ScottyLabs/infrastructure
Watch
13
0
Fork
You've already forked infrastructure
 3
Code Issues 41 Pull requests 5 Projects Releases Packages Wiki Activity Actions

feat: add cmucal.com zone for kennel custom domains #148

Closed
jalenluorion wants to merge 1011 commits from jalenluorion:feat/cmucal-zone into main
pull from: jalenluorion:feat/cmucal-zone
merge into: ScottyLabs:main
Conversation 13 Commits 1011 Files changed 194 +1
jalenluorion commented 2026-09-18 22:37:00 +00:00
Member
Copy link

Adds the cmucal.com Cloudflare zone to services.kennel.domains.cloudflare.zones.

Why

CMU Cal moved off Vercel/Railway into kennel (ScottyLabs/cal) and is serving today on cal.scottylabs.org / api.cal.scottylabs.org. To put it back on its real domain, kennel has to resolve the service's customDomain to a zone ID, and that lookup only reads this map - an unlisted domain means it can't upsert the tunnel CNAME, so the deploy comes up with no public route.

What

One line:

"cmucal.com" = "b485862979e222b68b5980cc50e8c63b";

The zone is already in the ScottyLabs Cloudflare account; this only teaches kennel about it. No DNS records change as a result of this PR on its own - kennel creates them when the cal repo flips its customDomain, which I'll do in a follow-up after this applies.

Risk

Additive, scoped to one project's domain. Nothing else reads this key.

Adds the `cmucal.com` Cloudflare zone to `services.kennel.domains.cloudflare.zones`. ## Why CMU Cal moved off Vercel/Railway into kennel (`ScottyLabs/cal`) and is serving today on `cal.scottylabs.org` / `api.cal.scottylabs.org`. To put it back on its real domain, kennel has to resolve the service's `customDomain` to a zone ID, and that lookup only reads this map - an unlisted domain means it can't upsert the tunnel CNAME, so the deploy comes up with no public route. ## What One line: ```nix "cmucal.com" = "b485862979e222b68b5980cc50e8c63b"; ``` The zone is already in the ScottyLabs Cloudflare account; this only teaches kennel about it. No DNS records change as a result of this PR on its own - kennel creates them when the `cal` repo flips its `customDomain`, which I'll do in a follow-up after this applies. ## Risk Additive, scoped to one project's domain. Nothing else reads this key.
feat: add cmucal.com zone for kennel custom domains
Some checks failed
kennel/build build succeeded
Details
kennel/deploy deployment healthy
atlantis/plan: forgejo No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: snot No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: posthog No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: openbao No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: ricochet No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: governance No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: keycloak No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: headscale No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: matrix No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: observability No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: garage-webadmin No changes. Your infrastructure matches the configuration.
Details
atlantis/plan 17/17 projects planned successfully.
atlantis/apply 17/17 projects up to date.
atlantis/policy_check 0/0 projects had policies checked successfully.
atlantis/plan: hosts No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: litellm No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: kennel No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: vaultwarden No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: atlantis No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: webhook No changes. Your infrastructure matches the configuration.
Details
CI / check (pull_request) Has been cancelled
Details
CI / check-1 (pull_request) Has been cancelled
Details
CI / build (pull_request) Has been cancelled
Details
atlantis/pre_workflow_hook: Generate atlantis.yaml from the flake succeeded.
Details
71857ff5d7 
CMU Cal migrated off Vercel/Railway into kennel and currently serves on
cal.scottylabs.org. Pointing it at its own apex domain needs the zone in
this map: kennel resolves a service's customDomain to a zone ID here
before it can upsert the tunnel CNAME.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
scottylabs-bot commented 2026-09-18 22:37:14 +00:00
Owner
Copy link

Ran Plan for 17 projects:

  1. project: snot dir: . workspace: snot
  2. project: garage-webadmin dir: . workspace: garage-webadmin
  3. project: openbao dir: . workspace: openbao
  4. project: observability dir: . workspace: observability
  5. project: kennel dir: . workspace: kennel
  6. project: governance dir: . workspace: governance
  7. project: litellm dir: . workspace: litellm
  8. project: posthog dir: . workspace: posthog
  9. project: forgejo dir: . workspace: forgejo
  10. project: atlantis dir: . workspace: atlantis
  11. project: hosts dir: . workspace: hosts
  12. project: webhook dir: . workspace: webhook
  13. project: ricochet dir: . workspace: ricochet
  14. project: matrix dir: . workspace: matrix
  15. project: headscale dir: . workspace: headscale
  16. project: keycloak dir: . workspace: keycloak
  17. project: vaultwarden dir: . workspace: vaultwarden

1. project: snot dir: . workspace: snot

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

2. project: garage-webadmin dir: . workspace: garage-webadmin

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

3. project: openbao dir: . workspace: openbao

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

4. project: observability dir: . workspace: observability

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

5. project: kennel dir: . workspace: kennel

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

6. project: governance dir: . workspace: governance

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

7. project: litellm dir: . workspace: litellm

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

8. project: posthog dir: . workspace: posthog

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

9. project: forgejo dir: . workspace: forgejo

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

10. project: atlantis dir: . workspace: atlantis

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

11. project: hosts dir: . workspace: hosts

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

12. project: webhook dir: . workspace: webhook

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

13. project: ricochet dir: . workspace: ricochet

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

14. project: matrix dir: . workspace: matrix

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

15. project: headscale dir: . workspace: headscale

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

16. project: keycloak dir: . workspace: keycloak

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

17. project: vaultwarden dir: . workspace: vaultwarden

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

Plan Summary

17 projects, 0 with changes, 0 with no changes, 17 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 17 projects: 1. project: `snot` dir: `.` workspace: `snot` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` --- ### 1. project: `snot` dir: `.` workspace: `snot` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 2. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 3. project: `openbao` dir: `.` workspace: `openbao` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 4. project: `observability` dir: `.` workspace: `observability` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 5. project: `kennel` dir: `.` workspace: `kennel` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 6. project: `governance` dir: `.` workspace: `governance` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 7. project: `litellm` dir: `.` workspace: `litellm` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 8. project: `posthog` dir: `.` workspace: `posthog` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 9. project: `forgejo` dir: `.` workspace: `forgejo` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 10. project: `atlantis` dir: `.` workspace: `atlantis` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 11. project: `hosts` dir: `.` workspace: `hosts` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 12. project: `webhook` dir: `.` workspace: `webhook` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 13. project: `ricochet` dir: `.` workspace: `ricochet` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 14. project: `matrix` dir: `.` workspace: `matrix` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 15. project: `headscale` dir: `.` workspace: `headscale` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 16. project: `keycloak` dir: `.` workspace: `keycloak` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 17. project: `vaultwarden` dir: `.` workspace: `vaultwarden` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### Plan Summary 17 projects, 0 with changes, 0 with no changes, 17 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
scottylabs-bot commented 2026-09-18 22:37:34 +00:00
Owner
Copy link

