiak7a-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing svalabs/forgejo v1.7.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed svalabs/forgejo v1.7.0 (unauthenticated) - Using svalabs/forgejo v1.7.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] forgejo_repository_webhook.infrastructure: Refreshing state... data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.governance: Refreshing state... ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/3fhja8ibp72sh1jvkmsirikfhaw43ydb-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/m1298kr42nwxyjqmakh3b50z8v27hqhz-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/f5waki3bmz7w3wblbwxfq7952iqhkv06-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.litellm_master_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_salt_key: Refreshing state... [id=none] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/fq4yc5jrszb3bvz1slf7d2idkm9h9v1s-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/ihhx61m8j5zk2bq27mi79fxq8h0l8v0q-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/x6n4m6lfj8vnagm1bkwmv840p44dawn2-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.cloudflare_api_token_permission_groups_list.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s data.cloudflare_api_token_permission_groups_list.all: Read complete after 2s cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2] cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b] cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71] cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04] cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012] vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel] vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns] vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail] vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp] vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p cloudflare-tokens ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fcloudflare-tokens%252Fcloudflare-tokens) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p cloudflare-tokens ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/g02x0bvl888yy46cw51vck1m5q687x6y-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/sq7j3zrmhz480bcq5ws4lwd1fgjz39i6-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.forgejo_idp: Opening... ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening... data.vault_kv_secret_v2.keycloak_idp: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s data.keycloak_realm.labrador: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.master: Reading... keycloak_realm.scottylabs: Refreshing state... [id=scottylabs] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad] data.keycloak_realm.master: Read complete after 0s [id=master] data.keycloak_realm.labrador: Read complete after 0s [id=labrador] keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_openid_client.labrador_identity_links: Refreshing state... [id=7c7291d7-ae37-489f-9340-80be842169d5] data.keycloak_role.master_admin: Reading... data.keycloak_openid_client.labrador_realm_management: Reading... keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs] keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] data.keycloak_openid_client.labrador_realm_management: Read complete after 0s [id=b21eb763-41d0-41c7-a1d4-786ddd8961e0] keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad] cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4] ephemeral.vault_kv_secret_v2.forgejo_idp: Closing... keycloak_openid_client_service_account_role.labrador_identity_links["view-users"]: Refreshing state... [id=d8ee7c50-a3df-445a-8f25-6242ba792c3b/1638ca45-3d3b-4779-ab8b-9264383df21d] vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix] keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_openid_client_service_account_role.labrador_identity_links["view-identity-providers"]: Refreshing state... [id=d8ee7c50-a3df-445a-8f25-6242ba792c3b/2a48cec1-d827-415c-818d-646aca4b9fbf] ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing... ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.keycloak_idp, │ on config.tf.json line 30, in data.vault_kv_secret_v2.keycloak_idp: │ 30: } │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 503, in resource.keycloak_oidc_google_identity_provider.google: │ 503: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/9d7kgqmanpw6r2wlkhhcb1mpnzj7j070-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing svalabs/forgejo v1.7.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed svalabs/forgejo v1.7.0 (unauthenticated) - Using svalabs/forgejo v1.7.0 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.nixbot_forgejo: Refreshing state... [id=none] forgejo_team.nixbot: Refreshing state... [name=nixbot] forgejo_user.nixbot: Refreshing state... forgejo_team_member.nixbot: Refreshing state... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731] cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f] vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p nixbot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fnixbot%252Fnixbot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p nixbot ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/dnz6n879bndm6w2bzcisid9kaqx5g8dy-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8] cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44] cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e] cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696] cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849] cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding posthog/posthog versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installing posthog/posthog v1.0.27 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed posthog/posthog v1.0.27 (unauthenticated) - Using posthog/posthog v1.0.27 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - posthog/posthog │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/yrrkzfw1qn228svbmc6wnl5y3dw58amv-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_mount.kv: Refreshing state... [id=secret] vault_identity_oidc_key.terranix: Refreshing state... [id=terranix] vault_policy.infra: Refreshing state... [id=infra] vault_auth_backend.approle: Refreshing state... [id=approle] vault_policy.ci: Refreshing state... [id=ci] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_policy.devops: Refreshing state... [id=devops] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s vault_policy.shared_read: Refreshing state... [id=shared-read] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] data.vault_auth_backend.token: Reading... vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00] data.vault_auth_backend.token: Read complete after 0s [id=token] vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01] vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["tartan-01"]: Refreshing state... [id=auth/approle/role/tartan-01] vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 18. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 19. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/rkj9gn6ikjn7yijhqkbbfhxixrpicgid-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 20. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/xc4lxb832rk23ndxfffskk695867g60s-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 21. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/xqxh6acvlfm25snkh8ngp0kdnn5smclf-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing svalabs/forgejo v1.7.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed svalabs/forgejo v1.7.0 (unauthenticated) - Using svalabs/forgejo v1.7.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.forgejo_repository.kennel: Reading... data.forgejo_repository.kennel: Read complete after 0s [name=kennel] forgejo_repository_webhook.kennel_renovate: Refreshing state... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 22. project: `search-console` dir: `.` workspace: `search-console` <details><summary>Show Output</summary> ```diff copying 2 paths... copying path '/nix/store/6p1870a8swj71hw603f1biw7is8pkdj3-openbao-google-token.drv' to 'daemon'... copying path '/nix/store/x8x9ayg50n4wl80k4j60vlzbzfj3j3cw-config.tf.json.drv' to 'daemon'... copying path '/nix/store/aa7i752awnz9k2fkm840fixm62kq504a-ShellCheck-0.11.0' from 'http://localhost:5000'... copying 0 paths... copying 1 paths... copying path '/nix/store/z5gmh2f0yn773f84r1x84czcng97ac6x-openbao-google-token' from 'ssh-ng://eu.nixbuild.net'... ✔ config.tf.json.drv (0s) ✔ openbao-google-token (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/google versions matching "~> 7.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installing hashicorp/google v7.46.2 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory - Installed hashicorp/google v7.46.2 (unauthenticated) - Using hashicorp/google v7.46.2 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/google │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.google_site_verification_token.scottygo_com: Reading... data.google_site_verification_token.terrier_build: Reading... data.google_site_verification_token.collegecart_org: Reading... data.google_site_verification_token.cmumaps_com: Reading... data.google_site_verification_token.rent-pgh_com: Reading... data.google_site_verification_token.doggylabs_org: Reading... data.google_site_verification_token.cmucourses_com: Reading... data.google_site_verification_token.scottylabs_net: Reading... data.google_site_verification_token.tartanhacks_com: Reading... data.google_site_verification_token.scottylabs_org: Reading... data.google_site_verification_token.scottygo_com: Read complete after 0s [id=scottygo.com] data.google_site_verification_token.tartanhacks_com: Read complete after 0s [id=tartanhacks.com] data.google_site_verification_token.cmu_do: Reading... data.google_site_verification_token.cmugpt_com: Reading... data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org] data.google_site_verification_token.tartan_vote: Reading... data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com] data.google_site_verification_token.cmu_lol: Reading... data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do] data.google_site_verification_token.cmubulletin_com: Reading... data.google_site_verification_token.tartan_vote: Read complete after 0s [id=tartan.vote] data.google_site_verification_token.cmu_courses: Reading... data.google_site_verification_token.cmugpt_com: Read complete after 0s [id=cmugpt.com] data.google_site_verification_token.cmuinsta_com: Reading... data.google_site_verification_token.cmumaps_com: Read complete after 0s [id=cmumaps.com] data.google_site_verification_token.andrew-inbox_com: Reading... data.google_site_verification_token.rent-pgh_com: Read complete after 0s [id=rent-pgh.com] data.google_site_verification_token.scottylabs_org: Read complete after 0s [id=scottylabs.org] data.google_site_verification_token.terrier_build: Read complete after 