ScottyLabs/infrastructure
Watch
13
0
Fork
You've already forked infrastructure
 3
Code Issues 41 Pull requests 5 Projects Releases Packages Wiki Activity Actions

feat: migrate to cmu (oidc) provider #153

Merged
anish merged 3 commits from cmu-oidc into main 2026-09-22 23:47:32 +00:00
Conversation 62 Commits 3 Files changed 4 +273 -45
anish commented 2026-09-22 23:30:52 +00:00
Owner
Copy link

Closes #35

Closes https://git.cmu.dev/ScottyLabs/infrastructure/issues/35
Signed-off-by: Anish Pallati <i@anish.land>
feat: import cmu-saml and ldap into terranix
Some checks are pending
kennel/build build succeeded
Details
kennel/deploy deployment healthy
CI / check-1 (pull_request) Successful in 1m7s
Details
CI / build (pull_request) Successful in 56s
Details
CI / check (pull_request) Successful in 0s
Details
atlantis/plan: governance No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: snot No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: posthog No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: forgejo No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: observability No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: openbao Plan: 0 to add, 1 to change, 0 to destroy.
Details
atlantis/plan: ricochet No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: matrix No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: garage-webadmin No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: atlantis No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: hosts No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: kennel No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: headscale No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: litellm No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: vaultwarden No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: webhook No changes. Your infrastructure matches the configuration.
Details
atlantis/apply: openbao Apply succeeded.
Details
atlantis/apply 1/17 projects applied (15 up to date).
atlantis/pre_workflow_hook: Generate atlantis.yaml from the flake succeeded.
Details
atlantis/plan: keycloak Plan: 0 to add, 11 to change, 9 to destroy.
Details
atlantis/plan 17/17 projects planned successfully.
atlantis/policy_check 0/0 projects had policies checked successfully.
d222570eb6
 
Signed-off-by: Anish Pallati <i@anish.land>
scottylabs-bot commented 2026-09-22 23:31:18 +00:00
Owner
Copy link

Kennel Deployments

Torn down at 2026-09-22 23:47:33 UTC.

<!-- kennel-deployment --> ### Kennel Deployments Torn down at 2026-09-22 23:47:33 UTC.
scottylabs-bot commented 2026-09-22 23:31:25 +00:00
Owner
Copy link

Ran Plan for 17 projects:

  1. project: posthog dir: . workspace: posthog
  2. project: forgejo dir: . workspace: forgejo
  3. project: governance dir: . workspace: governance
  4. project: snot dir: . workspace: snot
  5. project: atlantis dir: . workspace: atlantis
  6. project: garage-webadmin dir: . workspace: garage-webadmin
  7. project: ricochet dir: . workspace: ricochet
  8. project: matrix dir: . workspace: matrix
  9. project: litellm dir: . workspace: litellm
  10. project: kennel dir: . workspace: kennel
  11. project: headscale dir: . workspace: headscale
  12. project: observability dir: . workspace: observability
  13. project: openbao dir: . workspace: openbao
  14. project: keycloak dir: . workspace: keycloak
  15. project: vaultwarden dir: . workspace: vaultwarden
  16. project: webhook dir: . workspace: webhook
  17. project: hosts dir: . workspace: hosts

1. project: posthog dir: . workspace: posthog

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p posthog
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p posthog

No changes. Your infrastructure matches the configuration.

2. project: forgejo dir: . workspace: forgejo

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p forgejo
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p forgejo

No changes. Your infrastructure matches the configuration.

3. project: governance dir: . workspace: governance

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_policy.governance: Refreshing state... [id=governance]
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
data.cloudflare_zones.all: Read complete after 1s

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p governance
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p governance

No changes. Your infrastructure matches the configuration.

4. project: snot dir: . workspace: snot

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p snot
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p snot

No changes. Your infrastructure matches the configuration.

5. project: atlantis dir: . workspace: atlantis

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
unpacking 'github:numtide/systemd-vaultd/7cfd544194b06b3dc2b502bef9631051c18f95d6?narHash=sha256-SM7uPLl//H0UzVeEInh9Q7GtBtkvGPtph0FxBEnSJuc%3D' into the Git cache...
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing svalabs/forgejo v1.6.1 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed svalabs/forgejo v1.6.1 (unauthenticated)
- Using svalabs/forgejo v1.6.1 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.governance: Refreshing state...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
forgejo_repository_webhook.infrastructure: Refreshing state...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p atlantis
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p atlantis

No changes. Your infrastructure matches the configuration.

6. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache...
unpacking 'github:numtide/systemd-vaultd/7cfd544194b06b3dc2b502bef9631051c18f95d6?narHash=sha256-SM7uPLl//H0UzVeEInh9Q7GtBtkvGPtph0FxBEnSJuc%3D' into the Git cache...
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/89b3eacf59d6b5eefbc2d69c3a4eb5aaf66d63bc?narHash=sha256-W5dvgFOuVs24X3G5tUb8C2IHU7ICXNvyGPiWWFjfbuo%3D' into the Git cache...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p garage-webadmin
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p garage-webadmin

No changes. Your infrastructure matches the configuration.

7. project: ricochet dir: . workspace: ricochet

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache...
unpacking 'github:numtide/systemd-vaultd/7cfd544194b06b3dc2b502bef9631051c18f95d6?narHash=sha256-SM7uPLl//H0UzVeEInh9Q7GtBtkvGPtph0FxBEnSJuc%3D' into the Git cache...
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/89b3eacf59d6b5eefbc2d69c3a4eb5aaf66d63bc?narHash=sha256-W5dvgFOuVs24X3G5tUb8C2IHU7ICXNvyGPiWWFjfbuo%3D' into the Git cache...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p ricochet
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p ricochet

No changes. Your infrastructure matches the configuration.