Kennel Deployments

Torn down at 2026-09-19 02:31:46 UTC.

<!-- kennel-deployment --> ### Kennel Deployments Torn down at 2026-09-19 02:31:46 UTC.
scottylabs-bot commented 2026-09-18 22:43:14 +00:00
Owner
Copy link

Ran Plan for 17 projects:

  1. project: headscale dir: . workspace: headscale
  2. project: atlantis dir: . workspace: atlantis
  3. project: snot dir: . workspace: snot
  4. project: matrix dir: . workspace: matrix
  5. project: observability dir: . workspace: observability
  6. project: ricochet dir: . workspace: ricochet
  7. project: keycloak dir: . workspace: keycloak
  8. project: litellm dir: . workspace: litellm
  9. project: forgejo dir: . workspace: forgejo
  10. project: hosts dir: . workspace: hosts
  11. project: governance dir: . workspace: governance
  12. project: vaultwarden dir: . workspace: vaultwarden
  13. project: posthog dir: . workspace: posthog
  14. project: kennel dir: . workspace: kennel
  15. project: openbao dir: . workspace: openbao
  16. project: garage-webadmin dir: . workspace: garage-webadmin
  17. project: webhook dir: . workspace: webhook

1. project: headscale dir: . workspace: headscale

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

2. project: atlantis dir: . workspace: atlantis

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

3. project: snot dir: . workspace: snot

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

4. project: matrix dir: . workspace: matrix

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

5. project: observability dir: . workspace: observability

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

6. project: ricochet dir: . workspace: ricochet

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

7. project: keycloak dir: . workspace: keycloak

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

8. project: litellm dir: . workspace: litellm

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

9. project: forgejo dir: . workspace: forgejo

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

10. project: hosts dir: . workspace: hosts

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

11. project: governance dir: . workspace: governance

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

12. project: vaultwarden dir: . workspace: vaultwarden

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

13. project: posthog dir: . workspace: posthog

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

14. project: kennel dir: . workspace: kennel

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

15. project: openbao dir: . workspace: openbao

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

16. project: garage-webadmin dir: . workspace: garage-webadmin

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

17. project: webhook dir: . workspace: webhook

Plan Failed: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

Plan Summary

17 projects, 0 with changes, 0 with no changes, 17 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 17 projects: 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `webhook` dir: `.` workspace: `webhook` --- ### 1. project: `headscale` dir: `.` workspace: `headscale` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 2. project: `atlantis` dir: `.` workspace: `atlantis` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 3. project: `snot` dir: `.` workspace: `snot` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 4. project: `matrix` dir: `.` workspace: `matrix` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 5. project: `observability` dir: `.` workspace: `observability` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 6. project: `ricochet` dir: `.` workspace: `ricochet` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 7. project: `keycloak` dir: `.` workspace: `keycloak` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 8. project: `litellm` dir: `.` workspace: `litellm` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 9. project: `forgejo` dir: `.` workspace: `forgejo` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 10. project: `hosts` dir: `.` workspace: `hosts` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 11. project: `governance` dir: `.` workspace: `governance` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 12. project: `vaultwarden` dir: `.` workspace: `vaultwarden` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 13. project: `posthog` dir: `.` workspace: `posthog` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 14. project: `kennel` dir: `.` workspace: `kennel` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 15. project: `openbao` dir: `.` workspace: `openbao` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 16. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 17. project: `webhook` dir: `.` workspace: `webhook` **Plan Failed**: This project is currently locked by an unapplied plan from pull #146. To continue, delete the lock from #146 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### Plan Summary 17 projects, 0 with changes, 0 with no changes, 17 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
thesuperRL commented 2026-09-18 22:43:42 +00:00
Owner
Copy link

atlantis plan

atlantis plan
scottylabs-bot commented 2026-09-18 22:44:10 +00:00
Owner
Copy link

Ran Plan for 17 projects:

  1. project: posthog dir: . workspace: posthog
  2. project: forgejo dir: . workspace: forgejo
  3. project: governance dir: . workspace: governance
  4. project: snot dir: . workspace: snot
  5. project: openbao dir: . workspace: openbao
  6. project: litellm dir: . workspace: litellm
  7. project: ricochet dir: . workspace: ricochet
  8. project: kennel dir: . workspace: kennel
  9. project: hosts dir: . workspace: hosts
  10. project: vaultwarden dir: . workspace: vaultwarden
  11. project: observability dir: . workspace: observability
  12. project: atlantis dir: . workspace: atlantis
  13. project: matrix dir: . workspace: matrix
  14. project: keycloak dir: . workspace: keycloak
  15. project: garage-webadmin dir: . workspace: garage-webadmin
  16. project: headscale dir: . workspace: headscale
  17. project: webhook dir: . workspace: webhook

1. project: posthog dir: . workspace: posthog

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/posthog': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/posthog": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
this derivation will be built:
  /nix/store/hzxj97dphvxrr4sxgjqakr3h7nz6n80a-config.tf.json.drv
building '/nix/store/hzxj97dphvxrr4sxgjqakr3h7nz6n80a-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (signed, key ID C76001609EE3B136)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

Providers are signed by their developers.
If you'd like to know more about provider signing, you can read about it here:
https://opentofu.org/docs/cli/plugins/signing/