0s [id=terrier.build] data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org] data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net] data.google_site_verification_token.cmu_dev: Reading... data.google_site_verification_token.cmu_homes: Reading... data.google_site_verification_token.cmuservice_shop: Reading... data.google_site_verification_token.scotty_lol: Reading... data.google_site_verification_token.cmustudy_com: Reading... data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol] data.google_site_verification_token.cmu_guide: Reading... data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com] data.google_site_verification_token.scottylabs_dev: Reading... data.google_site_verification_token.cmu_courses: Read complete after 0s [id=cmu.courses] data.google_site_verification_token.cmuhousing_com: Reading... data.google_site_verification_token.cmuinsta_com: Read complete after 0s [id=cmuinsta.com] data.google_site_verification_token.tartanhacks_org: Reading... data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com] data.google_site_verification_token.cmueats_com: Reading... data.google_site_verification_token.cmu_dev: Read complete after 0s [id=cmu.dev] data.google_site_verification_token.cmuservice_shop: Read complete after 0s [id=cmuservice.shop] data.google_site_verification_token.roomies_live: Reading... data.google_site_verification_token.cmucal_com: Reading... data.google_site_verification_token.cmustudy_com: Read complete after 0s [id=cmustudy.com] data.google_site_verification_token.scotty_lol: Read complete after 0s [id=scotty.lol] data.google_site_verification_token.occ_build: Reading... data.google_site_verification_token.cmu_quest: Reading... data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide] data.google_site_verification_token.scottylabs_dev: Read complete after 0s [id=scottylabs.dev] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... data.google_site_verification_token.cmu_homes: Read complete after 0s [id=cmu.homes] data.google_site_verification_token.cmuhousing_com: Read complete after 0s [id=cmuhousing.com] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org] data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live] data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest] data.google_site_verification_token.cmueats_com: Read complete after 0s [id=cmueats.com] data.google_site_verification_token.occ_build: Read complete after 0s [id=occ.build] data.google_site_verification_token.cmucal_com: Read complete after 1s [id=cmucal.com] cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb] cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe] cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857] cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb] cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790] cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f] cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b] cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493] cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f] cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3] cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc] cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14] cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978] cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40] cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4] cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4] cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234] cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237] cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57] cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43] cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169] cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666] cloudflare_dns_record.this["scottygo.com-search-console"]: Refreshing state... [id=f842d9865ff180039ca1d4feb4997c42] cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0] cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199] cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d] cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116] cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a] cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c] cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4] cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a] cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com] google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol] google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide] google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop] google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com] google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net] google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev] google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest] google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com] google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com] google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com] google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build] google_site_verification_web_resource.scottygo_com: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com] google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com] google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org] google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev] google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org] google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com] google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com] google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com] google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com] google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote] google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com] google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com] google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org] google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do] google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol] google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes] google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build] google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org] google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live] google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses] google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org] google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org] google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org] google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org] google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org] google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org] google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org] google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org] google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org] google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org] google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org] google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org] google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org] google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org] google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org] google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org] google_site_verification_owner.scottygo_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/admin@scottylabs.org] google_site_verification_owner.scottygo_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/ops@scottylabs.org] google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org] google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org] google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org] google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org] google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org] google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org] google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org] google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org] google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org] google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org] google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org] google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org] google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org] google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org] google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org] google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org] google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org] google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org] google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org] google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org] google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org] google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org] google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org] google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org] google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org] google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org] google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org] google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org] google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org] google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org] google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org] google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org] google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org] google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org] google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org] google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org] google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org] google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org] google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org] google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org] google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org] google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org] google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org] google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org] google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org] google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p search-console ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsearch-console%252Fsearch-console) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p search-console ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 22 projects, 0 with changes, 22 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