8. project: matrix dir: . workspace: matrix

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
copying path '/nix/store/61snslw9vdr3ynq1sx7rmvqxcd4v43iv-source' from 'http://localhost:5000'...
remote: Enumerating objects: 128, done.        
remote: Counting objects:   0% (1/128)        
remote: Counting objects:   1% (2/128)        
remote: Counting objects:   2% (3/128)        
remote: Counting objects:   3% (4/128)        
remote: Counting objects:   4% (6/128)        
remote: Counting objects:   5% (7/128)        
remote: Counting objects:   6% (8/128)        
remote: Counting objects:   7% (9/128)        
remote: Counting objects:   8% (11/128)        
remote: Counting objects:   9% (12/128)        
remote: Counting objects:  10% (13/128)        
remote: Counting objects:  11% (15/128)        
remote: Counting objects:  12% (16/128)        
remote: Counting objects:  13% (17/128)        
remote: Counting objects:  14% (18/128)        
remote: Counting objects:  15% (20/128)        
remote: Counting objects:  16% (21/128)        
remote: Counting objects:  17% (22/128)        
remote: Counting objects:  18% (24/128)        
remote: Counting objects:  19% (25/128)        
remote: Counting objects:  20% (26/128)        
remote: Counting objects:  21% (27/128)        
remote: Counting objects:  22% (29/128)        
remote: Counting objects:  23% (30/128)        
remote: Counting objects:  24% (31/128)        
remote: Counting objects:  25% (32/128)        
remote: Counting objects:  26% (34/128)        
remote: Counting objects:  27% (35/128)        
remote: Counting objects:  28% (36/128)        
remote: Counting objects:  29% (38/128)        
remote: Counting objects:  30% (39/128)        
remote: Counting objects:  31% (40/128)        
remote: Counting objects:  32% (41/128)        
remote: Counting objects:  33% (43/128)        
remote: Counting objects:  34% (44/128)        
remote: Counting objects:  35% (45/128)        
remote: Counting objects:  36% (47/128)        
remote: Counting objects:  37% (48/128)        
remote: Counting objects:  38% (49/128)        
remote: Counting objects:  39% (50/128)        
remote: Counting objects:  40% (52/128)        
remote: Counting objects:  41% (53/128)        
remote: Counting objects:  42% (54/128)        
remote: Counting objects:  43% (56/128)        
remote: Counting objects:  44% (57/128)        
remote: Counting objects:  45% (58/128)        
remote: Counting objects:  46% (59/128)        
remote: Counting objects:  47% (61/128)        
remote: Counting objects:  48% (62/128)        
remote: Counting objects:  49% (63/128)        
remote: Counting objects:  50% (64/128)        
remote: Counting objects:  51% (66/128)        
remote: Counting objects:  52% (67/128)        
remote: Counting objects:  53% (68/128)        
remote: Counting objects:  54% (70/128)        
remote: Counting objects:  55% (71/128)        
remote: Counting objects:  56% (72/128)        
remote: Counting objects:  57% (73/128)        
remote: Counting objects:  58% (75/128)        
remote: Counting objects:  59% (76/128)        
remote: Counting objects:  60% (77/128)        
remote: Counting objects:  61% (79/128)        
remote: Counting objects:  62% (80/128)        
remote: Counting objects:  63% (81/128)        
remote: Counting objects:  64% (82/128)        
remote: Counting objects:  65% (84/128)        
remote: Counting objects:  66% (85/128)        
remote: Counting objects:  67% (86/128)        
remote: Counting objects:  68% (88/128)        
remote: Counting objects:  69% (89/128)        
remote: Counting objects:  70% (90/128)        
remote: Counting objects:  71% (91/128)        
remote: Counting objects:  72% (93/128)        
remote: Counting objects:  73% (94/128)        
remote: Counting objects:  74% (95/128)        
remote: Counting objects:  75% (96/128)        
remote: Counting objects:  76% (98/128)        
remote: Counting objects:  77% (99/128)        
remote: Counting objects:  78% (100/128)        
remote: Counting objects:  79% (102/128)        
remote: Counting objects:  80% (103/128)        
remote: Counting objects:  81% (104/128)        
remote: Counting objects:  82% (105/128)        
remote: Counting objects:  83% (107/128)        
remote: Counting objects:  84% (108/128)        
remote: Counting objects:  85% (109/128)        
remote: Counting objects:  86% (111/128)        
remote: Counting objects:  87% (112/128)        
remote: Counting objects:  88% (113/128)        
remote: Counting objects:  89% (114/128)        
remote: Counting objects:  90% (116/128)        
remote: Counting objects:  91% (117/128)        
remote: Counting objects:  92% (118/128)        
remote: Counting objects:  93% (120/128)        
remote: Counting objects:  94% (121/128)        
remote: Counting objects:  95% (122/128)        
remote: Counting objects:  96% (123/128)        
remote: Counting objects:  97% (125/128)        
remote: Counting objects:  98% (126/128)        
remote: Counting objects:  99% (127/128)        
remote: Counting objects: 100% (128/128)        
remote: Counting objects: 100% (128/128), done.        
remote: Compressing objects:   0% (1/124)        
remote: Compressing objects:   1% (2/124)        
remote: Compressing objects:   2% (3/124)        
remote: Compressing objects:   3% (4/124)        
remote: Compressing objects:   4% (5/124)        
remote: Compressing objects:   5% (7/124)        
remote: Compressing objects:   6% (8/124)        
remote: Compressing objects:   7% (9/124)        
remote: Compressing objects:   8% (10/124)        
remote: Compressing objects:   9% (12/124)        
remote: Compressing objects:  10% (13/124)        
remote: Compressing objects:  11% (14/124)        
remote: Compressing objects:  12% (15/124)        
remote: Compressing objects:  13% (17/124)        
remote: Compressing objects:  14% (18/124)        
remote: Compressing objects:  15% (19/124)        
remote: Compressing objects:  16% (20/124)        
remote: Compressing objects:  17% (22/124)        
remote: Compressing objects:  18% (23/124)        
remote: Compressing objects:  19% (24/124)        
remote: Compressing objects:  20% (25/124)        
remote: Compressing objects:  21% (27/124)        
remote: Compressing objects:  22% (28/124)        
remote: Compressing objects:  23% (29/124)        
remote: Compressing objects:  24% (30/124)        
remote: Compressing objects:  25% (31/124)        
remote: Compressing objects:  26% (33/124)        
remote: Compressing objects:  27% (34/124)        
remote: Compressing objects:  28% (35/124)        
remote: Compressing objects:  29% (36/124)        
remote: Compressing objects:  30% (38/124)        
remote: Compressing objects:  31% (39/124)        
remote: Compressing objects:  32% (40/124)        
remote: Compressing objects:  33% (41/124)        
remote: Compressing objects:  34% (43/124)        
remote: Compressing objects:  35% (44/124)        
remote: Compressing objects:  36% (45/124)        
remote: Compressing objects:  37% (46/124)        
remote: Compressing objects:  38% (48/124)        
remote: Compressing objects:  39% (49/124)        
remote: Compressing objects:  40% (50/124)        
remote: Compressing objects:  41% (51/124)        
remote: Compressing objects:  42% (53/124)        
remote: Compressing objects:  43% (54/124)        
remote: Compressing objects:  44% (55/124)        
remote: Compressing objects:  45% (56/124)        
remote: Compressing objects:  46% (58/124)        
remote: Compressing objects:  47% (59/124)        
remote: Compressing objects:  48% (60/124)        
remote: Compressing objects:  49% (61/124)        
remote: Compressing objects:  50% (62/124)        
remote: Compressing objects:  51% (64/124)        
remote: Compressing objects:  52% (65/124)        
remote: Compressing objects:  53% (66/124)        
remote: Compressing objects:  54% (67/124)        
remote: Compressing objects:  55% (69/124)        
remote: Compressing objects:  56% (70/124)        
remote: Compressing objects:  57% (71/124)        
remote: Compressing objects:  58% (72/124)        
remote: Compressing objects:  59% (74/124)        
remote: Compressing objects:  60% (75/124)        
remote: Compressing objects:  61% (76/124)        
remote: Compressing objects:  62% (77/124)        
remote: Compressing objects:  63% (79/124)        
remote: Compressing objects:  64% (80/124)        
remote: Compressing objects:  65% (81/124)        
remote: Compressing objects:  66% (82/124)        
remote: Compressing objects:  67% (84/124)        
remote: Compressing objects:  68% (85/124)        
remote: Compressing objects:  69% (86/124)        
remote: Compressing objects:  70% (87/124)        
remote: Compressing objects:  71% (89/124)        
remote: Compressing objects:  72% (90/124)        
remote: Compressing objects:  73% (91/124)        
remote: Compressing objects:  74% (92/124)        
remote: Compressing objects:  75% (93/124)        
remote: Compressing objects:  76% (95/124)        
remote: Compressing objects:  77% (96/124)        
remote: Compressing objects:  78% (97/124)        
remote: Compressing objects:  79% (98/124)        
remote: Compressing objects:  80% (100/124)        
remote: Compressing objects:  81% (101/124)        
remote: Compressing objects:  82% (102/124)        
remote: Compressing objects:  83% (103/124)        
remote: Compressing objects:  84% (105/124)        
remote: Compressing objects:  85% (106/124)        
remote: Compressing objects:  86% (107/124)        
remote: Compressing objects:  87% (108/124)        
remote: Compressing objects:  88% (110/124)        
remote: Compressing objects:  89% (111/124)        
remote: Compressing objects:  90% (112/124)        
remote: Compressing objects:  91% (113/124)        
remote: Compressing objects:  92% (115/124)        
remote: Compressing objects:  93% (116/124)        
remote: Compressing objects:  94% (117/124)        
remote: Compressing objects:  95% (118/124)        
remote: Compressing objects:  96% (120/124)        
remote: Compressing objects:  97% (121/124)        
remote: Compressing objects:  98% (122/124)        
remote: Compressing objects:  99% (123/124)        
remote: Compressing objects: 100% (124/124)        
remote: Compressing objects: 100% (124/124), done.        
Receiving objects:   0% (1/128)
Receiving objects:   1% (2/128)
Receiving objects:   2% (3/128)
Receiving objects:   3% (4/128)
Receiving objects:   4% (6/128)
Receiving objects:   5% (7/128)
Receiving objects:   6% (8/128)
Receiving objects:   7% (9/128)
Receiving objects:   8% (11/128)
remote: Total 128 (delta 7), reused 49 (delta 0), pack-reused 0 (from 0)        
Receiving objects:   9% (12/128)
Receiving objects:  10% (13/128)
Receiving objects:  11% (15/128)
Receiving objects:  12% (16/128)
Receiving objects:  13% (17/128)
Receiving objects:  14% (18/128)
Receiving objects:  15% (20/128)
Receiving objects:  16% (21/128)
Receiving objects:  17% (22/128)
Receiving objects:  18% (24/128)
Receiving objects:  19% (25/128)
Receiving objects:  20% (26/128)
Receiving objects:  21% (27/128)
Receiving objects:  22% (29/128)
Receiving objects:  23% (30/128)
Receiving objects:  24% (31/128)
Receiving objects:  25% (32/128)
Receiving objects:  26% (34/128)
Receiving objects:  27% (35/128)
Receiving objects:  28% (36/128)
Receiving objects:  29% (38/128)
Receiving objects:  30% (39/128)
Receiving objects:  31% (40/128)
Receiving objects:  32% (41/128)
Receiving objects:  33% (43/128)
Receiving objects:  34% (44/128)
Receiving objects:  35% (45/128)
Receiving objects:  36% (47/128)
Receiving objects:  37% (48/128)
Receiving objects:  38% (49/128)
Receiving objects:  39% (50/128)
Receiving objects:  40% (52/128)
Receiving objects:  41% (53/128)
Receiving objects:  42% (54/128)
Receiving objects:  43% (56/128)
Receiving objects:  44% (57/128)
Receiving objects:  45% (58/128)
Receiving objects:  46% (59/128)
Receiving objects:  47% (61/128)
Receiving objects:  48% (62/128)
Receiving objects:  49% (63/128)
Receiving objects:  50% (64/128)
Receiving objects:  51% (66/128)
Receiving objects:  52% (67/128)
Receiving objects:  53% (68/128)
Receiving objects:  54% (70/128)
Receiving objects:  55% (71/128)
Receiving objects:  56% (72/128)
Receiving objects:  57% (73/128)
Receiving objects:  58% (75/128)
Receiving objects:  59% (76/128)
Receiving objects:  60% (77/128)
Receiving objects:  61% (79/128)
Receiving objects:  62% (80/128)
Receiving objects:  63% (81/128)
Receiving objects:  64% (82/128)
Receiving objects:  65% (84/128)
Receiving objects:  66% (85/128)
Receiving objects:  67% (86/128)
Receiving objects:  68% (88/128)
Receiving objects:  69% (89/128)
Receiving objects:  70% (90/128)
Receiving objects:  71% (91/128)
Receiving objects:  72% (93/128)
Receiving objects:  73% (94/128)
Receiving objects:  74% (95/128)
Receiving objects:  75% (96/128)
Receiving objects:  76% (98/128)
Receiving objects:  77% (99/128)
Receiving objects:  78% (100/128)
Receiving objects:  79% (102/128)
Receiving objects:  80% (103/128)
Receiving objects:  81% (104/128)
Receiving objects:  82% (105/128)
Receiving objects:  83% (107/128)
Receiving objects:  84% (108/128)
Receiving objects:  85% (109/128)
Receiving objects:  86% (111/128)
Receiving objects:  87% (112/128)
Receiving objects:  88% (113/128)
Receiving objects:  89% (114/128)
Receiving objects:  90% (116/128)
Receiving objects:  91% (117/128)
Receiving objects:  92% (118/128)
Receiving objects:  93% (120/128)
Receiving objects:  94% (121/128)
Receiving objects:  95% (122/128)
Receiving objects:  96% (123/128)
Receiving objects:  97% (125/128)
Receiving objects:  98% (126/128)
Receiving objects:  99% (127/128)
Receiving objects: 100% (128/128)
Receiving objects: 100% (128/128), 146.10 KiB | 6.09 MiB/s, done.
Resolving deltas:   0% (0/7)
Resolving deltas:  14% (1/7)
Resolving deltas:  28% (2/7)
Resolving deltas:  42% (3/7)
Resolving deltas:  57% (4/7)
Resolving deltas:  71% (5/7)
Resolving deltas:  85% (6/7)
Resolving deltas: 100% (7/7)
Resolving deltas: 100% (7/7), done.
From https://git.cmu.dev/ScottyLabs/kennel
 * branch            0362a89a3be00cfc05e04dc6d2c84208e5f5927f -> FETCH_HEAD
unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache...
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p matrix
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p matrix

No changes. Your infrastructure matches the configuration.

9. project: litellm dir: . workspace: litellm

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_salt_key: Refreshing state... [id=none]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p litellm
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p litellm

No changes. Your infrastructure matches the configuration.

10. project: kennel dir: . workspace: kennel

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache...
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/89b3eacf59d6b5eefbc2d69c3a4eb5aaf66d63bc?narHash=sha256-W5dvgFOuVs24X3G5tUb8C2IHU7ICXNvyGPiWWFjfbuo%3D' into the Git cache...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p kennel
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p kennel

No changes. Your infrastructure matches the configuration.

11. project: headscale dir: . workspace: headscale

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p headscale
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p headscale

No changes. Your infrastructure matches the configuration.

12. project: observability dir: . workspace: observability

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:catppuccin/nix/89b3eacf59d6b5eefbc2d69c3a4eb5aaf66d63bc?narHash=sha256-W5dvgFOuVs24X3G5tUb8C2IHU7ICXNvyGPiWWFjfbuo%3D' into the Git cache...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p observability
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p observability

No changes. Your infrastructure matches the configuration.

13. project: openbao dir: . workspace: openbao

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache...
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
this derivation will be built:
  /nix/store/kk6781676s2qid5w7kq0br8d6x9kx715-config.tf.json.drv
building '/nix/store/kk6781676s2qid5w7kq0br8d6x9kx715-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.infra: Refreshing state... [id=infra]
vault_mount.kv: Refreshing state... [id=secret]
vault_policy.devops: Refreshing state... [id=devops]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_policy.ci: Refreshing state... [id=ci]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
data.cloudflare_zones.all: Reading...
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # vault_policy.devops will be updated in-place
!   resource "vault_policy" "devops" {
        id     = "devops"
        name   = "devops"
!       policy = <<-EOT
            # Manage all secrets
            path "secret/*" {
-             capabilities = ["create", "read", "update", "delete", "list"]
+             capabilities = ["create", "read", "update", "patch", "delete", "list"]
            }
            
            # Manage AppRole auth
            path "auth/approle/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            # View OIDC auth
            path "auth/oidc/*" {
              capabilities = ["read", "list"]
            }
            
            # View policies
            path "sys/policies/*" {
              capabilities = ["read", "list"]
            }
            
            # View auth methods
            path "sys/auth" {
              capabilities = ["read"]
            }
        EOT
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/openbao/openbao-openbao.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/openbao/openbao-openbao.tfplan"
  • ▶️ To apply this plan, comment: 
    atlantis apply -p openbao
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p openbao

Plan: 0 to add, 1 to change, 0 to destroy.

14. project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
copying path '/nix/store/61snslw9vdr3ynq1sx7rmvqxcd4v43iv-source' from 'http://localhost:5000'...
unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache...
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
this derivation will be built:
  /nix/store/6m9jvdfh6jq8as08y1bpr1p0lgymavj4-config.tf.json.drv
building '/nix/store/6m9jvdfh6jq8as08y1bpr1p0lgymavj4-config.tf.json.drv'...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.cloudflare_zones.all: Reading...
keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93]
keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef]
keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4]
data.keycloak_realm.scottylabs: Reading...
keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59]
keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg]
keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12]
keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2]
keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1]
keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place (current -> planned)
  - destroy

OpenTofu will perform the following actions:

  # keycloak_custom_identity_provider_mapper.cmu_saml_username will be created
+   resource "keycloak_custom_identity_provider_mapper" "cmu_saml_username" {
+       extra_config             = {
          + "syncMode" = "INHERIT"
          + "target"   = "BROKER_USERNAME"
          + "template" = "${ATTRIBUTE.urn:oid:1.3.6.1.4.1.5923.1.1.1.6 | localpart}"
        }
+       id                       = (known after apply)
+       identity_provider_alias  = "cmu-saml"
+       identity_provider_mapper = "saml-username-idp-mapper"
+       name                     = "username"
+       realm                    = "scottylabs"
    }

  # keycloak_custom_identity_provider_mapper.cmu_username will be created
+   resource "keycloak_custom_identity_provider_mapper" "cmu_username" {
+       extra_config             = {
          + "syncMode" = "INHERIT"
          + "target"   = "BROKER_USERNAME"
          + "template" = "${CLAIM.preferred_username | localpart}"
        }
+       id                       = (known after apply)
+       identity_provider_alias  = "cmu"
+       identity_provider_mapper = "oidc-username-idp-mapper"
+       name                     = "username"
+       realm                    = "scottylabs"
    }

  # keycloak_custom_identity_provider_mapper.codeberg_email will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_email is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_email" {
-       extra_config             = {
          - "claim"          = "email"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_email"
        } -> null
-       id                       = "2bce1987-97ce-4ee5-adda-0e435c2b49ef" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_email" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_id will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_id is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_id" {
-       extra_config             = {
          - "claim"          = "sub"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_id"
        } -> null
-       id                       = "850eadbb-9508-4fac-9d43-d0f5cee2fc59" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_id" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_name will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_name is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_name" {
-       extra_config             = {
          - "claim"          = "name"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_name"
        } -> null
-       id                       = "8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_name" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_username will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_username is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_username" {
-       extra_config             = {
          - "claim"          = "preferred_username"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_username"
        } -> null
-       id                       = "e64e5c0b-d189-414d-b3bd-762d46d30a93" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_username" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_email will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_email is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_email" {
-       extra_config             = {
          - "jsonField"     = "email"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_email"
        } -> null
-       id                       = "9cdd2173-27de-46ae-bff3-66ee03797ab1" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_email" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_id will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_id is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_id" {
-       extra_config             = {
          - "jsonField"     = "id"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_id"
        } -> null
-       id                       = "e7462d44-1d0b-49e6-ae64-fb88031492c4" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_id" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_name will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_name is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_name" {
-       extra_config             = {
          - "jsonField"     = "name"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_name"
        } -> null
-       id                       = "0d38db58-87ca-46f4-82e5-23cba653dc12" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_name" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_username will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_username is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_username" {
-       extra_config             = {
          - "jsonField"     = "login"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_username"
        } -> null
-       id                       = "c07573c3-8e48-4084-89cb-3a628e5cdae2" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_username" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal will be created
+   resource "keycloak_ldap_custom_mapper" "cmu_ldap_kerberos_principal" {
+       id                      = (known after apply)
+       ldap_user_federation_id = (known after apply)
+       name                    = "Kerberos principal attribute mapper"
+       provider_id             = "kerberos-principal-attribute-mapper"
+       provider_type           = "org.keycloak.storage.ldap.mappers.LDAPStorageMapper"
+       realm_id                = "scottylabs"
    }

  # keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad will be created
+   resource "keycloak_ldap_msad_user_account_control_mapper" "cmu_ldap_msad" {
+       id                                 = (known after apply)
+       ldap_password_policy_hints_enabled = false
+       ldap_user_federation_id            = (known after apply)
+       name                               = "MSAD account controls"
+       realm_id                           = "scottylabs"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_affiliations" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "eduPersonAffiliation"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "affiliations"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "affiliations"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_class will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_class" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "cmuStudentClass"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "class"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "class"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_colleges" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "eduPersonSchoolCollegeName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "colleges"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "colleges"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_creation_date" {
+       always_read_value_from_ldap = false
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "whenCreated"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "creation date"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "createTimestamp"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_departments will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_departments" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "cmuDepartment"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "departments"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "departments"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_display_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "displayName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "display name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "displayName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_email will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_email" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "mail"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "email"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "email"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_first_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "givenName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "first name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "firstName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_full_email" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "eduPersonPrincipalName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "full email"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "fullEmail"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_full_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "cn"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "full name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "fullName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_last_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "sn"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "last name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "lastName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_level will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_level" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "cmuStudentLevel"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "level"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "level"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_middle_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "cmuMiddleName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "middle name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "middleName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_modify_date" {
+       always_read_value_from_ldap = false
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "whenChanged"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "modify date"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "modifyTimestamp"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_orcid" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "eduPersonOrcid"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "orcid"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "orcid"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_primary_affiliation" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "eduPersonPrimaryAffiliation"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "primary affiliation"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "primaryAffiliation"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_status will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_status" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "status"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "status"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "status"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_username will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_username" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "uid"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "username"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "username"
    }

  # keycloak_ldap_user_federation.cmu will be created
+   resource "keycloak_ldap_user_federation" "cmu" {
+       batch_size_for_sync             = 1
+       bind_credential                 = (sensitive value)
+       bind_dn                         = "uid=scottylabs-svc,ou=andrewperson,dc=andrew,dc=cmu,dc=edu"
+       changed_sync_period             = 3600
+       connection_pooling              = true
+       connection_url                  = "ldaps://ldap.cmu.edu"
+       custom_user_search_filter       = "(objectClass=cmuAccountPerson)"
+       debug                           = "false"
+       delete_default_mappers          = false
+       edit_mode                       = "UNSYNCED"
+       enabled                         = true
+       full_sync_period                = -1
+       id                              = (known after apply)
+       import_enabled                  = true
+       krb_principal_attribute         = "userPrincipalName"
+       name                            = "CMU LDAP"
+       pagination                      = true
+       priority                        = 0
+       rdn_ldap_attribute              = "uid"
+       realm_id                        = "scottylabs"
+       search_scope                    = "ONE_LEVEL"
+       start_tls                       = false
+       sync_registrations              = false
+       trust_email                     = true
+       use_password_modify_extended_op = false
+       use_truststore_spi              = "ALWAYS"
+       user_object_classes             = [
+           "cmuAccountPerson",
+           "inetOrgPerson",
        ]
+       username_ldap_attribute         = "uid"
+       users_dn                        = "ou=andrewperson,dc=andrew,dc=cmu,dc=edu"
+       uuid_ldap_attribute             = "guid"
+       validate_password_policy        = false
+       vendor                          = "AD"
    }

  # keycloak_oidc_google_identity_provider.google will be updated in-place
!   resource "keycloak_oidc_google_identity_provider" "google" {
-       gui_order                               = "3" -> null
        id                                      = "google"
        # (23 unchanged attributes hidden)
    }

  # keycloak_oidc_identity_provider.cmu will be created
+   resource "keycloak_oidc_identity_provider" "cmu" {
+       accepts_prompt_none_forward_from_client = false
+       add_read_token_role_on_create           = false
+       alias                                   = "cmu"
+       authenticate_by_default                 = false
+       authorization_url                       = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/authorize"
+       backchannel_supported                   = false
+       client_id                               = "9e6c9456-6584-42aa-8d2a-1ba4e45dd0a6"
+       client_secret                           = (sensitive value)
+       client_secret_wo                        = (write-only attribute)
+       default_scopes                          = "openid profile email offline_access"
+       disable_type_claim_check                = false
+       disable_user_info                       = false
+       display_name                            = "CMU"
+       enabled                                 = true
+       extra_config                            = {
          + "claimFilterName"  = "preferred_username"
          + "claimFilterValue" = "(?i)[^@]+@andrew\\.cmu\\.edu"
          + "clientAuthMethod" = "client_secret_post"
          + "filteredByClaim"  = "true"
          + "pkceEnabled"      = "true"
          + "pkceMethod"       = "S256"
        }
+       first_broker_login_flow_alias           = "Auto-link LDAP users"
+       hide_on_login_page                      = false
+       id                                      = (known after apply)
+       internal_id                             = (known after apply)
+       issuer                                  = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/v2.0"
+       jwks_url                                = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/discovery/v2.0/keys"
+       link_only                               = false
+       logout_url                              = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/logout"
+       org_redirect_mode_email_matches         = false
+       post_broker_login_flow_alias            = "SAML post login"
+       provider_id                             = "oidc"
+       realm                                   = "scottylabs"
+       store_token                             = true
+       sync_mode                               = "IMPORT"
+       token_url                               = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/token"
+       trust_email                             = true
+       ui_locales                              = false
+       user_info_url                           = "https://graph.microsoft.com/oidc/userinfo"
+       validate_signature                      = true
    }

  # keycloak_oidc_identity_provider.cmu_git will be updated in-place
!   resource "keycloak_oidc_identity_provider" "cmu_git" {
!       client_secret_wo                        = (write-only attribute)
-       gui_order                               = "1" -> null
        id                                      = "cmu-dev"
        # (30 unchanged attributes hidden)
    }

  # keycloak_oidc_identity_provider.codeberg will be destroyed
  # (because keycloak_oidc_identity_provider.codeberg is not in configuration)
-   resource "keycloak_oidc_identity_provider" "codeberg" {
-       accepts_prompt_none_forward_from_client = false -> null
-       add_read_token_role_on_create           = false -> null
-       alias                                   = "codeberg" -> null
-       authenticate_by_default                 = false -> null
-       authorization_url                       = "https://codeberg.org/login/oauth/authorize" -> null
-       backchannel_supported                   = true -> null
-       client_id                               = "63438ffe-847f-4467-a3ac-b795bc56fd5e" -> null
-       client_secret                           = (sensitive value) -> null
-       client_secret_wo                        = (write-only attribute) -> null
-       default_scopes                          = "openid" -> null
-       disable_type_claim_check                = false -> null
-       disable_user_info                       = false -> null
-       display_name                            = "Codeberg" -> null
-       enabled                                 = true -> null
-       extra_config                            = {
          - "clientAuthMethod" = "client_secret_post"
        } -> null
-       first_broker_login_flow_alias           = "first broker login" -> null
-       gui_order                               = "6" -> null
-       hide_on_login_page                      = true -> null
-       id                                      = "codeberg" -> null
-       internal_id                             = "34cc58bc-2cea-423a-8f87-2e6730b5034c" -> null
-       issuer                                  = "https://codeberg.org" -> null
-       jwks_url                                = "https://codeberg.org/login/oauth/keys" -> null
-       link_only                               = true -> null
-       org_redirect_mode_email_matches         = false -> null
-       provider_id                             = "oidc" -> null
-       realm                                   = "scottylabs" -> null
-       store_token                             = true -> null
-       sync_mode                               = "IMPORT" -> null
-       token_url                               = "https://codeberg.org/login/oauth/access_token" -> null
-       trust_email                             = false -> null
-       ui_locales                              = false -> null
-       user_info_url                           = "https://codeberg.org/login/oauth/userinfo" -> null
-       validate_signature                      = true -> null
    }

  # keycloak_oidc_identity_provider.slack will be updated in-place
!   resource "keycloak_oidc_identity_provider" "slack" {
!       client_secret_wo                        = (write-only attribute)
-       gui_order                               = "4" -> null
        id                                      = "slack"
        # (30 unchanged attributes hidden)
    }

  # keycloak_realm_user_profile.scottylabs will be updated in-place
!   resource "keycloak_realm_user_profile" "scottylabs" {
        id                         = "scottylabs"
        # (2 unchanged attributes hidden)

!       attribute {
!           display_name        = "Codeberg ID" -> "cmu.dev ID"
!           name                = "codeberg_id" -> "cmudev_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Username" -> "cmu.dev Username"
!           name                = "codeberg_username" -> "cmudev_username"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Email" -> "cmu.dev Email"
!           name                = "codeberg_email" -> "cmudev_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Name" -> "cmu.dev Name"
!           name                = "codeberg_name" -> "cmudev_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev ID" -> "Slack ID"
!           name                = "cmudev_id" -> "slack_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Username" -> "Slack Email"
!           name                = "cmudev_username" -> "slack_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Email" -> "Slack Name"
!           name                = "cmudev_email" -> "slack_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Name" -> "Google ID"
!           name                = "cmudev_name" -> "google_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Slack ID" -> "Google Email"
!           name                = "slack_id" -> "google_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Slack Email" -> "Google Name"
!           name                = "slack_email" -> "google_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Slack Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "slack_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google ID" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_id" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google Email" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_email" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub ID" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_id" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Username" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_username" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Email" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_email" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }

        # (21 unchanged blocks hidden)
    }

  # keycloak_saml_identity_provider.cmu_saml will be created
+   resource "keycloak_saml_identity_provider" "cmu_saml" {
+       add_read_token_role_on_create          = false
+       alias                                  = "cmu-saml"
+       authenticate_by_default                = false
+       display_name                           = "CMU SAML"
+       enabled                                = false
+       entity_id                              = "https://idp.scottylabs.org/realms/scottylabs"
+       extra_config                           = {
          + "allowCreate"                    = "true"
          + "attributeConsumingServiceIndex" = "0"
          + "idpEntityId"                    = "https://login.cmu.edu/idp/shibboleth"
          + "metadataDescriptorUrl"          = "https://login.cmu.edu/idp/shibboleth"
          + "useMetadataDescriptorUrl"       = "true"
        }
+       first_broker_login_flow_alias          = "Auto-link LDAP users"
+       gui_order                              = "7"
+       hide_on_login_page                     = true
+       id                                     = (known after apply)
+       internal_id                            = (known after apply)
+       link_only                              = false
+       name_id_policy_format                  = "Transient"
+       org_redirect_mode_email_matches        = false
+       post_binding_authn_request             = true
+       post_binding_response                  = true
+       post_broker_login_flow_alias           = "SAML post login"
+       principal_attribute                    = "eduPersonPrincipalName"
+       principal_type                         = "FRIENDLY_ATTRIBUTE"
+       provider_id                            = "saml"
+       realm                                  = "scottylabs"
+       signature_algorithm                    = "RSA_SHA256"
+       single_sign_on_service_url             = "https://login.cmu.edu/idp/profile/SAML2/POST/SSO"
+       store_token                            = false
+       sync_mode                              = "FORCE"
+       trust_email                            = true
+       validate_signature                     = true
+       want_authn_requests_signed             = true
+       xml_sign_key_info_key_name_transformer = "KEY_ID"
    }

Plan: 25 to add, 4 to change, 9 to destroy.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 5 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_ldap_user_federation.cmu,
│   on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu:
│  423:         "vendor": "AD"
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan"
  • ▶️ To apply this plan, comment: 
    atlantis apply -p keycloak
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak

Plan: 25 to add, 4 to change, 9 to destroy.

15. project: vaultwarden dir: . workspace: vaultwarden

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p vaultwarden
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p vaultwarden

No changes. Your infrastructure matches the configuration.

16. project: webhook dir: . workspace: webhook

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p webhook
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p webhook

No changes. Your infrastructure matches the configuration.

17. project: hosts dir: . workspace: hosts

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy
unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache...
copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'...
copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'...
unpacking 'github:zhaofengli/nix-homebrew/c11cccfdd36dd69b5323d70d354b2853379c2426?narHash=sha256-iV37ieTcE4ZLOYEe0VznW6dWMBe4lEL8AbK1vblyZGM%3D' into the Git cache...