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

2. project: forgejo dir: . workspace: forgejo

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/forgejo': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/forgejo": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
this derivation will be built:
  /nix/store/a0l7446cwz6mr797x1hdqhqvvgr0c7xj-config.tf.json.drv
this path will be fetched (4.1 KiB download, 14.9 KiB unpacked):
  /nix/store/6yfz5ayq5c8nhhf4bb2fs6d72wmkpz99-jq-1.8.2-dev
copying path '/nix/store/6yfz5ayq5c8nhhf4bb2fs6d72wmkpz99-jq-1.8.2-dev' from 'http://localhost:5000'...
building '/nix/store/a0l7446cwz6mr797x1hdqhqvvgr0c7xj-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

3. project: governance dir: . workspace: governance

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/governance': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/governance": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_policy.governance: Refreshing state... [id=governance]
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.cloudflare_zones.all: Read complete after 1s

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 36, in provider.keycloak:
│   36:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
this derivation will be built:
  /nix/store/k3600qmf92l3d3zhhn4yx8vkmkvlmb8z-config.tf.json.drv
building '/nix/store/k3600qmf92l3d3zhhn4yx8vkmkvlmb8z-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

4. project: snot dir: . workspace: snot

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/snot': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/snot": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
this derivation will be built:
  /nix/store/cm4hc4kj893m9c5y2gsb761v14g7ip5h-config.tf.json.drv
building '/nix/store/cm4hc4kj893m9c5y2gsb761v14g7ip5h-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

5. project: openbao dir: . workspace: openbao

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/openbao': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/openbao": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
vault_policy.infra: Refreshing state... [id=infra]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_policy.devops: Refreshing state... [id=devops]
vault_policy.ci: Refreshing state... [id=ci]
vault_mount.kv: Refreshing state... [id=secret]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 34, in provider.keycloak:
│   34:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache...
this derivation will be built:
  /nix/store/nblqbcj4bw2hmrpyhfm2mjmmf616fizf-config.tf.json.drv
building '/nix/store/nblqbcj4bw2hmrpyhfm2mjmmf616fizf-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

6. project: litellm dir: . workspace: litellm

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/litellm': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/litellm": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
data.cloudflare_zones.all: Read complete after 2s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache...
unpacking 'github:numtide/systemd-vaultd/5d18251b7750a3df6b3a70cf654d8d7ef0e73083?narHash=sha256-wMblYGX%2BQAXf2aWtjtRFDyo301%2BPzvlUq6gh3LnrTwQ%3D' into the Git cache...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'...
this derivation will be built:
  /nix/store/iawb9nr26cid1001iq7dsc1b5480x5vg-config.tf.json.drv
building '/nix/store/iawb9nr26cid1001iq7dsc1b5480x5vg-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

7. project: ricochet dir: . workspace: ricochet

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/ricochet': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/ricochet": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache...
this derivation will be built:
  /nix/store/phxd976b332765r8chjf68lx8pv88csr-config.tf.json.drv
building '/nix/store/phxd976b332765r8chjf68lx8pv88csr-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

8. project: kennel dir: . workspace: kennel

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/kennel': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/kennel": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 33, in provider.keycloak:
│   33:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache...
this derivation will be built:
  /nix/store/k06wjggqny07sx29jdbj9cpn81qh0yba-config.tf.json.drv
building '/nix/store/k06wjggqny07sx29jdbj9cpn81qh0yba-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

9. project: hosts dir: . workspace: hosts

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/hosts': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/hosts": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache...
unpacking 'github:numtide/systemd-vaultd/5d18251b7750a3df6b3a70cf654d8d7ef0e73083?narHash=sha256-wMblYGX%2BQAXf2aWtjtRFDyo301%2BPzvlUq6gh3LnrTwQ%3D' into the Git cache...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache...
copying path '/nix/store/8ggr67sci43hlp8ba6rhjrdhhj5490am-source' from 'http://localhost:5000'...
unpacking 'github:zhaofengli/nix-homebrew/09a921d0181146cf6163ec2cc1db7b6fd539a885?narHash=sha256-fEaFq0XgpgWFPLfpq1UK4/8ylHd2T0%2Bfo6O3hKz1LUM%3D' into the Git cache...
this derivation will be built:
  /nix/store/damrkycvnfgqaiscwxwq3wqmln8hv88p-config.tf.json.drv
building '/nix/store/damrkycvnfgqaiscwxwq3wqmln8hv88p-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

10. project: vaultwarden dir: . workspace: vaultwarden

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/vaultwarden': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/vaultwarden": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
this derivation will be built:
  /nix/store/mmp060zm1bx5j4zp6q3kcblp2p5gn1dd-config.tf.json.drv
building '/nix/store/mmp060zm1bx5j4zp6q3kcblp2p5gn1dd-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

11. project: observability dir: . workspace: observability

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/observability': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/observability": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
data.cloudflare_zones.all: Reading...
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]

Planning failed. OpenTofu encountered an error while generating this plan.
╷
│ Error: error initializing keycloak provider

│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
this derivation will be built:
  /nix/store/jrqr81z4ldl9g6y9ahh5lbz19hchfgk3-config.tf.json.drv
building '/nix/store/jrqr81z4ldl9g6y9ahh5lbz19hchfgk3-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

12. project: atlantis dir: . workspace: atlantis

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/atlantis': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/atlantis": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.cloudflare_zones.all: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.infrastructure: Read complete after 1s [name=infrastructure]
data.forgejo_repository.governance: Read complete after 1s [name=governance]
forgejo_repository_webhook.governance: Refreshing state...
forgejo_repository_webhook.infrastructure: Refreshing state...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 42, in provider.keycloak:
│   42:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache...
this derivation will be built:
  /nix/store/0dc1jmm26xn3cpvl4irk401ir80iy591-config.tf.json.drv
building '/nix/store/0dc1jmm26xn3cpvl4irk401ir80iy591-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing svalabs/forgejo v1.6.1 to the shared cache directory...
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed svalabs/forgejo v1.6.1 (unauthenticated)
- Using svalabs/forgejo v1.6.1 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