kennethz referenced this pull request 2026-10-31 21:20:07 +00:00

WIP: refactor: migrate secrets from agenix to sops-nix #194

scottylabs-bot referenced this pull request 2026-10-31 21:20:11 +00:00

WIP: refactor: migrate secrets from agenix to sops-nix #194

scottylabs-bot referenced this pull request 2026-10-31 21:20:20 +00:00

WIP: refactor: migrate secrets from agenix to sops-nix #194

scottylabs-bot referenced this pull request 2026-10-31 22:18:45 +00:00

fix: get CI building on the aarch64 runner again #195

kennethz added 3 commits 2026-11-01 15:23:26 +00:00

fix: skip semgrep in the devenv shell on aarch64-linux ... 76fc2b6350

8842761 moved the devenv nixpkgs to semgrep 1.180.0, whose semgrep-core
aarch64 binary makes patchelf 0.19.2 abort (Assertion `splitIndex == -1'
in shiftFile, exit 134). The shell can't be built on the aarch64 runner,
so every CI job has failed since. Other platforms keep semgrep.

fix: expose flake outputs for aarch64-linux ... 34078d5134

The CI build job runs on the aarch64 runner and builds each kennel site
for its own system, so `nix build .#docs` failed with no
packages.aarch64-linux.docs once the devenv shell built again.

Merge remote-tracking branch 'origin/fix/ci-semgrep-aarch64' into fix/vault-agent-file-paths 4c3ff6f000

scottylabs-bot referenced this pull request 2026-11-01 15:24:01 +00:00

WIP: refactor: migrate secrets from agenix to sops-nix #194

scottylabs-bot commented 2026-11-01 15:24:03 +00:00

Owner

Copy link

Plan Error

cannot run "plan": pull request 193 is currently locked by "plan" for commit 4c3ff6f.
Wait until the previous command is complete and try again

• Commit: 4c3ff6f000a2a95718af07e1c9601b99c48ea88b
• Multiple Atlantis jobs are currently running for this commit.

**Plan Error** ``` cannot run "plan": pull request 193 is currently locked by "plan" for commit 4c3ff6f. Wait until the previous command is complete and try again ``` - Commit: [4c3ff6f000a2a95718af07e1c9601b99c48ea88b](https://git.cmu.dev/ScottyLabs/infrastructure/pulls/193/commits/4c3ff6f000a2a95718af07e1c9601b99c48ea88b) - Multiple Atlantis jobs are currently running for this commit.

scottylabs-bot referenced this pull request 2026-11-01 15:24:05 +00:00

WIP: refactor: migrate secrets from agenix to sops-nix #194

scottylabs-bot commented 2026-11-01 15:24:23 +00:00

Owner

Copy link

Ran Plan for 22 projects:

1. project: governance dir: . workspace: governance
2. project: forgejo dir: . workspace: forgejo
3. project: mail dir: . workspace: mail
4. project: occ dir: . workspace: occ
5. project: litellm dir: . workspace: litellm
6. project: nixbot dir: . workspace: nixbot
7. project: cloudflare-tokens dir: . workspace: cloudflare-tokens
8. project: observability dir: . workspace: observability
9. project: matrix dir: . workspace: matrix
10. project: atlantis dir: . workspace: atlantis
11. project: headscale dir: . workspace: headscale
12. project: garage-webadmin dir: . workspace: garage-webadmin
13. project: hosts dir: . workspace: hosts
14. project: kennel dir: . workspace: kennel
15. project: keycloak dir: . workspace: keycloak
16. project: snot dir: . workspace: snot
17. project: posthog dir: . workspace: posthog
18. project: openbao dir: . workspace: openbao
19. project: ricochet dir: . workspace: ricochet
20. project: webhook dir: . workspace: webhook
21. project: vaultwarden dir: . workspace: vaultwarden
22. project: search-console dir: . workspace: search-console

---

1. project: governance dir: . workspace: governance

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
vault_policy.governance: Refreshing state... [id=governance]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p governance
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p governance
  

No changes. Your infrastructure matches the configuration.