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.25.0 to the shared cache directory...
- Installing keycloak/keycloak v5.9.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.12.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.9.0 (unauthenticated)
- Using keycloak/keycloak v5.9.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.12.0 (unauthenticated)
- Using hashicorp/vault v5.12.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.25.0 (unauthenticated)
- Using cloudflare/cloudflare v5.25.0 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p hosts
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p hosts

No changes. Your infrastructure matches the configuration.

Plan Summary

17 projects, 2 with changes, 15 with no changes, 0 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 17 projects: 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `hosts` dir: `.` workspace: `hosts` --- ### 1. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_policy.governance: Refreshing state... [id=governance] vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] data.cloudflare_zones.all: Read complete after 1s No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy unpacking 'github:numtide/systemd-vaultd/7cfd544194b06b3dc2b502bef9631051c18f95d6?narHash=sha256-SM7uPLl//H0UzVeEInh9Q7GtBtkvGPtph0FxBEnSJuc%3D' into the Git cache... copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing svalabs/forgejo v1.6.1 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed svalabs/forgejo v1.6.1 (unauthenticated) - Using svalabs/forgejo v1.6.1 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.governance: Refreshing state... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] forgejo_repository_webhook.infrastructure: Refreshing state... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache... unpacking 'github:numtide/systemd-vaultd/7cfd544194b06b3dc2b502bef9631051c18f95d6?narHash=sha256-SM7uPLl//H0UzVeEInh9Q7GtBtkvGPtph0FxBEnSJuc%3D' into the Git cache... copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/89b3eacf59d6b5eefbc2d69c3a4eb5aaf66d63bc?narHash=sha256-W5dvgFOuVs24X3G5tUb8C2IHU7ICXNvyGPiWWFjfbuo%3D' into the Git cache... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache... unpacking 'github:numtide/systemd-vaultd/7cfd544194b06b3dc2b502bef9631051c18f95d6?narHash=sha256-SM7uPLl//H0UzVeEInh9Q7GtBtkvGPtph0FxBEnSJuc%3D' into the Git cache... copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/89b3eacf59d6b5eefbc2d69c3a4eb5aaf66d63bc?narHash=sha256-W5dvgFOuVs24X3G5tUb8C2IHU7ICXNvyGPiWWFjfbuo%3D' into the Git cache... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy copying path '/nix/store/61snslw9vdr3ynq1sx7rmvqxcd4v43iv-source' from 'http://localhost:5000'... remote: Enumerating objects: 128, done. remote: Counting objects: 0% (1/128) remote: Counting objects: 1% (2/128) remote: Counting objects: 2% (3/128) remote: Counting objects: 3% (4/128) remote: Counting objects: 4% (6/128) remote: Counting objects: 5% (7/128) remote: Counting objects: 6% (8/128) remote: Counting objects: 7% (9/128) remote: Counting objects: 8% (11/128) remote: Counting objects: 9% (12/128) remote: Counting objects: 10% (13/128) remote: Counting objects: 11% (15/128) remote: Counting objects: 12% (16/128) remote: Counting objects: 13% (17/128) remote: Counting objects: 14% (18/128) remote: Counting objects: 15% (20/128) remote: Counting objects: 16% (21/128) remote: Counting objects: 17% (22/128) remote: Counting objects: 18% (24/128) remote: Counting objects: 19% (25/128) remote: Counting objects: 20% (26/128) remote: Counting objects: 21% (27/128) remote: Counting objects: 22% (29/128) remote: Counting objects: 23% (30/128) remote: Counting objects: 24% (31/128) remote: Counting objects: 25% (32/128) remote: Counting objects: 26% (34/128) remote: Counting objects: 27% (35/128) remote: Counting objects: 28% (36/128) remote: Counting objects: 29% (38/128) remote: Counting objects: 30% (39/128) remote: Counting objects: 31% (40/128) remote: Counting objects: 32% (41/128) remote: Counting objects: 33% (43/128) remote: Counting objects: 34% (44/128) remote: Counting objects: 35% (45/128) remote: Counting objects: 36% (47/128) remote: Counting objects: 37% (48/128) remote: Counting objects: 38% (49/128) remote: Counting objects: 39% (50/128) remote: Counting objects: 40% (52/128) remote: Counting objects: 41% (53/128) remote: Counting objects: 42% (54/128) remote: Counting objects: 43% (56/128) remote: Counting objects: 44% (57/128) remote: Counting objects: 45% (58/128) remote: Counting objects: 46% (59/128) remote: Counting objects: 47% (61/128) remote: Counting objects: 48% (62/128) remote: Counting objects: 49% (63/128) remote: Counting objects: 50% (64/128) remote: Counting objects: 51% (66/128) remote: Counting objects: 52% (67/128) remote: Counting objects: 53% (68/128) remote: Counting objects: 54% (70/128) remote: Counting objects: 55% (71/128) remote: Counting objects: 56% (72/128) remote: Counting objects: 57% (73/128) remote: Counting objects: 58% (75/128) remote: Counting objects: 59% (76/128) remote: Counting objects: 60% (77/128) remote: Counting objects: 61% (79/128) remote: Counting objects: 62% (80/128) remote: Counting objects: 63% (81/128) remote: Counting objects: 64% (82/128) remote: Counting objects: 65% (84/128) remote: Counting objects: 66% (85/128) remote: Counting objects: 67% (86/128) remote: Counting objects: 68% (88/128) remote: Counting objects: 69% (89/128) remote: Counting objects: 70% (90/128) remote: Counting objects: 71% (91/128) remote: Counting objects: 72% (93/128) remote: Counting objects: 73% (94/128) remote: Counting objects: 74% (95/128) remote: Counting objects: 75% (96/128) remote: Counting objects: 76% (98/128) remote: Counting objects: 77% (99/128) remote: Counting objects: 78% (100/128) remote: Counting objects: 79% (102/128) remote: Counting objects: 80% (103/128) remote: Counting objects: 81% (104/128) remote: Counting objects: 82% (105/128) remote: Counting objects: 83% (107/128) remote: Counting objects: 84% (108/128) remote: Counting objects: 85% (109/128) remote: Counting objects: 86% (111/128) remote: Counting objects: 87% (112/128) remote: Counting objects: 88% (113/128) remote: Counting objects: 89% (114/128) remote: Counting objects: 90% (116/128) remote: Counting objects: 91% (117/128) remote: Counting objects: 92% (118/128) remote: Counting objects: 93% (120/128) remote: Counting objects: 94% (121/128) remote: Counting objects: 95% (122/128) remote: Counting objects: 96% (123/128) remote: Counting objects: 97% (125/128) remote: Counting objects: 98% (126/128) remote: Counting objects: 99% (127/128) remote: Counting objects: 100% (128/128) remote: Counting objects: 100% (128/128), done. remote: Compressing objects: 0% (1/124) remote: Compressing objects: 1% (2/124) remote: Compressing objects: 2% (3/124) remote: Compressing objects: 3% (4/124) remote: Compressing objects: 4% (5/124) remote: Compressing objects: 5% (7/124) remote: Compressing objects: 6% (8/124) remote: Compressing objects: 7% (9/124) remote: Compressing objects: 8% (10/124) remote: Compressing objects: 9% (12/124) remote: Compressing objects: 10% (13/124) remote: Compressing objects: 11% (14/124) remote: Compressing objects: 12% (15/124) remote: Compressing objects: 13% (17/124) remote: Compressing objects: 14% (18/124) remote: Compressing objects: 15% (19/124) remote: Compressing objects: 16% (20/124) remote: Compressing objects: 17% (22/124) remote: Compressing objects: 18% (23/124) remote: Compressing objects: 19% (24/124) remote: Compressing objects: 20% (25/124) remote: Compressing objects: 21% (27/124) remote: Compressing objects: 22% (28/124) remote: Compressing objects: 23% (29/124) remote: Compressing objects: 24% (30/124) remote: Compressing objects: 25% (31/124) remote: Compressing objects: 26% (33/124) remote: Compressing objects: 27% (34/124) remote: Compressing objects: 28% (35/124) remote: Compressing objects: 29% (36/124) remote: Compressing objects: 30% (38/124) remote: Compressing objects: 31% (39/124) remote: Compressing objects: 32% (40/124) remote: Compressing objects: 33% (41/124) remote: Compressing objects: 34% (43/124) remote: Compressing objects: 35% (44/124) remote: Compressing objects: 36% (45/124) remote: Compressing objects: 37% (46/124) remote: Compressing objects: 38% (48/124) remote: Compressing objects: 39% (49/124) remote: Compressing objects: 40% (50/124) remote: Compressing objects: 41% (51/124) remote: Compressing objects: 42% (53/124) remote: Compressing objects: 43% (54/124) remote: Compressing objects: 44% (55/124) remote: Compressing objects: 45% (56/124) remote: Compressing objects: 46% (58/124) remote: Compressing objects: 47% (59/124) remote: Compressing objects: 48% (60/124) remote: Compressing objects: 49% (61/124) remote: Compressing objects: 50% (62/124) remote: Compressing objects: 51% (64/124) remote: Compressing objects: 52% (65/124) remote: Compressing objects: 53% (66/124) remote: Compressing objects: 54% (67/124) remote: Compressing objects: 55% (69/124) remote: Compressing objects: 56% (70/124) remote: Compressing objects: 57% (71/124) remote: Compressing objects: 58% (72/124) remote: Compressing objects: 59% (74/124) remote: Compressing objects: 60% (75/124) remote: Compressing objects: 61% (76/124) remote: Compressing objects: 62% (77/124) remote: Compressing objects: 63% (79/124) remote: Compressing objects: 64% (80/124) remote: Compressing objects: 65% (81/124) remote: Compressing objects: 66% (82/124) remote: Compressing objects: 67% (84/124) remote: Compressing objects: 68% (85/124) remote: Compressing objects: 69% (86/124) remote: Compressing objects: 70% (87/124) remote: Compressing objects: 71% (89/124) remote: Compressing objects: 72% (90/124) remote: Compressing objects: 73% (91/124) remote: Compressing objects: 74% (92/124) remote: Compressing objects: 75% (93/124) remote: Compressing objects: 76% (95/124) remote: Compressing objects: 77% (96/124) remote: Compressing objects: 78% (97/124) remote: Compressing objects: 79% (98/124) remote: Compressing objects: 80% (100/124) remote: Compressing objects: 81% (101/124) remote: Compressing objects: 82% (102/124) remote: Compressing objects: 83% (103/124) remote: Compressing objects: 84% (105/124) remote: Compressing objects: 85% (106/124) remote: Compressing objects: 86% (107/124) remote: Compressing objects: 87% (108/124) remote: Compressing objects: 88% (110/124) remote: Compressing objects: 89% (111/124) remote: Compressing objects: 90% (112/124) remote: Compressing objects: 91% (113/124) remote: Compressing objects: 92% (115/124) remote: Compressing objects: 93% (116/124) remote: Compressing objects: 94% (117/124) remote: Compressing objects: 95% (118/124) remote: Compressing objects: 96% (120/124) remote: Compressing objects: 97% (121/124) remote: Compressing objects: 98% (122/124) remote: Compressing objects: 99% (123/124) remote: Compressing objects: 100% (124/124) remote: Compressing objects: 100% (124/124), done. Receiving objects: 0% (1/128) Receiving objects: 1% (2/128) Receiving objects: 2% (3/128) Receiving objects: 3% (4/128) Receiving objects: 4% (6/128) Receiving objects: 5% (7/128) Receiving objects: 6% (8/128) Receiving objects: 7% (9/128) Receiving objects: 8% (11/128) remote: Total 128 (delta 7), reused 49 (delta 0), pack-reused 0 (from 0) Receiving objects: 9% (12/128) Receiving objects: 10% (13/128) Receiving objects: 11% (15/128) Receiving objects: 12% (16/128) Receiving objects: 13% (17/128) Receiving objects: 14% (18/128) Receiving objects: 15% (20/128) Receiving objects: 16% (21/128) Receiving objects: 17% (22/128) Receiving objects: 18% (24/128) Receiving objects: 19% (25/128) Receiving objects: 20% (26/128) Receiving objects: 21% (27/128) Receiving objects: 22% (29/128) Receiving objects: 23% (30/128) Receiving objects: 24% (31/128) Receiving objects: 25% (32/128) Receiving objects: 26% (34/128) Receiving objects: 27% (35/128) Receiving objects: 28% (36/128) Receiving objects: 29% (38/128) Receiving objects: 30% (39/128) Receiving objects: 31% (40/128) Receiving objects: 32% (41/128) Receiving objects: 33% (43/128) Receiving objects: 34% (44/128) Receiving objects: 35% (45/128) Receiving objects: 36% (47/128) Receiving objects: 37% (48/128) Receiving objects: 38% (49/128) Receiving objects: 39% (50/128) Receiving objects: 40% (52/128) Receiving objects: 41% (53/128) Receiving objects: 42% (54/128) Receiving objects: 43% (56/128) Receiving objects: 44% (57/128) Receiving objects: 45% (58/128) Receiving objects: 46% (59/128) Receiving objects: 47% (61/128) Receiving objects: 48% (62/128) Receiving objects: 49% (63/128) Receiving objects: 50% (64/128) Receiving objects: 51% (66/128) Receiving objects: 52% (67/128) Receiving objects: 53% (68/128) Receiving objects: 54% (70/128) Receiving objects: 55% (71/128) Receiving objects: 56% (72/128) Receiving objects: 57% (73/128) Receiving objects: 58% (75/128) Receiving objects: 59% (76/128) Receiving objects: 60% (77/128) Receiving objects: 61% (79/128) Receiving objects: 62% (80/128) Receiving objects: 63% (81/128) Receiving objects: 64% (82/128) Receiving objects: 65% (84/128) Receiving objects: 66% (85/128) Receiving objects: 67% (86/128) Receiving objects: 68% (88/128) Receiving objects: 69% (89/128) Receiving objects: 70% (90/128) Receiving objects: 71% (91/128) Receiving objects: 72% (93/128) Receiving objects: 73% (94/128) Receiving objects: 74% (95/128) Receiving objects: 75% (96/128) Receiving objects: 76% (98/128) Receiving objects: 77% (99/128) Receiving objects: 78% (100/128) Receiving objects: 79% (102/128) Receiving objects: 80% (103/128) Receiving objects: 81% (104/128) Receiving objects: 82% (105/128) Receiving objects: 83% (107/128) Receiving objects: 84% (108/128) Receiving objects: 85% (109/128) Receiving objects: 86% (111/128) Receiving objects: 87% (112/128) Receiving objects: 88% (113/128) Receiving objects: 89% (114/128) Receiving objects: 90% (116/128) Receiving objects: 91% (117/128) Receiving objects: 92% (118/128) Receiving objects: 93% (120/128) Receiving objects: 94% (121/128) Receiving objects: 95% (122/128) Receiving objects: 96% (123/128) Receiving objects: 97% (125/128) Receiving objects: 98% (126/128) Receiving objects: 99% (127/128) Receiving objects: 100% (128/128) Receiving objects: 100% (128/128), 146.10 KiB | 6.09 MiB/s, done. Resolving deltas: 0% (0/7) Resolving deltas: 14% (1/7) Resolving deltas: 28% (2/7) Resolving deltas: 42% (3/7) Resolving deltas: 57% (4/7) Resolving deltas: 71% (5/7) Resolving deltas: 85% (6/7) Resolving deltas: 100% (7/7) Resolving deltas: 100% (7/7), done. From https://git.cmu.dev/ScottyLabs/kennel * branch 0362a89a3be00cfc05e04dc6d2c84208e5f5927f -> FETCH_HEAD unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache... copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.litellm_master_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_salt_key: Refreshing state... [id=none] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache... copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/89b3eacf59d6b5eefbc2d69c3a4eb5aaf66d63bc?narHash=sha256-W5dvgFOuVs24X3G5tUb8C2IHU7ICXNvyGPiWWFjfbuo%3D' into the Git cache... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:catppuccin/nix/89b3eacf59d6b5eefbc2d69c3a4eb5aaf66d63bc?narHash=sha256-W5dvgFOuVs24X3G5tUb8C2IHU7ICXNvyGPiWWFjfbuo%3D' into the Git cache... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache... copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... this derivation will be built: /nix/store/kk6781676s2qid5w7kq0br8d6x9kx715-config.tf.json.drv building '/nix/store/kk6781676s2qid5w7kq0br8d6x9kx715-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.infra: Refreshing state... [id=infra] vault_mount.kv: Refreshing state... [id=secret] vault_policy.devops: Refreshing state... [id=devops] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_auth_backend.approle: Refreshing state... [id=approle] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_policy.ci: Refreshing state... [id=ci] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] data.cloudflare_zones.all: Reading... keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # vault_policy.devops will be updated in-place ! resource "vault_policy" "devops" { id = "devops" name = "devops" ! policy = <<-EOT # Manage all secrets path "secret/*" { - capabilities = ["create", "read", "update", "delete", "list"] + capabilities = ["create", "read", "update", "patch", "delete", "list"] } # Manage AppRole auth path "auth/approle/*" { capabilities = ["create", "read", "update", "delete", "list"] } # View OIDC auth path "auth/oidc/*" { capabilities = ["read", "list"] } # View policies path "sys/policies/*" { capabilities = ["read", "list"] } # View auth methods path "sys/auth" { capabilities = ["read"] } EOT } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/153/openbao/openbao-openbao.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/openbao/openbao-openbao.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 14. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy copying path '/nix/store/61snslw9vdr3ynq1sx7rmvqxcd4v43iv-source' from 'http://localhost:5000'... unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache... copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... this derivation will be built: /nix/store/6m9jvdfh6jq8as08y1bpr1p0lgymavj4-config.tf.json.drv building '/nix/store/6m9jvdfh6jq8as08y1bpr1p0lgymavj4-config.tf.json.drv'... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.cloudflare_zones.all: Reading... keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93] keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef] keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4] data.keycloak_realm.scottylabs: Reading... keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59] keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg] keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12] keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2] keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1] keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create ~ update in-place (current -> planned) - destroy OpenTofu will perform the following actions: # keycloak_custom_identity_provider_mapper.cmu_saml_username will be created + resource "keycloak_custom_identity_provider_mapper" "cmu_saml_username" { + extra_config = { + "syncMode" = "INHERIT" + "target" = "BROKER_USERNAME" + "template" = "${ATTRIBUTE.urn:oid:1.3.6.1.4.1.5923.1.1.1.6 | localpart}" } + id = (known after apply) + identity_provider_alias = "cmu-saml" + identity_provider_mapper = "saml-username-idp-mapper" + name = "username" + realm = "scottylabs" } # keycloak_custom_identity_provider_mapper.cmu_username will be created + resource "keycloak_custom_identity_provider_mapper" "cmu_username" { + extra_config = { + "syncMode" = "INHERIT" + "target" = "BROKER_USERNAME" + "template" = "${CLAIM.preferred_username | localpart}" } + id = (known after apply) + identity_provider_alias = "cmu" + identity_provider_mapper = "oidc-username-idp-mapper" + name = "username" + realm = "scottylabs" } # keycloak_custom_identity_provider_mapper.codeberg_email will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_email is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_email" { - extra_config = { - "claim" = "email" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_email" } -> null - id = "2bce1987-97ce-4ee5-adda-0e435c2b49ef" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_email" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_id will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_id is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_id" { - extra_config = { - "claim" = "sub" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_id" } -> null - id = "850eadbb-9508-4fac-9d43-d0f5cee2fc59" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_id" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_name will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_name is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_name" { - extra_config = { - "claim" = "name" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_name" } -> null - id = "8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_name" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_username will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_username is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_username" { - extra_config = { - "claim" = "preferred_username" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_username" } -> null - id = "e64e5c0b-d189-414d-b3bd-762d46d30a93" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_username" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_email will be destroyed # (because keycloak_custom_identity_provider_mapper.github_email is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_email" { - extra_config = { - "jsonField" = "email" - "syncMode" = "FORCE" - "userAttribute" = "github_email" } -> null - id = "9cdd2173-27de-46ae-bff3-66ee03797ab1" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_email" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_id will be destroyed # (because keycloak_custom_identity_provider_mapper.github_id is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_id" { - extra_config = { - "jsonField" = "id" - "syncMode" = "FORCE" - "userAttribute" = "github_id" } -> null - id = "e7462d44-1d0b-49e6-ae64-fb88031492c4" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_id" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_name will be destroyed # (because keycloak_custom_identity_provider_mapper.github_name is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_name" { - extra_config = { - "jsonField" = "name" - "syncMode" = "FORCE" - "userAttribute" = "github_name" } -> null - id = "0d38db58-87ca-46f4-82e5-23cba653dc12" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_name" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_username will be destroyed # (because keycloak_custom_identity_provider_mapper.github_username is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_username" { - extra_config = { - "jsonField" = "login" - "syncMode" = "FORCE" - "userAttribute" = "github_username" } -> null - id = "c07573c3-8e48-4084-89cb-3a628e5cdae2" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_username" -> null - realm = "scottylabs" -> null } # keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal will be created + resource "keycloak_ldap_custom_mapper" "cmu_ldap_kerberos_principal" { + id = (known after apply) + ldap_user_federation_id = (known after apply) + name = "Kerberos principal attribute mapper" + provider_id = "kerberos-principal-attribute-mapper" + provider_type = "org.keycloak.storage.ldap.mappers.LDAPStorageMapper" + realm_id = "scottylabs" } # keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad will be created + resource "keycloak_ldap_msad_user_account_control_mapper" "cmu_ldap_msad" { + id = (known after apply) + ldap_password_policy_hints_enabled = false + ldap_user_federation_id = (known after apply) + name = "MSAD account controls" + realm_id = "scottylabs" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_affiliations" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "eduPersonAffiliation" + ldap_user_federation_id = (known after apply) + name = "affiliations" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "affiliations" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_class will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_class" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "cmuStudentClass" + ldap_user_federation_id = (known after apply) + name = "class" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "class" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_colleges" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "eduPersonSchoolCollegeName" + ldap_user_federation_id = (known after apply) + name = "colleges" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "colleges" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_creation_date" { + always_read_value_from_ldap = false + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "whenCreated" + ldap_user_federation_id = (known after apply) + name = "creation date" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "createTimestamp" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_departments will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_departments" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "cmuDepartment" + ldap_user_federation_id = (known after apply) + name = "departments" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "departments" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_display_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "displayName" + ldap_user_federation_id = (known after apply) + name = "display name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "displayName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_email will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_email" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "mail" + ldap_user_federation_id = (known after apply) + name = "email" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "email" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_first_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "givenName" + ldap_user_federation_id = (known after apply) + name = "first name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "firstName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_full_email" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "eduPersonPrincipalName" + ldap_user_federation_id = (known after apply) + name = "full email" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "fullEmail" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_full_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "cn" + ldap_user_federation_id = (known after apply) + name = "full name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "fullName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_last_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "sn" + ldap_user_federation_id = (known after apply) + name = "last name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "lastName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_level will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_level" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "cmuStudentLevel" + ldap_user_federation_id = (known after apply) + name = "level" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "level" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_middle_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "cmuMiddleName" + ldap_user_federation_id = (known after apply) + name = "middle name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "middleName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_modify_date" { + always_read_value_from_ldap = false + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "whenChanged" + ldap_user_federation_id = (known after apply) + name = "modify date" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "modifyTimestamp" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_orcid" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "eduPersonOrcid" + ldap_user_federation_id = (known after apply) + name = "orcid" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "orcid" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_primary_affiliation" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "eduPersonPrimaryAffiliation" + ldap_user_federation_id = (known after apply) + name = "primary affiliation" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "primaryAffiliation" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_status will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_status" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "status" + ldap_user_federation_id = (known after apply) + name = "status" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "status" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_username will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_username" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "uid" + ldap_user_federation_id = (known after apply) + name = "username" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "username" } # keycloak_ldap_user_federation.cmu will be created + resource "keycloak_ldap_user_federation" "cmu" { + batch_size_for_sync = 1 + bind_credential = (sensitive value) + bind_dn = "uid=scottylabs-svc,ou=andrewperson,dc=andrew,dc=cmu,dc=edu" + changed_sync_period = 3600 + connection_pooling = true + connection_url = "ldaps://ldap.cmu.edu" + custom_user_search_filter = "(objectClass=cmuAccountPerson)" + debug = "false" + delete_default_mappers = false + edit_mode = "UNSYNCED" + enabled = true + full_sync_period = -1 + id = (known after apply) + import_enabled = true + krb_principal_attribute = "userPrincipalName" + name = "CMU LDAP" + pagination = true + priority = 0 + rdn_ldap_attribute = "uid" + realm_id = "scottylabs" + search_scope = "ONE_LEVEL" + start_tls = false + sync_registrations = false + trust_email = true + use_password_modify_extended_op = false + use_truststore_spi = "ALWAYS" + user_object_classes = [ + "cmuAccountPerson", + "inetOrgPerson", ] + username_ldap_attribute = "uid" + users_dn = "ou=andrewperson,dc=andrew,dc=cmu,dc=edu" + uuid_ldap_attribute = "guid" + validate_password_policy = false + vendor = "AD" } # keycloak_oidc_google_identity_provider.google will be updated in-place ! resource "keycloak_oidc_google_identity_provider" "google" { - gui_order = "3" -> null id = "google" # (23 unchanged attributes hidden) } # keycloak_oidc_identity_provider.cmu will be created + resource "keycloak_oidc_identity_provider" "cmu" { + accepts_prompt_none_forward_from_client = false + add_read_token_role_on_create = false + alias = "cmu" + authenticate_by_default = false + authorization_url = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/authorize" + backchannel_supported = false + client_id = "9e6c9456-6584-42aa-8d2a-1ba4e45dd0a6" + client_secret = (sensitive value) + client_secret_wo = (write-only attribute) + default_scopes = "openid profile email offline_access" + disable_type_claim_check = false + disable_user_info = false + display_name = "CMU" + enabled = true + extra_config = { + "claimFilterName" = "preferred_username" + "claimFilterValue" = "(?i)[^@]+@andrew\\.cmu\\.edu" + "clientAuthMethod" = "client_secret_post" + "filteredByClaim" = "true" + "pkceEnabled" = "true" + "pkceMethod" = "S256" } + first_broker_login_flow_alias = "Auto-link LDAP users" + hide_on_login_page = false + id = (known after apply) + internal_id = (known after apply) + issuer = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/v2.0" + jwks_url = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/discovery/v2.0/keys" + link_only = false + logout_url = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/logout" + org_redirect_mode_email_matches = false + post_broker_login_flow_alias = "SAML post login" + provider_id = "oidc" + realm = "scottylabs" + store_token = true + sync_mode = "IMPORT" + token_url = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/token" + trust_email = true + ui_locales = false + user_info_url = "https://graph.microsoft.com/oidc/userinfo" + validate_signature = true } # keycloak_oidc_identity_provider.cmu_git will be updated in-place ! resource "keycloak_oidc_identity_provider" "cmu_git" { ! client_secret_wo = (write-only attribute) - gui_order = "1" -> null id = "cmu-dev" # (30 unchanged attributes hidden) } # keycloak_oidc_identity_provider.codeberg will be destroyed # (because keycloak_oidc_identity_provider.codeberg is not in configuration) - resource "keycloak_oidc_identity_provider" "codeberg" { - accepts_prompt_none_forward_from_client = false -> null - add_read_token_role_on_create = false -> null - alias = "codeberg" -> null - authenticate_by_default = false -> null - authorization_url = "https://codeberg.org/login/oauth/authorize" -> null - backchannel_supported = true -> null - client_id = "63438ffe-847f-4467-a3ac-b795bc56fd5e" -> null - client_secret = (sensitive value) -> null - client_secret_wo = (write-only attribute) -> null - default_scopes = "openid" -> null - disable_type_claim_check = false -> null - disable_user_info = false -> null - display_name = "Codeberg" -> null - enabled = true -> null - extra_config = { - "clientAuthMethod" = "client_secret_post" } -> null - first_broker_login_flow_alias = "first broker login" -> null - gui_order = "6" -> null - hide_on_login_page = true -> null - id = "codeberg" -> null - internal_id = "34cc58bc-2cea-423a-8f87-2e6730b5034c" -> null - issuer = "https://codeberg.org" -> null - jwks_url = "https://codeberg.org/login/oauth/keys" -> null - link_only = true -> null - org_redirect_mode_email_matches = false -> null - provider_id = "oidc" -> null - realm = "scottylabs" -> null - store_token = true -> null - sync_mode = "IMPORT" -> null - token_url = "https://codeberg.org/login/oauth/access_token" -> null - trust_email = false -> null - ui_locales = false -> null - user_info_url = "https://codeberg.org/login/oauth/userinfo" -> null - validate_signature = true -> null } # keycloak_oidc_identity_provider.slack will be updated in-place ! resource "keycloak_oidc_identity_provider" "slack" { ! client_secret_wo = (write-only attribute) - gui_order = "4" -> null id = "slack" # (30 unchanged attributes hidden) } # keycloak_realm_user_profile.scottylabs will be updated in-place ! resource "keycloak_realm_user_profile" "scottylabs" { id = "scottylabs" # (2 unchanged attributes hidden) ! attribute { ! display_name = "Codeberg ID" -> "cmu.dev ID" ! name = "codeberg_id" -> "cmudev_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Username" -> "cmu.dev Username" ! name = "codeberg_username" -> "cmudev_username" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Email" -> "cmu.dev Email" ! name = "codeberg_email" -> "cmudev_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Name" -> "cmu.dev Name" ! name = "codeberg_name" -> "cmudev_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev ID" -> "Slack ID" ! name = "cmudev_id" -> "slack_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Username" -> "Slack Email" ! name = "cmudev_username" -> "slack_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Email" -> "Slack Name" ! name = "cmudev_email" -> "slack_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Name" -> "Google ID" ! name = "cmudev_name" -> "google_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Slack ID" -> "Google Email" ! name = "slack_id" -> "google_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Slack Email" -> "Google Name" ! name = "slack_email" -> "google_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } - attribute { - annotations = {} -> null - display_name = "Slack Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "slack_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google ID" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_id" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google Email" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_email" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub ID" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_id" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Username" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_username" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Email" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_email" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } # (21 unchanged blocks hidden) } # keycloak_saml_identity_provider.cmu_saml will be created + resource "keycloak_saml_identity_provider" "cmu_saml" { + add_read_token_role_on_create = false + alias = "cmu-saml" + authenticate_by_default = false + display_name = "CMU SAML" + enabled = false + entity_id = "https://idp.scottylabs.org/realms/scottylabs" + extra_config = { + "allowCreate" = "true" + "attributeConsumingServiceIndex" = "0" + "idpEntityId" = "https://login.cmu.edu/idp/shibboleth" + "metadataDescriptorUrl" = "https://login.cmu.edu/idp/shibboleth" + "useMetadataDescriptorUrl" = "true" } + first_broker_login_flow_alias = "Auto-link LDAP users" + gui_order = "7" + hide_on_login_page = true + id = (known after apply) + internal_id = (known after apply) + link_only = false + name_id_policy_format = "Transient" + org_redirect_mode_email_matches = false + post_binding_authn_request = true + post_binding_response = true + post_broker_login_flow_alias = "SAML post login" + principal_attribute = "eduPersonPrincipalName" + principal_type = "FRIENDLY_ATTRIBUTE" + provider_id = "saml" + realm = "scottylabs" + signature_algorithm = "RSA_SHA256" + single_sign_on_service_url = "https://login.cmu.edu/idp/profile/SAML2/POST/SSO" + store_token = false + sync_mode = "FORCE" + trust_email = true + validate_signature = true + want_authn_requests_signed = true + xml_sign_key_info_key_name_transformer = "KEY_ID" } Plan: 25 to add, 4 to change, 9 to destroy. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 5 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_ldap_user_federation.cmu, │ on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu: │ 423: "vendor": "AD" │ │ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` Plan: 25 to add, 4 to change, 9 to destroy. --- ### 15. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy unpacking 'github:feel-co/ncro/bb4fb8329e30dc294b2298618ba96379860dfd4d?narHash=sha256-o5qPU/QPxcAmeVwFydXqEkn1HI6TbPgkHpecXyme6Bs%3D' into the Git cache... copying path '/nix/store/8bhhaac4n9nd6z3ickg9fwkv0b1plp5g-source' from 'http://localhost:5000'... copying path '/nix/store/adcpmshidndclaz4dxjsgklrx3gqhaxp-source' from 'http://localhost:5000'... unpacking 'github:zhaofengli/nix-homebrew/c11cccfdd36dd69b5323d70d354b2853379c2426?narHash=sha256-iV37ieTcE4ZLOYEe0VznW6dWMBe4lEL8AbK1vblyZGM%3D' into the Git cache... Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.25.0 to the shared cache directory... - Installing keycloak/keycloak v5.9.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.12.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.9.0 (unauthenticated) - Using keycloak/keycloak v5.9.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.12.0 (unauthenticated) - Using hashicorp/vault v5.12.0 from the shared cache directory - Installed cloudflare/cloudflare v5.25.0 (unauthenticated) - Using cloudflare/cloudflare v5.25.0 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 17 projects, 2 with changes, 15 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
scottylabs-bot commented 2026-09-22 23:34:09 +00:00
Owner
Copy link