13. project: matrix dir: . workspace: matrix

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/matrix': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/matrix": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache...
this derivation will be built:
  /nix/store/8y8yk5mwgphg095ps9fr2vww2vk4l85b-config.tf.json.drv
building '/nix/store/8y8yk5mwgphg095ps9fr2vww2vk4l85b-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

14. project: keycloak dir: . workspace: keycloak

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/keycloak': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/keycloak": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 3 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 274, in resource.keycloak_oidc_google_identity_provider.google:
│  274:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 38, in provider.keycloak:
│   38:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache...
this derivation will be built:
  /nix/store/79x5mi2x75aqlbpiijz1fp277pwz048y-config.tf.json.drv
building '/nix/store/79x5mi2x75aqlbpiijz1fp277pwz048y-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

15. project: garage-webadmin dir: . workspace: garage-webadmin

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/garage-webadmin': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/garage-webadmin": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 34, in provider.keycloak:
│   34:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
this derivation will be built:
  /nix/store/awsri9q67lhp2n5sxjlhjs857wysf13p-config.tf.json.drv
building '/nix/store/awsri9q67lhp2n5sxjlhjs857wysf13p-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

16. project: headscale dir: . workspace: headscale

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/headscale': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/headscale": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 38, in provider.keycloak:
│   38:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache...
copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'...
copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache...
this derivation will be built:
  /nix/store/1lbn6qw92rbxa1q289dvd38b037akrwk-config.tf.json.drv
building '/nix/store/1lbn6qw92rbxa1q289dvd38b037akrwk-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

17. project: webhook dir: . workspace: webhook

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/webhook': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/webhook": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
this derivation will be built:
  /nix/store/jfkiy8wambva9r4p80n1cp5cpk35m28b-config.tf.json.drv
building '/nix/store/jfkiy8wambva9r4p80n1cp5cpk35m28b-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Plan Summary