---

2. project: forgejo dir: . workspace: forgejo

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p forgejo
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p forgejo
  

No changes. Your infrastructure matches the configuration.

---

3. project: mail dir: . workspace: mail

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871]
cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c]
cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50]
cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a]
cloudflare_dns_record.this["cmu-dev-dmarc"]: Refreshing state... [id=0d3fd67366a456cee1c6d14be0dd6b6f]
cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a]
cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd]
cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677]
cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d]
cloudflare_dns_record.this["scottylabs-org-dmarc"]: Refreshing state... [id=ea71a2845b01a4734db1a0f6233eb1d7]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p mail
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p mail
  

No changes. Your infrastructure matches the configuration.

---

4. project: occ dir: . workspace: occ

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 1s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 1s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p occ
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p occ
  

No changes. Your infrastructure matches the configuration.

---

5. project: litellm dir: . workspace: litellm

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.litellm_salt_key: Refreshing state... [id=none]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p litellm
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p litellm
  

No changes. Your infrastructure matches the configuration.

---

6. project: nixbot dir: . workspace: nixbot

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.nixbot_forgejo: Refreshing state... [id=none]
forgejo_user.nixbot: Refreshing state...
forgejo_team.nixbot: Refreshing state... [name=nixbot]
forgejo_team_member.nixbot: Refreshing state...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731]
cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f]
vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot]
vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p nixbot
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p nixbot
  

No changes. Your infrastructure matches the configuration.

---

7. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.cloudflare_api_token_permission_groups_list.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
data.cloudflare_api_token_permission_groups_list.all: Read complete after 0s
cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71]
cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b]
cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2]
cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04]
cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012]
vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp]
vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns]
vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel]
vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail]
vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts]

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p cloudflare-tokens
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p cloudflare-tokens
  

No changes. Your infrastructure matches the configuration.

---

8. project: observability dir: . workspace: observability

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p observability
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p observability
  

No changes. Your infrastructure matches the configuration.

---

9. project: matrix dir: . workspace: matrix

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p matrix
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p matrix
  

No changes. Your infrastructure matches the configuration.

---

10. project: atlantis dir: . workspace: atlantis

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
data.forgejo_repository.governance: Read complete after 0s [name=governance]
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
forgejo_repository_webhook.governance: Refreshing state...
forgejo_repository_webhook.infrastructure: Refreshing state...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p atlantis
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p atlantis
  

No changes. Your infrastructure matches the configuration.

---

11. project: headscale dir: . workspace: headscale

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p headscale
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p headscale
  

No changes. Your infrastructure matches the configuration.

---

12. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p garage-webadmin
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p garage-webadmin
  

No changes. Your infrastructure matches the configuration.

---

13. project: hosts dir: . workspace: hosts

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849]
cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e]
cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4]
cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696]
cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p hosts
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p hosts
  

No changes. Your infrastructure matches the configuration.

---

14. project: kennel dir: . workspace: kennel

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_policy.kennel: Refreshing state... [id=kennel]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p kennel
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p kennel
  

No changes. Your infrastructure matches the configuration.

---

15. project: keycloak dir: . workspace: keycloak

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.vault_kv_secret_v2.keycloak_idp: Reading...
ephemeral.vault_kv_secret_v2.forgejo_idp: Opening...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.master: Reading...
data.keycloak_realm.labrador: Reading...
keycloak_realm.scottylabs: Refreshing state... [id=scottylabs]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.master: Read complete after 0s [id=master]
data.keycloak_role.master_admin: Reading...
keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4]
data.keycloak_realm.labrador: Read complete after 0s [id=labrador]
data.keycloak_openid_client.labrador_realm_management: Reading...
data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.labrador_identity_links: Refreshing state... [id=7c7291d7-ae37-489f-9340-80be842169d5]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
data.keycloak_openid_client.labrador_realm_management: Read complete after 0s [id=b21eb763-41d0-41c7-a1d4-786ddd8961e0]
keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad]
keycloak_openid_client_service_account_role.labrador_identity_links["view-identity-providers"]: Refreshing state... [id=d8ee7c50-a3df-445a-8f25-6242ba792c3b/2a48cec1-d827-415c-818d-646aca4b9fbf]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_openid_client_service_account_role.labrador_identity_links["view-users"]: Refreshing state... [id=d8ee7c50-a3df-445a-8f25-6242ba792c3b/1638ca45-3d3b-4779-ab8b-9264383df21d]
keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea]
keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s
keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4]
ephemeral.vault_kv_secret_v2.forgejo_idp: Closing...
ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.keycloak_idp,
│   on config.tf.json line 30, in data.vault_kv_secret_v2.keycloak_idp:
│   30:       }
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 503, in resource.keycloak_oidc_google_identity_provider.google:
│  503:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵

• ▶️ To apply this plan, comment:

  atlantis apply -p keycloak
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p keycloak
  

No changes. Your infrastructure matches the configuration.