Plan Error

cannot run "plan": pull request 153 is currently locked by "plan" for commit d222570.
Wait until the previous command is complete and try again
**Plan Error** ``` cannot run "plan": pull request 153 is currently locked by "plan" for commit d222570. Wait until the previous command is complete and try again ``` - Commit: [d222570eb621b7c1c758215f6a180bc479bc03a0](https://git.cmu.dev/ScottyLabs/infrastructure/pulls/153/commits/d222570eb621b7c1c758215f6a180bc479bc03a0) - Multiple Atlantis jobs are currently running for this commit.
scottylabs-bot commented 2026-09-22 23:34:22 +00:00
Owner
Copy link

Ran Plan for 17 projects:

  1. project: governance dir: . workspace: governance
  2. project: snot dir: . workspace: snot
  3. project: posthog dir: . workspace: posthog
  4. project: forgejo dir: . workspace: forgejo
  5. project: observability dir: . workspace: observability
  6. project: openbao dir: . workspace: openbao
  7. project: ricochet dir: . workspace: ricochet
  8. project: matrix dir: . workspace: matrix
  9. project: garage-webadmin dir: . workspace: garage-webadmin
  10. project: atlantis dir: . workspace: atlantis
  11. project: hosts dir: . workspace: hosts
  12. project: keycloak dir: . workspace: keycloak
  13. project: kennel dir: . workspace: kennel
  14. project: headscale dir: . workspace: headscale
  15. project: litellm dir: . workspace: litellm
  16. project: vaultwarden dir: . workspace: vaultwarden
  17. project: webhook dir: . workspace: webhook

1. project: governance dir: . workspace: governance

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_policy.governance: Refreshing state... [id=governance]
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
data.cloudflare_zones.all: Read complete after 1s

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p governance
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p governance

No changes. Your infrastructure matches the configuration.

2. project: snot dir: . workspace: snot

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p snot
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p snot

No changes. Your infrastructure matches the configuration.

3. project: posthog dir: . workspace: posthog

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p posthog
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p posthog

No changes. Your infrastructure matches the configuration.

4. project: forgejo dir: . workspace: forgejo

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p forgejo
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p forgejo

No changes. Your infrastructure matches the configuration.

5. project: observability dir: . workspace: observability

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p observability
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p observability

No changes. Your infrastructure matches the configuration.

6. project: openbao dir: . workspace: openbao

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
vault_mount.kv: Refreshing state... [id=secret]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_policy.devops: Refreshing state... [id=devops]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.infra: Refreshing state... [id=infra]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # vault_policy.devops will be updated in-place
!   resource "vault_policy" "devops" {
        id     = "devops"
        name   = "devops"
!       policy = <<-EOT
            # Manage all secrets
            path "secret/*" {
-             capabilities = ["create", "read", "update", "delete", "list"]
+             capabilities = ["create", "read", "update", "patch", "delete", "list"]
            }
            
            # Manage AppRole auth
            path "auth/approle/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            # View OIDC auth
            path "auth/oidc/*" {
              capabilities = ["read", "list"]
            }
            
            # View policies
            path "sys/policies/*" {
              capabilities = ["read", "list"]
            }
            
            # View auth methods
            path "sys/auth" {
              capabilities = ["read"]
            }
        EOT
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/openbao/openbao-openbao.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/openbao/openbao-openbao.tfplan"
  • ▶️ To apply this plan, comment: 
    atlantis apply -p openbao
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p openbao

Plan: 0 to add, 1 to change, 0 to destroy.

7. project: ricochet dir: . workspace: ricochet

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p ricochet
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p ricochet

No changes. Your infrastructure matches the configuration.

8. project: matrix dir: . workspace: matrix

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p matrix
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p matrix

No changes. Your infrastructure matches the configuration.

9. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p garage-webadmin
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p garage-webadmin

No changes. Your infrastructure matches the configuration.

10. project: atlantis dir: . workspace: atlantis

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed svalabs/forgejo v1.6.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.infrastructure: Refreshing state...
forgejo_repository_webhook.governance: Refreshing state...
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p atlantis
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p atlantis

No changes. Your infrastructure matches the configuration.

11. project: hosts dir: . workspace: hosts

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p hosts
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p hosts

No changes. Your infrastructure matches the configuration.