17 projects, 0 with changes, 0 with no changes, 17 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 17 projects: 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `webhook` dir: `.` workspace: `webhook` --- ### 1. project: `posthog` dir: `.` workspace: `posthog` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/posthog': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/posthog": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy this derivation will be built: /nix/store/hzxj97dphvxrr4sxgjqakr3h7nz6n80a-config.tf.json.drv building '/nix/store/hzxj97dphvxrr4sxgjqakr3h7nz6n80a-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (signed, key ID C76001609EE3B136) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory Providers are signed by their developers. If you'd like to know more about provider signing, you can read about it here: https://opentofu.org/docs/cli/plugins/signing/ OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 2. project: `forgejo` dir: `.` workspace: `forgejo` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/forgejo': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/forgejo": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy this derivation will be built: /nix/store/a0l7446cwz6mr797x1hdqhqvvgr0c7xj-config.tf.json.drv this path will be fetched (4.1 KiB download, 14.9 KiB unpacked): /nix/store/6yfz5ayq5c8nhhf4bb2fs6d72wmkpz99-jq-1.8.2-dev copying path '/nix/store/6yfz5ayq5c8nhhf4bb2fs6d72wmkpz99-jq-1.8.2-dev' from 'http://localhost:5000'... building '/nix/store/a0l7446cwz6mr797x1hdqhqvvgr0c7xj-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 3. project: `governance` dir: `.` workspace: `governance` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/governance': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/governance": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_policy.governance: Refreshing state... [id=governance] vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.cloudflare_zones.all: Read complete after 1s Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 36, in provider.keycloak: │ 36: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it this derivation will be built: /nix/store/k3600qmf92l3d3zhhn4yx8vkmkvlmb8z-config.tf.json.drv building '/nix/store/k3600qmf92l3d3zhhn4yx8vkmkvlmb8z-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 4. project: `snot` dir: `.` workspace: `snot` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/snot': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/snot": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy this derivation will be built: /nix/store/cm4hc4kj893m9c5y2gsb761v14g7ip5h-config.tf.json.drv building '/nix/store/cm4hc4kj893m9c5y2gsb761v14g7ip5h-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 5. project: `openbao` dir: `.` workspace: `openbao` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/openbao': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/openbao": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... vault_policy.infra: Refreshing state... [id=infra] vault_auth_backend.approle: Refreshing state... [id=approle] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_policy.devops: Refreshing state... [id=devops] vault_policy.ci: Refreshing state... [id=ci] vault_mount.kv: Refreshing state... [id=secret] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 34, in provider.keycloak: │ 34: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache... this derivation will be built: /nix/store/nblqbcj4bw2hmrpyhfm2mjmmf616fizf-config.tf.json.drv building '/nix/store/nblqbcj4bw2hmrpyhfm2mjmmf616fizf-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 6. project: `litellm` dir: `.` workspace: `litellm` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/litellm': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/litellm": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... random_password.litellm_salt_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] data.cloudflare_zones.all: Read complete after 2s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache... unpacking 'github:numtide/systemd-vaultd/5d18251b7750a3df6b3a70cf654d8d7ef0e73083?narHash=sha256-wMblYGX%2BQAXf2aWtjtRFDyo301%2BPzvlUq6gh3LnrTwQ%3D' into the Git cache... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'... this derivation will be built: /nix/store/iawb9nr26cid1001iq7dsc1b5480x5vg-config.tf.json.drv building '/nix/store/iawb9nr26cid1001iq7dsc1b5480x5vg-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 7. project: `ricochet` dir: `.` workspace: `ricochet` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/ricochet': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/ricochet": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache... this derivation will be built: /nix/store/phxd976b332765r8chjf68lx8pv88csr-config.tf.json.drv building '/nix/store/phxd976b332765r8chjf68lx8pv88csr-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 8. project: `kennel` dir: `.` workspace: `kennel` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/kennel': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/kennel": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 33, in provider.keycloak: │ 33: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache... this derivation will be built: /nix/store/k06wjggqny07sx29jdbj9cpn81qh0yba-config.tf.json.drv building '/nix/store/k06wjggqny07sx29jdbj9cpn81qh0yba-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 9. project: `hosts` dir: `.` workspace: `hosts` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/hosts': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/hosts": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache... unpacking 'github:numtide/systemd-vaultd/5d18251b7750a3df6b3a70cf654d8d7ef0e73083?narHash=sha256-wMblYGX%2BQAXf2aWtjtRFDyo301%2BPzvlUq6gh3LnrTwQ%3D' into the Git cache... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache... copying path '/nix/store/8ggr67sci43hlp8ba6rhjrdhhj5490am-source' from 'http://localhost:5000'... unpacking 'github:zhaofengli/nix-homebrew/09a921d0181146cf6163ec2cc1db7b6fd539a885?narHash=sha256-fEaFq0XgpgWFPLfpq1UK4/8ylHd2T0%2Bfo6O3hKz1LUM%3D' into the Git cache... this derivation will be built: /nix/store/damrkycvnfgqaiscwxwq3wqmln8hv88p-config.tf.json.drv building '/nix/store/damrkycvnfgqaiscwxwq3wqmln8hv88p-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 10. project: `vaultwarden` dir: `.` workspace: `vaultwarden` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/vaultwarden': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/vaultwarden": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it this derivation will be built: /nix/store/mmp060zm1bx5j4zp6q3kcblp2p5gn1dd-config.tf.json.drv building '/nix/store/mmp060zm1bx5j4zp6q3kcblp2p5gn1dd-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 11. project: `observability` dir: `.` workspace: `observability` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/observability': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/observability": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] data.cloudflare_zones.all: Reading... garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... this derivation will be built: /nix/store/jrqr81z4ldl9g6y9ahh5lbz19hchfgk3-config.tf.json.drv building '/nix/store/jrqr81z4ldl9g6y9ahh5lbz19hchfgk3-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 12. project: `atlantis` dir: `.` workspace: `atlantis` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/atlantis': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/atlantis": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.cloudflare_zones.all: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.infrastructure: Read complete after 1s [name=infrastructure] data.forgejo_repository.governance: Read complete after 1s [name=governance] forgejo_repository_webhook.governance: Refreshing state... forgejo_repository_webhook.infrastructure: Refreshing state... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 42, in provider.keycloak: │ 42: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache... this derivation will be built: /nix/store/0dc1jmm26xn3cpvl4irk401ir80iy591-config.tf.json.drv building '/nix/store/0dc1jmm26xn3cpvl4irk401ir80iy591-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing svalabs/forgejo v1.6.1 to the shared cache directory... - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed svalabs/forgejo v1.6.1 (unauthenticated) - Using svalabs/forgejo v1.6.1 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 13. project: `matrix` dir: `.` workspace: `matrix` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/matrix': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/matrix": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache... this derivation will be built: /nix/store/8y8yk5mwgphg095ps9fr2vww2vk4l85b-config.tf.json.drv building '/nix/store/8y8yk5mwgphg095ps9fr2vww2vk4l85b-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 14. project: `keycloak` dir: `.` workspace: `keycloak` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/keycloak': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/keycloak": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 3 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 274, in resource.keycloak_oidc_google_identity_provider.google: │ 274: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 38, in provider.keycloak: │ 38: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache... this derivation will be built: /nix/store/79x5mi2x75aqlbpiijz1fp277pwz048y-config.tf.json.drv building '/nix/store/79x5mi2x75aqlbpiijz1fp277pwz048y-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 15. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/garage-webadmin': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/garage-webadmin": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 34, in provider.keycloak: │ 34: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... this derivation will be built: /nix/store/awsri9q67lhp2n5sxjlhjs857wysf13p-config.tf.json.drv building '/nix/store/awsri9q67lhp2n5sxjlhjs857wysf13p-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 16. project: `headscale` dir: `.` workspace: `headscale` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/headscale': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/headscale": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 38, in provider.keycloak: │ 38: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy copying path '/nix/store/q8bw10sx685nb38y8mxmcpbsz3jxsxnj-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/bb741d186ca2c2fb1689731f4414da4c0260aeca?narHash=sha256-WLsTND5t88C01zAXyI65kG7hRCE8uY2l44s05Iuf6lI%3D' into the Git cache... copying path '/nix/store/hgab0g406153rzajhrfdfhmhsibs7m6r-source' from 'http://localhost:5000'... copying path '/nix/store/w2c23ykc12mswlg8hrrjzb5gv9gvkzwq-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/3142fdbeea0b181ad6600587dfe484ccb644dcc6?narHash=sha256-TX/Z3PQZQVHgy4g9OZpflVpuazwturkGolsRDkFVHiU%3D' into the Git cache... this derivation will be built: /nix/store/1lbn6qw92rbxa1q289dvd38b037akrwk-config.tf.json.drv building '/nix/store/1lbn6qw92rbxa1q289dvd38b037akrwk-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 17. project: `webhook` dir: `.` workspace: `webhook` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/webhook': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/webhook": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy this derivation will be built: /nix/store/jfkiy8wambva9r4p80n1cp5cpk35m28b-config.tf.json.drv building '/nix/store/jfkiy8wambva9r4p80n1cp5cpk35m28b-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### Plan Summary 17 projects, 0 with changes, 0 with no changes, 17 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
jalenluorion commented 2026-09-18 22:44:56 +00:00
Author
Member
Copy link

The plan failure above is not from this change - every project is locked by the unapplied plan on #146, so Atlantis couldn't plan anything. I've left that lock alone.

Worth noting this diff is NixOS-side (services.kennel.domains.cloudflare.zones) rather than terranix, so it takes effect on a deploy-01 rebuild rather than a tofu apply. Once #146 is applied/merged I can re-run atlantis plan here to get a clean run for the record.

No rush on my end - the cal side is staged behind this and won't flip until it lands.

The plan failure above is not from this change - every project is locked by the unapplied plan on #146, so Atlantis couldn't plan anything. I've left that lock alone. Worth noting this diff is NixOS-side (`services.kennel.domains.cloudflare.zones`) rather than terranix, so it takes effect on a deploy-01 rebuild rather than a tofu apply. Once #146 is applied/merged I can re-run `atlantis plan` here to get a clean run for the record. No rush on my end - the `cal` side is staged behind this and won't flip until it lands.
anish commented 2026-09-18 23:26:34 +00:00
Owner
Copy link

@jalenluorion wrote in #148 (comment):

The plan failure above is not from this change - every project is locked by the unapplied plan on #146, so Atlantis couldn't plan anything. I've left that lock alone.