---

16. project: snot dir: . workspace: snot

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p snot
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p snot
  

No changes. Your infrastructure matches the configuration.

---

17. project: posthog dir: . workspace: posthog

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of posthog/posthog from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed posthog/posthog v1.0.27
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p posthog
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p posthog
  

No changes. Your infrastructure matches the configuration.

---

18. project: openbao dir: . workspace: openbao

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.ci: Refreshing state... [id=ci]
data.vault_auth_backend.token: Reading...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_policy.devops: Refreshing state... [id=devops]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_identity_oidc_key.terranix: Refreshing state... [id=terranix]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.vault_auth_backend.token: Read complete after 0s [id=token]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
vault_policy.infra: Refreshing state... [id=infra]
vault_mount.kv: Refreshing state... [id=secret]
vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01]
vault_approle_auth_backend_role.host["tartan-01"]: Refreshing state... [id=auth/approle/role/tartan-01]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00]
vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c]
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p openbao
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p openbao
  

No changes. Your infrastructure matches the configuration.

---

19. project: ricochet dir: . workspace: ricochet

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p ricochet
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p ricochet
  

No changes. Your infrastructure matches the configuration.

---

20. project: webhook dir: . workspace: webhook

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.forgejo_repository.kennel: Reading...
data.forgejo_repository.kennel: Read complete after 0s [name=kennel]
forgejo_repository_webhook.kennel_renovate: Refreshing state...
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p webhook
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p webhook
  

No changes. Your infrastructure matches the configuration.

---

21. project: vaultwarden dir: . workspace: vaultwarden

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p vaultwarden
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p vaultwarden
  

No changes. Your infrastructure matches the configuration.

---

22. project: search-console dir: . workspace: search-console

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/google from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed hashicorp/google v7.46.2
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.google_site_verification_token.cmu_homes: Reading...
data.google_site_verification_token.cmugpt_com: Reading...
data.google_site_verification_token.cmustudy_com: Reading...
data.google_site_verification_token.occ_build: Reading...
data.google_site_verification_token.scottylabs_org: Reading...
data.google_site_verification_token.cmuhousing_com: Reading...
data.google_site_verification_token.rent-pgh_com: Reading...
data.google_site_verification_token.terrier_build: Reading...
data.google_site_verification_token.cmumaps_com: Reading...
data.google_site_verification_token.scottylabs_org: Read complete after 1s [id=scottylabs.org]
data.google_site_verification_token.cmu_quest: Reading...
data.google_site_verification_token.cmugpt_com: Read complete after 1s [id=cmugpt.com]
data.google_site_verification_token.cmustudy_com: Read complete after 1s [id=cmustudy.com]
data.google_site_verification_token.cmuinsta_com: Reading...
data.google_site_verification_token.cmu_dev: Reading...
data.google_site_verification_token.cmumaps_com: Read complete after 1s [id=cmumaps.com]
data.google_site_verification_token.terrier_build: Read complete after 1s [id=terrier.build]
data.google_site_verification_token.collegecart_org: Reading...
data.google_site_verification_token.andrew-inbox_com: Reading...
data.google_site_verification_token.cmuhousing_com: Read complete after 1s [id=cmuhousing.com]
data.google_site_verification_token.tartan_vote: Reading...
data.google_site_verification_token.cmu_homes: Read complete after 1s [id=cmu.homes]
data.google_site_verification_token.cmuservice_shop: Reading...
data.google_site_verification_token.cmu_dev: Read complete after 0s [id=cmu.dev]
data.google_site_verification_token.scottylabs_net: Reading...
data.google_site_verification_token.cmucourses_com: Reading...
data.google_site_verification_token.rent-pgh_com: Read complete after 1s [id=rent-pgh.com]
data.google_site_verification_token.roomies_live: Reading...
data.google_site_verification_token.tartan_vote: Read complete after 0s [id=tartan.vote]
data.google_site_verification_token.cmu_courses: Reading...
data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org]
data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com]
data.google_site_verification_token.tartanhacks_org: Reading...
data.google_site_verification_token.scottylabs_dev: Reading...
data.google_site_verification_token.cmuinsta_com: Read complete after 0s [id=cmuinsta.com]
data.google_site_verification_token.tartanhacks_com: Reading...
data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest]
data.google_site_verification_token.doggylabs_org: Reading...
data.google_site_verification_token.occ_build: Read complete after 1s [id=occ.build]
data.google_site_verification_token.scottygo_com: Reading...
data.google_site_verification_token.cmuservice_shop: Read complete after 0s [id=cmuservice.shop]
data.google_site_verification_token.cmucal_com: Reading...
data.google_site_verification_token.cmu_courses: Read complete after 0s [id=cmu.courses]
data.google_site_verification_token.scotty_lol: Reading...
data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live]
data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net]
data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org]
data.google_site_verification_token.cmubulletin_com: Reading...
data.google_site_verification_token.cmu_do: Reading...
data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com]
data.google_site_verification_token.cmu_guide: Reading...
data.google_site_verification_token.cmueats_com: Reading...
data.google_site_verification_token.scottylabs_dev: Read complete after 0s [id=scottylabs.dev]
data.google_site_verification_token.cmu_lol: Reading...
data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org]
data.google_site_verification_token.tartanhacks_com: Read complete after 0s [id=tartanhacks.com]
data.keycloak_realm.scottylabs: Reading...
data.google_site_verification_token.scottygo_com: Read complete after 0s [id=scottygo.com]
data.google_site_verification_token.cmucal_com: Read complete after 0s [id=cmucal.com]
data.google_site_verification_token.scotty_lol: Read complete after 0s [id=scotty.lol]
data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide]
data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com]
data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do]
data.google_site_verification_token.cmueats_com: Read complete after 0s [id=cmueats.com]
data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe]
cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43]
cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d]
cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4]
cloudflare_dns_record.this["scottygo.com-search-console"]: Refreshing state... [id=f842d9865ff180039ca1d4feb4997c42]
cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b]
cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493]
cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc]
cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116]
cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790]
cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234]
cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3]
cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f]
cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57]
cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666]
cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f]
cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb]
cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14]
cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0]
cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4]
cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a]
cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978]
cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169]
cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb]
cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a]
cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb]
cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237]
cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857]
cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c]
cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199]
cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40]
cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4]
google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org]
google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com]
google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com]
google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com]
google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop]
google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org]
google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev]
google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com]
google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build]
google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net]
google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build]
google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com]
google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org]
google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com]
google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org]
google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote]
google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes]
google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do]
google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live]
google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest]
google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com]
google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses]
google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com]
google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com]
google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com]
google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol]
google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com]
google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com]
google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev]
google_site_verification_web_resource.scottygo_com: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com]
google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol]
google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide]
google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org]
google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org]
google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org]
google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org]
google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org]
google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org]
google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org]
google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org]
google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org]
google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org]
google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org]
google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org]
google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org]
google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org]
google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org]
google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org]
google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org]
google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org]
google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org]
google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org]
google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org]
google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org]
google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org]
google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org]
google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org]
google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org]
google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org]
google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org]
google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org]
google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org]
google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org]
google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org]
google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org]
google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org]
google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org]
google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org]
google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org]
google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org]
google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org]
google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org]
google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org]
google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org]
google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org]
google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org]
google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org]
google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org]
google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org]
google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org]
google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org]
google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org]
google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org]
google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org]
google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org]
google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org]
google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org]
google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org]
google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org]
google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org]
google_site_verification_owner.scottygo_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/ops@scottylabs.org]
google_site_verification_owner.scottygo_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/admin@scottylabs.org]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