12. project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.cloudflare_zones.all: Reading...
keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg]
keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1]
keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59]
keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12]
keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4]
keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2]
keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef]
keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93]
keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
data.cloudflare_zones.all: Read complete after 0s
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place (current -> planned)
  - destroy

OpenTofu will perform the following actions:

  # keycloak_custom_identity_provider_mapper.cmu_saml_username will be created
+   resource "keycloak_custom_identity_provider_mapper" "cmu_saml_username" {
+       extra_config             = {
          + "syncMode" = "INHERIT"
          + "target"   = "BROKER_USERNAME"
          + "template" = "${ATTRIBUTE.urn:oid:1.3.6.1.4.1.5923.1.1.1.6 | localpart}"
        }
+       id                       = (known after apply)
+       identity_provider_alias  = "cmu-saml"
+       identity_provider_mapper = "saml-username-idp-mapper"
+       name                     = "username"
+       realm                    = "scottylabs"
    }

  # keycloak_custom_identity_provider_mapper.cmu_username will be created
+   resource "keycloak_custom_identity_provider_mapper" "cmu_username" {
+       extra_config             = {
          + "syncMode" = "INHERIT"
          + "target"   = "BROKER_USERNAME"
          + "template" = "${CLAIM.preferred_username | localpart}"
        }
+       id                       = (known after apply)
+       identity_provider_alias  = "cmu"
+       identity_provider_mapper = "oidc-username-idp-mapper"
+       name                     = "username"
+       realm                    = "scottylabs"
    }

  # keycloak_custom_identity_provider_mapper.codeberg_email will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_email is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_email" {
-       extra_config             = {
          - "claim"          = "email"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_email"
        } -> null
-       id                       = "2bce1987-97ce-4ee5-adda-0e435c2b49ef" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_email" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_id will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_id is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_id" {
-       extra_config             = {
          - "claim"          = "sub"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_id"
        } -> null
-       id                       = "850eadbb-9508-4fac-9d43-d0f5cee2fc59" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_id" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_name will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_name is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_name" {
-       extra_config             = {
          - "claim"          = "name"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_name"
        } -> null
-       id                       = "8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_name" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_username will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_username is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_username" {
-       extra_config             = {
          - "claim"          = "preferred_username"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_username"
        } -> null
-       id                       = "e64e5c0b-d189-414d-b3bd-762d46d30a93" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_username" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_email will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_email is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_email" {
-       extra_config             = {
          - "jsonField"     = "email"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_email"
        } -> null
-       id                       = "9cdd2173-27de-46ae-bff3-66ee03797ab1" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_email" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_id will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_id is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_id" {
-       extra_config             = {
          - "jsonField"     = "id"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_id"
        } -> null
-       id                       = "e7462d44-1d0b-49e6-ae64-fb88031492c4" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_id" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_name will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_name is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_name" {
-       extra_config             = {
          - "jsonField"     = "name"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_name"
        } -> null
-       id                       = "0d38db58-87ca-46f4-82e5-23cba653dc12" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_name" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_username will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_username is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_username" {
-       extra_config             = {
          - "jsonField"     = "login"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_username"
        } -> null
-       id                       = "c07573c3-8e48-4084-89cb-3a628e5cdae2" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_username" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal will be created
+   resource "keycloak_ldap_custom_mapper" "cmu_ldap_kerberos_principal" {
+       id                      = (known after apply)
+       ldap_user_federation_id = (known after apply)
+       name                    = "Kerberos principal attribute mapper"
+       provider_id             = "kerberos-principal-attribute-mapper"
+       provider_type           = "org.keycloak.storage.ldap.mappers.LDAPStorageMapper"
+       realm_id                = "scottylabs"
    }

  # keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad will be created
+   resource "keycloak_ldap_msad_user_account_control_mapper" "cmu_ldap_msad" {
+       id                                 = (known after apply)
+       ldap_password_policy_hints_enabled = false
+       ldap_user_federation_id            = (known after apply)
+       name                               = "MSAD account controls"
+       realm_id                           = "scottylabs"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_affiliations" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "eduPersonAffiliation"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "affiliations"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "affiliations"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_class will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_class" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "cmuStudentClass"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "class"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "class"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_colleges" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "eduPersonSchoolCollegeName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "colleges"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "colleges"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_creation_date" {
+       always_read_value_from_ldap = false
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "whenCreated"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "creation date"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "createTimestamp"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_departments will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_departments" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "cmuDepartment"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "departments"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "departments"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_display_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "displayName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "display name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "displayName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_email will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_email" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "mail"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "email"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "email"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_first_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "givenName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "first name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "firstName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_full_email" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "eduPersonPrincipalName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "full email"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "fullEmail"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_full_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "cn"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "full name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "fullName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_last_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "sn"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "last name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "lastName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_level will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_level" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "cmuStudentLevel"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "level"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "level"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_middle_name" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "cmuMiddleName"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "middle name"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "middleName"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_modify_date" {
+       always_read_value_from_ldap = false
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "whenChanged"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "modify date"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "modifyTimestamp"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_orcid" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "eduPersonOrcid"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "orcid"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "orcid"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_primary_affiliation" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = false
+       ldap_attribute              = "eduPersonPrimaryAffiliation"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "primary affiliation"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "primaryAffiliation"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_status will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_status" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "status"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "status"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "status"
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_username will be created
+   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_username" {
+       always_read_value_from_ldap = true
+       attribute_force_default     = true
+       id                          = (known after apply)
+       is_binary_attribute         = false
+       is_mandatory_in_ldap        = true
+       ldap_attribute              = "uid"
+       ldap_user_federation_id     = (known after apply)
+       name                        = "username"
+       read_only                   = true
+       realm_id                    = "scottylabs"
+       user_model_attribute        = "username"
    }

  # keycloak_ldap_user_federation.cmu will be created
+   resource "keycloak_ldap_user_federation" "cmu" {
+       batch_size_for_sync             = 1
+       bind_credential                 = (sensitive value)
+       bind_dn                         = "uid=scottylabs-svc,ou=andrewperson,dc=andrew,dc=cmu,dc=edu"
+       changed_sync_period             = 3600
+       connection_pooling              = true
+       connection_url                  = "ldaps://ldap.cmu.edu"
+       custom_user_search_filter       = "(objectClass=cmuAccountPerson)"
+       debug                           = "false"
+       delete_default_mappers          = false
+       edit_mode                       = "UNSYNCED"
+       enabled                         = true
+       full_sync_period                = -1
+       id                              = (known after apply)
+       import_enabled                  = true
+       krb_principal_attribute         = "userPrincipalName"
+       name                            = "CMU LDAP"
+       pagination                      = true
+       priority                        = 0
+       rdn_ldap_attribute              = "uid"
+       realm_id                        = "scottylabs"
+       search_scope                    = "ONE_LEVEL"
+       start_tls                       = false
+       sync_registrations              = false
+       trust_email                     = true
+       use_password_modify_extended_op = false
+       use_truststore_spi              = "ALWAYS"
+       user_object_classes             = [
+           "cmuAccountPerson",
+           "inetOrgPerson",
        ]
+       username_ldap_attribute         = "uid"
+       users_dn                        = "ou=andrewperson,dc=andrew,dc=cmu,dc=edu"
+       uuid_ldap_attribute             = "guid"
+       validate_password_policy        = false
+       vendor                          = "AD"
    }

  # keycloak_oidc_google_identity_provider.google will be updated in-place
!   resource "keycloak_oidc_google_identity_provider" "google" {
-       gui_order                               = "3" -> null
        id                                      = "google"
        # (23 unchanged attributes hidden)
    }

  # keycloak_oidc_identity_provider.cmu will be created
+   resource "keycloak_oidc_identity_provider" "cmu" {
+       accepts_prompt_none_forward_from_client = false
+       add_read_token_role_on_create           = false
+       alias                                   = "cmu"
+       authenticate_by_default                 = false
+       authorization_url                       = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/authorize"
+       backchannel_supported                   = false
+       client_id                               = "9e6c9456-6584-42aa-8d2a-1ba4e45dd0a6"
+       client_secret                           = (sensitive value)
+       client_secret_wo                        = (write-only attribute)
+       default_scopes                          = "openid profile email offline_access"
+       disable_type_claim_check                = false
+       disable_user_info                       = false
+       display_name                            = "CMU"
+       enabled                                 = true
+       extra_config                            = {
          + "claimFilterName"  = "preferred_username"
          + "claimFilterValue" = "(?i)[^@]+@andrew\\.cmu\\.edu"
          + "clientAuthMethod" = "client_secret_post"
          + "filteredByClaim"  = "true"
          + "pkceEnabled"      = "true"
          + "pkceMethod"       = "S256"
        }
+       first_broker_login_flow_alias           = "Auto-link LDAP users"
+       hide_on_login_page                      = false
+       id                                      = (known after apply)
+       internal_id                             = (known after apply)
+       issuer                                  = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/v2.0"
+       jwks_url                                = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/discovery/v2.0/keys"
+       link_only                               = false
+       logout_url                              = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/logout"
+       org_redirect_mode_email_matches         = false
+       post_broker_login_flow_alias            = "SAML post login"
+       provider_id                             = "oidc"
+       realm                                   = "scottylabs"
+       store_token                             = true
+       sync_mode                               = "IMPORT"
+       token_url                               = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/token"
+       trust_email                             = true
+       ui_locales                              = false
+       user_info_url                           = "https://graph.microsoft.com/oidc/userinfo"
+       validate_signature                      = true
    }

  # keycloak_oidc_identity_provider.cmu_git will be updated in-place
!   resource "keycloak_oidc_identity_provider" "cmu_git" {
!       client_secret_wo                        = (write-only attribute)
-       gui_order                               = "1" -> null
        id                                      = "cmu-dev"
        # (30 unchanged attributes hidden)
    }

  # keycloak_oidc_identity_provider.codeberg will be destroyed
  # (because keycloak_oidc_identity_provider.codeberg is not in configuration)
-   resource "keycloak_oidc_identity_provider" "codeberg" {
-       accepts_prompt_none_forward_from_client = false -> null
-       add_read_token_role_on_create           = false -> null
-       alias                                   = "codeberg" -> null
-       authenticate_by_default                 = false -> null
-       authorization_url                       = "https://codeberg.org/login/oauth/authorize" -> null
-       backchannel_supported                   = true -> null
-       client_id                               = "63438ffe-847f-4467-a3ac-b795bc56fd5e" -> null
-       client_secret                           = (sensitive value) -> null
-       client_secret_wo                        = (write-only attribute) -> null
-       default_scopes                          = "openid" -> null
-       disable_type_claim_check                = false -> null
-       disable_user_info                       = false -> null
-       display_name                            = "Codeberg" -> null
-       enabled                                 = true -> null
-       extra_config                            = {
          - "clientAuthMethod" = "client_secret_post"
        } -> null
-       first_broker_login_flow_alias           = "first broker login" -> null
-       gui_order                               = "6" -> null
-       hide_on_login_page                      = true -> null
-       id                                      = "codeberg" -> null
-       internal_id                             = "34cc58bc-2cea-423a-8f87-2e6730b5034c" -> null
-       issuer                                  = "https://codeberg.org" -> null
-       jwks_url                                = "https://codeberg.org/login/oauth/keys" -> null
-       link_only                               = true -> null
-       org_redirect_mode_email_matches         = false -> null
-       provider_id                             = "oidc" -> null
-       realm                                   = "scottylabs" -> null
-       store_token                             = true -> null
-       sync_mode                               = "IMPORT" -> null
-       token_url                               = "https://codeberg.org/login/oauth/access_token" -> null
-       trust_email                             = false -> null
-       ui_locales                              = false -> null
-       user_info_url                           = "https://codeberg.org/login/oauth/userinfo" -> null
-       validate_signature                      = true -> null
    }

  # keycloak_oidc_identity_provider.slack will be updated in-place
!   resource "keycloak_oidc_identity_provider" "slack" {
!       client_secret_wo                        = (write-only attribute)
-       gui_order                               = "4" -> null
        id                                      = "slack"
        # (30 unchanged attributes hidden)
    }

  # keycloak_realm_user_profile.scottylabs will be updated in-place
!   resource "keycloak_realm_user_profile" "scottylabs" {
        id                         = "scottylabs"
        # (2 unchanged attributes hidden)

!       attribute {
!           display_name        = "Codeberg ID" -> "cmu.dev ID"
!           name                = "codeberg_id" -> "cmudev_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Username" -> "cmu.dev Username"
!           name                = "codeberg_username" -> "cmudev_username"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Email" -> "cmu.dev Email"
!           name                = "codeberg_email" -> "cmudev_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Name" -> "cmu.dev Name"
!           name                = "codeberg_name" -> "cmudev_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev ID" -> "Slack ID"
!           name                = "cmudev_id" -> "slack_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Username" -> "Slack Email"
!           name                = "cmudev_username" -> "slack_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Email" -> "Slack Name"
!           name                = "cmudev_email" -> "slack_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Name" -> "Google ID"
!           name                = "cmudev_name" -> "google_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Slack ID" -> "Google Email"
!           name                = "slack_id" -> "google_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Slack Email" -> "Google Name"
!           name                = "slack_email" -> "google_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Slack Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "slack_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google ID" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_id" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google Email" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_email" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub ID" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_id" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Username" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_username" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Email" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_email" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }

        # (21 unchanged blocks hidden)
    }

  # keycloak_saml_identity_provider.cmu_saml will be created
+   resource "keycloak_saml_identity_provider" "cmu_saml" {
+       add_read_token_role_on_create          = false
+       alias                                  = "cmu-saml"
+       authenticate_by_default                = false
+       display_name                           = "CMU SAML"
+       enabled                                = false
+       entity_id                              = "https://idp.scottylabs.org/realms/scottylabs"
+       extra_config                           = {
          + "allowCreate"                    = "true"
          + "attributeConsumingServiceIndex" = "0"
          + "idpEntityId"                    = "https://login.cmu.edu/idp/shibboleth"
          + "metadataDescriptorUrl"          = "https://login.cmu.edu/idp/shibboleth"
          + "useMetadataDescriptorUrl"       = "true"
        }
+       first_broker_login_flow_alias          = "Auto-link LDAP users"
+       gui_order                              = "7"
+       hide_on_login_page                     = true
+       id                                     = (known after apply)
+       internal_id                            = (known after apply)
+       link_only                              = false
+       name_id_policy_format                  = "Transient"
+       org_redirect_mode_email_matches        = false
+       post_binding_authn_request             = true
+       post_binding_response                  = true
+       post_broker_login_flow_alias           = "SAML post login"
+       principal_attribute                    = "eduPersonPrincipalName"
+       principal_type                         = "FRIENDLY_ATTRIBUTE"
+       provider_id                            = "saml"
+       realm                                  = "scottylabs"
+       signature_algorithm                    = "RSA_SHA256"
+       single_sign_on_service_url             = "https://login.cmu.edu/idp/profile/SAML2/POST/SSO"
+       store_token                            = false
+       sync_mode                              = "FORCE"
+       trust_email                            = true
+       validate_signature                     = true
+       want_authn_requests_signed             = true
+       xml_sign_key_info_key_name_transformer = "KEY_ID"
    }

Plan: 25 to add, 4 to change, 9 to destroy.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 5 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_ldap_user_federation.cmu,
│   on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu:
│  423:         "vendor": "AD"
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan"
  • ▶️ To apply this plan, comment: 
    atlantis apply -p keycloak
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak

Plan: 25 to add, 4 to change, 9 to destroy.