Worth noting this diff is NixOS-side (services.kennel.domains.cloudflare.zones) rather than terranix, so it takes effect on a deploy-01 rebuild rather than a tofu apply. Once #146 is applied/merged I can re-run atlantis plan here to get a clean run for the record.

No rush on my end - the cal side is staged behind this and won't flip until it lands.

🚨 SLOP COP CITATION 🚨

@jalenluorion, YOU ARE HEREBY CITED FOR COMMENT #148 (comment):

(...) No rush on my end - the cal side is staged behind this and won't flip until it lands.

OFFENSE: 89 words and 515 characters for an automated comment -- an automated comment that is inaccurate.

MANDATORY REMEDIATION: COMMENT PRIVILEGES ARE HEREBY SUSPENDED. Future comments require borders, checkpoints, and papers. 🚔🚁🚔

@jalenluorion wrote in https://git.cmu.dev/ScottyLabs/infrastructure/pulls/148#issuecomment-7095: > The plan failure above is not from this change - every project is locked by the unapplied plan on #146, so Atlantis couldn't plan anything. I've left that lock alone. > > Worth noting this diff is NixOS-side (`services.kennel.domains.cloudflare.zones`) rather than terranix, so it takes effect on a deploy-01 rebuild rather than a tofu apply. Once #146 is applied/merged I can re-run `atlantis plan` here to get a clean run for the record. > > No rush on my end - the `cal` side is staged behind this and won't flip until it lands. 🚨 SLOP COP CITATION 🚨 @jalenluorion, YOU ARE HEREBY CITED FOR COMMENT https://git.cmu.dev/ScottyLabs/infrastructure/pulls/148#issuecomment-7095: > (...) No rush on my end - the cal side is staged behind this and won't flip until it lands. **OFFENSE:** 89 words and 515 characters for an automated comment -- an automated comment that is inaccurate. **MANDATORY REMEDIATION:** COMMENT PRIVILEGES ARE HEREBY SUSPENDED. Future comments require borders, checkpoints, and papers. 🚔🚁🚔
thesuperRL commented 2026-09-18 23:29:45 +00:00
Owner
Copy link

atlantis plan

atlantis plan
scottylabs-bot commented 2026-09-18 23:30:08 +00:00
Owner
Copy link

Ran Plan for 17 projects:

  1. project: governance dir: . workspace: governance
  2. project: forgejo dir: . workspace: forgejo
  3. project: snot dir: . workspace: snot
  4. project: posthog dir: . workspace: posthog
  5. project: vaultwarden dir: . workspace: vaultwarden
  6. project: litellm dir: . workspace: litellm
  7. project: openbao dir: . workspace: openbao
  8. project: garage-webadmin dir: . workspace: garage-webadmin
  9. project: ricochet dir: . workspace: ricochet
  10. project: atlantis dir: . workspace: atlantis
  11. project: matrix dir: . workspace: matrix
  12. project: hosts dir: . workspace: hosts
  13. project: kennel dir: . workspace: kennel
  14. project: keycloak dir: . workspace: keycloak
  15. project: webhook dir: . workspace: webhook
  16. project: observability dir: . workspace: observability
  17. project: headscale dir: . workspace: headscale

1. project: governance dir: . workspace: governance

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/governance': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/governance": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_policy.governance: Refreshing state... [id=governance]
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 2s
╷
│ Error: error initializing keycloak provider
│ 

Planning failed. OpenTofu encountered an error while generating this plan.
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 36, in provider.keycloak:

│   36:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

2. project: forgejo dir: . workspace: forgejo

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/forgejo': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/forgejo": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]
╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵

Planning failed. OpenTofu encountered an error while generating this plan.



warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

3. project: snot dir: . workspace: snot

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/snot': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/snot": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

4. project: posthog dir: . workspace: posthog

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/posthog': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/posthog": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

5. project: vaultwarden dir: . workspace: vaultwarden

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/vaultwarden': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/vaultwarden": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 3s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

6. project: litellm dir: . workspace: litellm

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/litellm': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/litellm": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
data.cloudflare_zones.all: Read complete after 3s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]
╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵

Planning failed. OpenTofu encountered an error while generating this plan.



warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

7. project: openbao dir: . workspace: openbao

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/openbao': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/openbao": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.infra: Refreshing state... [id=infra]
vault_policy.devops: Refreshing state... [id=devops]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_mount.kv: Refreshing state... [id=secret]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 3s
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 34, in provider.keycloak:
│   34:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

8. project: garage-webadmin dir: . workspace: garage-webadmin

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/garage-webadmin': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/garage-webadmin": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.cloudflare_zones.all: Read complete after 5s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 34, in provider.keycloak:
│   34:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

9. project: ricochet dir: . workspace: ricochet

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/ricochet': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/ricochet": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 4s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

10. project: atlantis dir: . workspace: atlantis

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/atlantis': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/atlantis": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.infrastructure: Refreshing state...
forgejo_repository_webhook.governance: Refreshing state...
data.cloudflare_zones.all: Read complete after 2s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 42, in provider.keycloak:
│   42:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed svalabs/forgejo v1.6.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

11. project: matrix dir: . workspace: matrix

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/matrix': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/matrix": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 4s
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

12. project: hosts dir: . workspace: hosts

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/hosts': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/hosts": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 3s
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

13. project: kennel dir: . workspace: kennel

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/kennel': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/kennel": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 6s
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 33, in provider.keycloak:
│   33:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

14. project: keycloak dir: . workspace: keycloak

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/keycloak': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/keycloak": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.cloudflare_zones.all: Read complete after 4s
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 3 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 274, in resource.keycloak_oidc_google_identity_provider.google:
│  274:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 38, in provider.keycloak:
│   38:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵

warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

15. project: webhook dir: . workspace: webhook

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/webhook': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/webhook": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]
╷

│ Error: error initializing keycloak provider
Planning failed. OpenTofu encountered an error while generating this plan.