• ▶️ To apply this plan, comment:

  atlantis apply -p search-console
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p search-console
  

No changes. Your infrastructure matches the configuration.

---

Plan Summary

22 projects, 0 with changes, 22 with no changes, 0 failed

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for 22 projects: 1. project: `governance` dir: `.` workspace: `governance` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `occ` dir: `.` workspace: `occ` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `search-console` dir: `.` workspace: `search-console` --- ### 1. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... vault_policy.governance: Refreshing state... [id=governance] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `mail` dir: `.` workspace: `mail` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871] cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c] cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50] cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a] cloudflare_dns_record.this["cmu-dev-dmarc"]: Refreshing state... [id=0d3fd67366a456cee1c6d14be0dd6b6f] cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a] cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd] cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677] cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d] cloudflare_dns_record.this["scottylabs-org-dmarc"]: Refreshing state... [id=ea71a2845b01a4734db1a0f6233eb1d7] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p mail ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmail%252Fmail) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p mail ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `occ` dir: `.` workspace: `occ` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 1s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 1s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p occ ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Focc%252Focc) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p occ ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] random_password.litellm_salt_key: Refreshing state... [id=none] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.nixbot_forgejo: Refreshing state... [id=none] forgejo_user.nixbot: Refreshing state... forgejo_team.nixbot: Refreshing state... [name=nixbot] forgejo_team_member.nixbot: Refreshing state... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731] cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f] vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot] vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p nixbot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fnixbot%252Fnixbot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p nixbot ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.cloudflare_api_token_permission_groups_list.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s data.cloudflare_api_token_permission_groups_list.all: Read complete after 0s cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71] cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b] cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2] cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04] cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012] vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp] vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns] vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel] vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail] vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p cloudflare-tokens ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fcloudflare-tokens%252Fcloudflare-tokens) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p cloudflare-tokens ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] data.forgejo_repository.governance: Read complete after 0s [name=governance] random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] forgejo_repository_webhook.governance: Refreshing state... forgejo_repository_webhook.infrastructure: Refreshing state... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849] cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e] cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4] cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696] cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_policy.kennel: Refreshing state... [id=kennel] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.vault_kv_secret_v2.keycloak_idp: Reading... ephemeral.vault_kv_secret_v2.forgejo_idp: Opening... ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.master: Reading... data.keycloak_realm.labrador: Reading... keycloak_realm.scottylabs: Refreshing state... [id=scottylabs] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.master: Read complete after 0s [id=master] data.keycloak_role.master_admin: Reading... keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4] data.keycloak_realm.labrador: Read complete after 0s [id=labrador] data.keycloak_openid_client.labrador_realm_management: Reading... data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.labrador_identity_links: Refreshing state... [id=7c7291d7-ae37-489f-9340-80be842169d5] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] data.keycloak_openid_client.labrador_realm_management: Read complete after 0s [id=b21eb763-41d0-41c7-a1d4-786ddd8961e0] keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad] keycloak_openid_client_service_account_role.labrador_identity_links["view-identity-providers"]: Refreshing state... [id=d8ee7c50-a3df-445a-8f25-6242ba792c3b/2a48cec1-d827-415c-818d-646aca4b9fbf] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_openid_client_service_account_role.labrador_identity_links["view-users"]: Refreshing state... [id=d8ee7c50-a3df-445a-8f25-6242ba792c3b/1638ca45-3d3b-4779-ab8b-9264383df21d] keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea] keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing... ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4] ephemeral.vault_kv_secret_v2.forgejo_idp: Closing... ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.keycloak_idp, │ on config.tf.json line 30, in data.vault_kv_secret_v2.keycloak_idp: │ 30: } │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 503, in resource.keycloak_oidc_google_identity_provider.google: │ 503: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of posthog/posthog from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed posthog/posthog v1.0.27 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 18. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.ci: Refreshing state... [id=ci] data.vault_auth_backend.token: Reading... ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_auth_backend.approle: Refreshing state... [id=approle] vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_policy.devops: Refreshing state... [id=devops] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_identity_oidc_key.terranix: Refreshing state... [id=terranix] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.vault_auth_backend.token: Read complete after 0s [id=token] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s vault_policy.infra: Refreshing state... [id=infra] vault_mount.kv: Refreshing state... [id=secret] vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01] vault_approle_auth_backend_role.host["tartan-01"]: Refreshing state... [id=auth/approle/role/tartan-01] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00] vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c] cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 19. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 20. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.forgejo_repository.kennel: Reading... data.forgejo_repository.kennel: Read complete after 0s [name=kennel] forgejo_repository_webhook.kennel_renovate: Refreshing state... cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 21. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.keycloak_realm.scottylabs: Reading... cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 22. project: `search-console` dir: `.` workspace: `search-console` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/google from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed hashicorp/google v7.46.2 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.google_site_verification_token.cmu_homes: Reading... data.google_site_verification_token.cmugpt_com: Reading... data.google_site_verification_token.cmustudy_com: Reading... data.google_site_verification_token.occ_build: Reading... data.google_site_verification_token.scottylabs_org: Reading... data.google_site_verification_token.cmuhousing_com: Reading... data.google_site_verification_token.rent-pgh_com: Reading... data.google_site_verification_token.terrier_build: Reading... data.google_site_verification_token.cmumaps_com: Reading... data.google_site_verification_token.scottylabs_org: Read complete after 1s [id=scottylabs.org] data.google_site_verification_token.cmu_quest: Reading... data.google_site_verification_token.cmugpt_com: Read complete after 1s [id=cmugpt.com] data.google_site_verification_token.cmustudy_com: Read complete after 1s [id=cmustudy.com] data.google_site_verification_token.cmuinsta_com: Reading... data.google_site_verification_token.cmu_dev: Reading... data.google_site_verification_token.cmumaps_com: Read complete after 1s [id=cmumaps.com] data.google_site_verification_token.terrier_build: Read complete after 1s [id=terrier.build] data.google_site_verification_token.collegecart_org: Reading... data.google_site_verification_token.andrew-inbox_com: Reading... data.google_site_verification_token.cmuhousing_com: Read complete after 1s [id=cmuhousing.com] data.google_site_verification_token.tartan_vote: Reading... data.google_site_verification_token.cmu_homes: Read complete after 1s [id=cmu.homes] data.google_site_verification_token.cmuservice_shop: Reading... data.google_site_verification_token.cmu_dev: Read complete after 0s [id=cmu.dev] data.google_site_verification_token.scottylabs_net: Reading... data.google_site_verification_token.cmucourses_com: Reading... data.google_site_verification_token.rent-pgh_com: Read complete after 1s [id=rent-pgh.com] data.google_site_verification_token.roomies_live: Reading... data.google_site_verification_token.tartan_vote: Read complete after 0s [id=tartan.vote] data.google_site_verification_token.cmu_courses: Reading... data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org] data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com] data.google_site_verification_token.tartanhacks_org: Reading... data.google_site_verification_token.scottylabs_dev: Reading... data.google_site_verification_token.cmuinsta_com: Read complete after 0s [id=cmuinsta.com] data.google_site_verification_token.tartanhacks_com: Reading... data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest] data.google_site_verification_token.doggylabs_org: Reading... data.google_site_verification_token.occ_build: Read complete after 1s [id=occ.build] data.google_site_verification_token.scottygo_com: Reading... data.google_site_verification_token.cmuservice_shop: Read complete after 0s [id=cmuservice.shop] data.google_site_verification_token.cmucal_com: Reading... data.google_site_verification_token.cmu_courses: Read complete after 0s [id=cmu.courses] data.google_site_verification_token.scotty_lol: Reading... data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live] data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net] data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org] data.google_site_verification_token.cmubulletin_com: Reading... data.google_site_verification_token.cmu_do: Reading... data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com] data.google_site_verification_token.cmu_guide: Reading... data.google_site_verification_token.cmueats_com: Reading... data.google_site_verification_token.scottylabs_dev: Read complete after 0s [id=scottylabs.dev] data.google_site_verification_token.cmu_lol: Reading... data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org] data.google_site_verification_token.tartanhacks_com: Read complete after 0s [id=tartanhacks.com] data.keycloak_realm.scottylabs: Reading... data.google_site_verification_token.scottygo_com: Read complete after 0s [id=scottygo.com] data.google_site_verification_token.cmucal_com: Read complete after 0s [id=cmucal.com] data.google_site_verification_token.scotty_lol: Read complete after 0s [id=scotty.lol] data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide] data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com] data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do] data.google_site_verification_token.cmueats_com: Read complete after 0s [id=cmueats.com] data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe] cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43] cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d] cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4] cloudflare_dns_record.this["scottygo.com-search-console"]: Refreshing state... [id=f842d9865ff180039ca1d4feb4997c42] cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b] cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493] cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc] cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116] cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790] cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234] cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3] cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f] cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57] cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666] cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f] cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb] cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14] cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0] cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4] cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a] cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978] cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169] cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb] cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a] cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb] cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237] cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857] cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c] cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199] cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40] cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4] google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org] google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com] google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com] google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com] google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop] google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org] google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev] google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com] google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build] google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net] google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build] google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com] google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org] google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com] google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org] google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote] google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes] google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do] google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live] google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest] google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com] google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses] google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com] google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com] google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com] google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol] google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com] google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com] google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev] google_site_verification_web_resource.scottygo_com: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com] google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol] google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide] google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org] google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org] google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org] google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org] google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org] google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org] google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org] google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org] google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org] google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org] google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org] google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org] google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org] google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org] google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org] google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org] google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org] google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org] google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org] google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org] google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org] google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org] google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org] google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org] google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org] google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org] google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org] google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org] google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org] google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org] google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org] google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org] google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org] google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org] google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org] google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org] google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org] google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org] google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org] google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org] google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org] google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org] google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org] google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org] google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org] google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org] google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org] google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org] google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org] google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org] google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org] google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org] google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org] google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org] google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org] google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org] google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org] google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org] google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org] google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org] google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org] google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org] google_site_verification_owner.scottygo_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/ops@scottylabs.org] google_site_verification_owner.scottygo_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/admin@scottylabs.org] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p search-console ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsearch-console%252Fsearch-console) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p search-console ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 22 projects, 0 with changes, 22 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