│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

16. project: observability dir: . workspace: observability

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/observability': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/observability": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 4s
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 28, in provider.keycloak:
│   28:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

17. project: headscale dir: . workspace: headscale

Plan Error

Show Output 
running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/headscale': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/headscale": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 3s
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]

Planning failed. OpenTofu encountered an error while generating this plan.

╷
│ Error: error initializing keycloak provider
│ 
│   with provider["registry.opentofu.org/keycloak/keycloak"],
│   on config.tf.json line 38, in provider.keycloak:
│   38:     },
│ 
│ failed to perform initial login to Keycloak: error sending POST request to
│ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400
│ Bad Request
╵


warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

Plan Summary

17 projects, 0 with changes, 0 with no changes, 17 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 17 projects: 1. project: `governance` dir: `.` workspace: `governance` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `headscale` dir: `.` workspace: `headscale` --- ### 1. project: `governance` dir: `.` workspace: `governance` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/governance': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/governance": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_policy.governance: Refreshing state... [id=governance] vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 2s ╷ │ Error: error initializing keycloak provider │ Planning failed. OpenTofu encountered an error while generating this plan. │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 36, in provider.keycloak: │ 36: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 2. project: `forgejo` dir: `.` workspace: `forgejo` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/forgejo': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/forgejo": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ Planning failed. OpenTofu encountered an error while generating this plan. warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 3. project: `snot` dir: `.` workspace: `snot` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/snot': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/snot": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 4. project: `posthog` dir: `.` workspace: `posthog` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/posthog': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/posthog": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 5. project: `vaultwarden` dir: `.` workspace: `vaultwarden` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/vaultwarden': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/vaultwarden": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 3s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 6. project: `litellm` dir: `.` workspace: `litellm` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/litellm': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/litellm": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.litellm_salt_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] data.cloudflare_zones.all: Read complete after 3s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ Planning failed. OpenTofu encountered an error while generating this plan. warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 7. project: `openbao` dir: `.` workspace: `openbao` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/openbao': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/openbao": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.ci: Refreshing state... [id=ci] vault_policy.infra: Refreshing state... [id=infra] vault_policy.devops: Refreshing state... [id=devops] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_auth_backend.approle: Refreshing state... [id=approle] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_mount.kv: Refreshing state... [id=secret] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 3s cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 34, in provider.keycloak: │ 34: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 8. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/garage-webadmin': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/garage-webadmin": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.cloudflare_zones.all: Read complete after 5s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 34, in provider.keycloak: │ 34: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 9. project: `ricochet` dir: `.` workspace: `ricochet` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/ricochet': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/ricochet": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 4s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 10. project: `atlantis` dir: `.` workspace: `atlantis` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/atlantis': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/atlantis": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.infrastructure: Refreshing state... forgejo_repository_webhook.governance: Refreshing state... data.cloudflare_zones.all: Read complete after 2s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 42, in provider.keycloak: │ 42: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed svalabs/forgejo v1.6.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 11. project: `matrix` dir: `.` workspace: `matrix` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/matrix': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/matrix": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 4s cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 12. project: `hosts` dir: `.` workspace: `hosts` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/hosts': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/hosts": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 3s cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 13. project: `kennel` dir: `.` workspace: `kennel` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/kennel': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/kennel": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 6s cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 33, in provider.keycloak: │ 33: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 14. project: `keycloak` dir: `.` workspace: `keycloak` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/keycloak': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/keycloak": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.cloudflare_zones.all: Read complete after 4s cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 3 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 274, in resource.keycloak_oidc_google_identity_provider.google: │ 274: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 38, in provider.keycloak: │ 38: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 15. project: `webhook` dir: `.` workspace: `webhook` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/webhook': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/webhook": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] ╷ │ Error: error initializing keycloak provider Planning failed. OpenTofu encountered an error while generating this plan. │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 16. project: `observability` dir: `.` workspace: `observability` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/observability': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/observability": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 4s cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 28, in provider.keycloak: │ 28: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### 17. project: `headscale` dir: `.` workspace: `headscale` **Plan Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu plan -input=false -out "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/headscale': exit status 1: running "tofu plan -input=false -out \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/148/headscale": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 3s cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] Planning failed. OpenTofu encountered an error while generating this plan. ╷ │ Error: error initializing keycloak provider │ │ with provider["registry.opentofu.org/keycloak/keycloak"], │ on config.tf.json line 38, in provider.keycloak: │ 38: }, │ │ failed to perform initial login to Keycloak: error sending POST request to │ https://idp.scottylabs.org/realms/master/protocol/openid-connect/token: 400 │ Bad Request ╵ warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ``` </details> --- ### Plan Summary 17 projects, 0 with changes, 0 with no changes, 17 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
thesuperRL commented 2026-09-19 02:14:34 +00:00
Owner
Copy link

atlantis plan

atlantis plan
scottylabs-bot commented 2026-09-19 02:14:56 +00:00
Owner
Copy link

Ran Plan for 17 projects:

  1. project: forgejo dir: . workspace: forgejo
  2. project: snot dir: . workspace: snot
  3. project: governance dir: . workspace: governance
  4. project: posthog dir: . workspace: posthog
  5. project: keycloak dir: . workspace: keycloak
  6. project: headscale dir: . workspace: headscale
  7. project: openbao dir: . workspace: openbao
  8. project: ricochet dir: . workspace: ricochet
  9. project: matrix dir: . workspace: matrix
  10. project: observability dir: . workspace: observability
  11. project: garage-webadmin dir: . workspace: garage-webadmin
  12. project: hosts dir: . workspace: hosts
  13. project: litellm dir: . workspace: litellm
  14. project: kennel dir: . workspace: kennel
  15. project: vaultwarden dir: . workspace: vaultwarden
  16. project: atlantis dir: . workspace: atlantis
  17. project: webhook dir: . workspace: webhook

1. project: forgejo dir: . workspace: forgejo

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p forgejo
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p forgejo

No changes. Your infrastructure matches the configuration.

2. project: snot dir: . workspace: snot

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p snot
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p snot

No changes. Your infrastructure matches the configuration.

3. project: governance dir: . workspace: governance

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.governance: Refreshing state... [id=governance]
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
data.cloudflare_zones.all: Read complete after 1s

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p governance
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p governance

No changes. Your infrastructure matches the configuration.

4. project: posthog dir: . workspace: posthog

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p posthog
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p posthog

No changes. Your infrastructure matches the configuration.

5. project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12]
keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4]
keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1]
keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 3 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 274, in resource.keycloak_oidc_google_identity_provider.google:
│  274:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
  • ▶️ To apply this plan, comment: 
    atlantis apply -p keycloak
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak

No changes. Your infrastructure matches the configuration.

6. project: headscale dir: . workspace: headscale

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p headscale
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p headscale

No changes. Your infrastructure matches the configuration.

7. project: openbao dir: . workspace: openbao

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_mount.kv: Refreshing state... [id=secret]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_policy.devops: Refreshing state... [id=devops]
vault_policy.infra: Refreshing state... [id=infra]
vault_policy.ci: Refreshing state... [id=ci]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
data.cloudflare_zones.all: Read complete after 1s
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p openbao
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p openbao

No changes. Your infrastructure matches the configuration.

8. project: ricochet dir: . workspace: ricochet

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p ricochet
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p ricochet

No changes. Your infrastructure matches the configuration.

9. project: matrix dir: . workspace: matrix

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p matrix
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p matrix

No changes. Your infrastructure matches the configuration.

10. project: observability dir: . workspace: observability

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p observability
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p observability

No changes. Your infrastructure matches the configuration.

11. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p garage-webadmin
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p garage-webadmin

No changes. Your infrastructure matches the configuration.

12. project: hosts dir: . workspace: hosts

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy
copying path '/nix/store/8ggr67sci43hlp8ba6rhjrdhhj5490am-source' from 'http://localhost:5000'...


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p hosts
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p hosts

No changes. Your infrastructure matches the configuration.

13. project: litellm dir: . workspace: litellm

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p litellm
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p litellm

No changes. Your infrastructure matches the configuration.

14. project: kennel dir: . workspace: kennel

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p kennel
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p kennel

No changes. Your infrastructure matches the configuration.

15. project: vaultwarden dir: . workspace: vaultwarden

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p vaultwarden
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p vaultwarden

No changes. Your infrastructure matches the configuration.

16. project: atlantis dir: . workspace: atlantis

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed svalabs/forgejo v1.6.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
forgejo_repository_webhook.infrastructure: Refreshing state...
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.governance: Refreshing state...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p atlantis
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p atlantis

No changes. Your infrastructure matches the configuration.

17. project: webhook dir: . workspace: webhook

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p webhook
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p webhook

No changes. Your infrastructure matches the configuration.

Plan Summary

17 projects, 0 with changes, 17 with no changes, 0 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 17 projects: 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `webhook` dir: `.` workspace: `webhook` --- ### 1. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.governance: Refreshing state... [id=governance] vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] data.cloudflare_zones.all: Read complete after 1s No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12] keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4] keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1] keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 3 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 274, in resource.keycloak_oidc_google_identity_provider.google: │ 274: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_mount.kv: Refreshing state... [id=secret] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_policy.devops: Refreshing state... [id=devops] vault_policy.infra: Refreshing state... [id=infra] vault_policy.ci: Refreshing state... [id=ci] vault_auth_backend.approle: Refreshing state... [id=approle] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] data.cloudflare_zones.all: Read complete after 1s vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy copying path '/nix/store/8ggr67sci43hlp8ba6rhjrdhhj5490am-source' from 'http://localhost:5000'... Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.litellm_salt_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/3cd10790031b66ee1b706c308b74daf4270e27df5441a8e8aa161eca46f6ca3c.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed svalabs/forgejo v1.6.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] forgejo_repository_webhook.infrastructure: Refreshing state... data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.governance: Refreshing state... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 17 projects, 0 with changes, 17 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
thesuperRL closed this pull request 2026-09-19 02:31:45 +00:00
thesuperRL commented 2026-09-19 02:32:21 +00:00
Owner
Copy link

atlantis unlock

atlantis unlock
scottylabs-bot commented 2026-09-19 02:32:22 +00:00
Owner
Copy link

All Atlantis locks for this PR have been unlocked and plans discarded

All Atlantis locks for this PR have been unlocked and plans discarded
anish deleted branch feat/cmucal-zone 2026-09-19 04:29:00 +00:00
Some checks failed
kennel/build build succeeded
Details
kennel/deploy deployment healthy
atlantis/plan: forgejo No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: snot No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: posthog No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: openbao No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: ricochet No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: governance No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: keycloak No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: headscale No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: matrix No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: observability No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: garage-webadmin No changes. Your infrastructure matches the configuration.
Details
atlantis/plan 17/17 projects planned successfully.
atlantis/apply 17/17 projects up to date.
atlantis/policy_check 0/0 projects had policies checked successfully.
atlantis/plan: hosts No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: litellm No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: kennel No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: vaultwarden No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: atlantis No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: webhook No changes. Your infrastructure matches the configuration.
Details
CI / check (pull_request) Has been cancelled
Details
CI / check-1 (pull_request) Has been cancelled
Details
CI / build (pull_request) Has been cancelled
Details
atlantis/pre_workflow_hook: Generate atlantis.yaml from the flake succeeded.
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
  
needs/docs
Must have documentation written

  
needs/research
Discuss the ideal implementation with the tech lead

  
needs/upstream
Needs a contribution to an upstream project

  
type/bug
Something not working as intended

  
type/external
Lives outside of code

  
type/feature
New functionality

  
type/refactor
Improving existing code

  
urgency
high
 This is currently causing issues

  
urgency
immediate
 This is making a project or feature unusable

  
urgency
low
 This can happen whenever

  
urgency
medium
 This is expected to cause issues soon

No labels
needs/docs
needs/research
needs/upstream
type/bug
type/external
type/feature
type/refactor
urgency
high
urgency
immediate
urgency
low
urgency
medium
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
4 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ScottyLabs/infrastructure!148
No description provided.