kennethz commented 2026-11-01 15:30:55 +00:00

Author

Member

Copy link

atlantis unlock

atlantis unlock

scottylabs-bot commented 2026-11-01 15:30:56 +00:00

Owner

Copy link

All Atlantis locks for this PR have been unlocked and plans discarded

All Atlantis locks for this PR have been unlocked and plans discarded

All checks were successful

Hide checks

atlantis/plan: cloudflare-tokens No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: observability No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: matrix No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: atlantis No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: headscale No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: garage-webadmin No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: snot No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: posthog No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: openbao No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: ricochet No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: webhook No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: vaultwarden No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: search-console No changes. Your infrastructure matches the configuration.

Details

atlantis/plan 22/22 projects planned successfully.

atlantis/apply 22/22 projects up to date.

atlantis/plan: governance No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: forgejo No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: mail No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: occ No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: litellm No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: nixbot No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: hosts No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: kennel No changes. Your infrastructure matches the configuration.

Details

atlantis/plan: keycloak No changes. Your infrastructure matches the configuration.

Details

CI / check-1 (pull_request) Successful in 1m23s

Details

CI / build (pull_request) Successful in 1m25s

Details

CI / check (pull_request) Successful in 0s

Details

atlantis/pre_workflow_hook: Fetch flake inputs before parallel plans succeeded.

Details

atlantis/pre_workflow_hook: Generate atlantis.yaml from the flake succeeded.

Details

nixbot/nix-eval evaluation succeeded in 0s (1 warning)

Details

nixbot/nix-build 0 attributes built

Details

kennel/build build succeeded

Details

kennel/deploy deployment healthy

This pull request doesn't have enough approvals yet. 0 of 1 approvals granted.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin fix/vault-agent-file-paths:fix/vault-agent-file-paths

git switch fix/vault-agent-file-paths

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

needs/docs

Must have documentation written

  

needs/research

Discuss the ideal implementation with the tech lead

  

needs/upstream

Needs a contribution to an upstream project

  

type/bug

Something not working as intended

  

type/external

Lives outside of code

  

type/feature

New functionality

  

type/refactor

Improving existing code

  

urgency

high

This is currently causing issues

  

urgency

immediate

This is making a project or feature unusable

  

urgency

low

This can happen whenever

  

urgency

medium

This is expected to cause issues soon

No labels

needs/docs

needs/research

needs/upstream

type/bug

type/external

type/feature

type/refactor

urgency

high

urgency

immediate

urgency

low

urgency

medium

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

ScottyLabs/infrastructure!193

No description provided.