13. project: kennel dir: . workspace: kennel

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
vault_policy.kennel: Refreshing state... [id=kennel]
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p kennel
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p kennel

No changes. Your infrastructure matches the configuration.

14. project: headscale dir: . workspace: headscale

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p headscale
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p headscale

No changes. Your infrastructure matches the configuration.

15. project: litellm dir: . workspace: litellm

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.litellm_salt_key: Refreshing state... [id=none]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p litellm
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p litellm

No changes. Your infrastructure matches the configuration.

16. project: vaultwarden dir: . workspace: vaultwarden

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p vaultwarden
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p vaultwarden

No changes. Your infrastructure matches the configuration.

17. project: webhook dir: . workspace: webhook

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p webhook
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p webhook

No changes. Your infrastructure matches the configuration.

Plan Summary

17 projects, 2 with changes, 15 with no changes, 0 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 17 projects: 1. project: `governance` dir: `.` workspace: `governance` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `webhook` dir: `.` workspace: `webhook` --- ### 1. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_policy.governance: Refreshing state... [id=governance] vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] data.cloudflare_zones.all: Read complete after 1s No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] vault_mount.kv: Refreshing state... [id=secret] vault_auth_backend.approle: Refreshing state... [id=approle] vault_policy.devops: Refreshing state... [id=devops] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_policy.ci: Refreshing state... [id=ci] vault_policy.infra: Refreshing state... [id=infra] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # vault_policy.devops will be updated in-place ! resource "vault_policy" "devops" { id = "devops" name = "devops" ! policy = <<-EOT # Manage all secrets path "secret/*" { - capabilities = ["create", "read", "update", "delete", "list"] + capabilities = ["create", "read", "update", "patch", "delete", "list"] } # Manage AppRole auth path "auth/approle/*" { capabilities = ["create", "read", "update", "delete", "list"] } # View OIDC auth path "auth/oidc/*" { capabilities = ["read", "list"] } # View policies path "sys/policies/*" { capabilities = ["read", "list"] } # View auth methods path "sys/auth" { capabilities = ["read"] } EOT } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/153/openbao/openbao-openbao.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/openbao/openbao-openbao.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 7. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed svalabs/forgejo v1.6.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.infrastructure: Refreshing state... forgejo_repository_webhook.governance: Refreshing state... cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 0s cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.cloudflare_zones.all: Reading... keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg] keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1] keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59] keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12] keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4] keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2] keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef] keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93] keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] data.cloudflare_zones.all: Read complete after 0s keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create ~ update in-place (current -> planned) - destroy OpenTofu will perform the following actions: # keycloak_custom_identity_provider_mapper.cmu_saml_username will be created + resource "keycloak_custom_identity_provider_mapper" "cmu_saml_username" { + extra_config = { + "syncMode" = "INHERIT" + "target" = "BROKER_USERNAME" + "template" = "${ATTRIBUTE.urn:oid:1.3.6.1.4.1.5923.1.1.1.6 | localpart}" } + id = (known after apply) + identity_provider_alias = "cmu-saml" + identity_provider_mapper = "saml-username-idp-mapper" + name = "username" + realm = "scottylabs" } # keycloak_custom_identity_provider_mapper.cmu_username will be created + resource "keycloak_custom_identity_provider_mapper" "cmu_username" { + extra_config = { + "syncMode" = "INHERIT" + "target" = "BROKER_USERNAME" + "template" = "${CLAIM.preferred_username | localpart}" } + id = (known after apply) + identity_provider_alias = "cmu" + identity_provider_mapper = "oidc-username-idp-mapper" + name = "username" + realm = "scottylabs" } # keycloak_custom_identity_provider_mapper.codeberg_email will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_email is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_email" { - extra_config = { - "claim" = "email" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_email" } -> null - id = "2bce1987-97ce-4ee5-adda-0e435c2b49ef" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_email" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_id will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_id is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_id" { - extra_config = { - "claim" = "sub" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_id" } -> null - id = "850eadbb-9508-4fac-9d43-d0f5cee2fc59" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_id" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_name will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_name is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_name" { - extra_config = { - "claim" = "name" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_name" } -> null - id = "8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_name" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_username will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_username is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_username" { - extra_config = { - "claim" = "preferred_username" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_username" } -> null - id = "e64e5c0b-d189-414d-b3bd-762d46d30a93" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_username" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_email will be destroyed # (because keycloak_custom_identity_provider_mapper.github_email is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_email" { - extra_config = { - "jsonField" = "email" - "syncMode" = "FORCE" - "userAttribute" = "github_email" } -> null - id = "9cdd2173-27de-46ae-bff3-66ee03797ab1" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_email" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_id will be destroyed # (because keycloak_custom_identity_provider_mapper.github_id is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_id" { - extra_config = { - "jsonField" = "id" - "syncMode" = "FORCE" - "userAttribute" = "github_id" } -> null - id = "e7462d44-1d0b-49e6-ae64-fb88031492c4" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_id" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_name will be destroyed # (because keycloak_custom_identity_provider_mapper.github_name is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_name" { - extra_config = { - "jsonField" = "name" - "syncMode" = "FORCE" - "userAttribute" = "github_name" } -> null - id = "0d38db58-87ca-46f4-82e5-23cba653dc12" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_name" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_username will be destroyed # (because keycloak_custom_identity_provider_mapper.github_username is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_username" { - extra_config = { - "jsonField" = "login" - "syncMode" = "FORCE" - "userAttribute" = "github_username" } -> null - id = "c07573c3-8e48-4084-89cb-3a628e5cdae2" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_username" -> null - realm = "scottylabs" -> null } # keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal will be created + resource "keycloak_ldap_custom_mapper" "cmu_ldap_kerberos_principal" { + id = (known after apply) + ldap_user_federation_id = (known after apply) + name = "Kerberos principal attribute mapper" + provider_id = "kerberos-principal-attribute-mapper" + provider_type = "org.keycloak.storage.ldap.mappers.LDAPStorageMapper" + realm_id = "scottylabs" } # keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad will be created + resource "keycloak_ldap_msad_user_account_control_mapper" "cmu_ldap_msad" { + id = (known after apply) + ldap_password_policy_hints_enabled = false + ldap_user_federation_id = (known after apply) + name = "MSAD account controls" + realm_id = "scottylabs" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_affiliations" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "eduPersonAffiliation" + ldap_user_federation_id = (known after apply) + name = "affiliations" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "affiliations" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_class will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_class" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "cmuStudentClass" + ldap_user_federation_id = (known after apply) + name = "class" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "class" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_colleges" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "eduPersonSchoolCollegeName" + ldap_user_federation_id = (known after apply) + name = "colleges" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "colleges" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_creation_date" { + always_read_value_from_ldap = false + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "whenCreated" + ldap_user_federation_id = (known after apply) + name = "creation date" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "createTimestamp" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_departments will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_departments" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "cmuDepartment" + ldap_user_federation_id = (known after apply) + name = "departments" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "departments" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_display_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "displayName" + ldap_user_federation_id = (known after apply) + name = "display name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "displayName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_email will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_email" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "mail" + ldap_user_federation_id = (known after apply) + name = "email" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "email" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_first_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "givenName" + ldap_user_federation_id = (known after apply) + name = "first name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "firstName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_full_email" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "eduPersonPrincipalName" + ldap_user_federation_id = (known after apply) + name = "full email" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "fullEmail" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_full_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "cn" + ldap_user_federation_id = (known after apply) + name = "full name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "fullName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_last_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "sn" + ldap_user_federation_id = (known after apply) + name = "last name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "lastName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_level will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_level" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "cmuStudentLevel" + ldap_user_federation_id = (known after apply) + name = "level" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "level" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_middle_name" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "cmuMiddleName" + ldap_user_federation_id = (known after apply) + name = "middle name" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "middleName" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_modify_date" { + always_read_value_from_ldap = false + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "whenChanged" + ldap_user_federation_id = (known after apply) + name = "modify date" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "modifyTimestamp" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_orcid" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "eduPersonOrcid" + ldap_user_federation_id = (known after apply) + name = "orcid" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "orcid" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_primary_affiliation" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = false + ldap_attribute = "eduPersonPrimaryAffiliation" + ldap_user_federation_id = (known after apply) + name = "primary affiliation" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "primaryAffiliation" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_status will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_status" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "status" + ldap_user_federation_id = (known after apply) + name = "status" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "status" } # keycloak_ldap_user_attribute_mapper.cmu_ldap_username will be created + resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_username" { + always_read_value_from_ldap = true + attribute_force_default = true + id = (known after apply) + is_binary_attribute = false + is_mandatory_in_ldap = true + ldap_attribute = "uid" + ldap_user_federation_id = (known after apply) + name = "username" + read_only = true + realm_id = "scottylabs" + user_model_attribute = "username" } # keycloak_ldap_user_federation.cmu will be created + resource "keycloak_ldap_user_federation" "cmu" { + batch_size_for_sync = 1 + bind_credential = (sensitive value) + bind_dn = "uid=scottylabs-svc,ou=andrewperson,dc=andrew,dc=cmu,dc=edu" + changed_sync_period = 3600 + connection_pooling = true + connection_url = "ldaps://ldap.cmu.edu" + custom_user_search_filter = "(objectClass=cmuAccountPerson)" + debug = "false" + delete_default_mappers = false + edit_mode = "UNSYNCED" + enabled = true + full_sync_period = -1 + id = (known after apply) + import_enabled = true + krb_principal_attribute = "userPrincipalName" + name = "CMU LDAP" + pagination = true + priority = 0 + rdn_ldap_attribute = "uid" + realm_id = "scottylabs" + search_scope = "ONE_LEVEL" + start_tls = false + sync_registrations = false + trust_email = true + use_password_modify_extended_op = false + use_truststore_spi = "ALWAYS" + user_object_classes = [ + "cmuAccountPerson", + "inetOrgPerson", ] + username_ldap_attribute = "uid" + users_dn = "ou=andrewperson,dc=andrew,dc=cmu,dc=edu" + uuid_ldap_attribute = "guid" + validate_password_policy = false + vendor = "AD" } # keycloak_oidc_google_identity_provider.google will be updated in-place ! resource "keycloak_oidc_google_identity_provider" "google" { - gui_order = "3" -> null id = "google" # (23 unchanged attributes hidden) } # keycloak_oidc_identity_provider.cmu will be created + resource "keycloak_oidc_identity_provider" "cmu" { + accepts_prompt_none_forward_from_client = false + add_read_token_role_on_create = false + alias = "cmu" + authenticate_by_default = false + authorization_url = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/authorize" + backchannel_supported = false + client_id = "9e6c9456-6584-42aa-8d2a-1ba4e45dd0a6" + client_secret = (sensitive value) + client_secret_wo = (write-only attribute) + default_scopes = "openid profile email offline_access" + disable_type_claim_check = false + disable_user_info = false + display_name = "CMU" + enabled = true + extra_config = { + "claimFilterName" = "preferred_username" + "claimFilterValue" = "(?i)[^@]+@andrew\\.cmu\\.edu" + "clientAuthMethod" = "client_secret_post" + "filteredByClaim" = "true" + "pkceEnabled" = "true" + "pkceMethod" = "S256" } + first_broker_login_flow_alias = "Auto-link LDAP users" + hide_on_login_page = false + id = (known after apply) + internal_id = (known after apply) + issuer = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/v2.0" + jwks_url = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/discovery/v2.0/keys" + link_only = false + logout_url = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/logout" + org_redirect_mode_email_matches = false + post_broker_login_flow_alias = "SAML post login" + provider_id = "oidc" + realm = "scottylabs" + store_token = true + sync_mode = "IMPORT" + token_url = "https://login.microsoftonline.com/e36ee38f-91b8-4dca-9b13-caa5360c9714/oauth2/v2.0/token" + trust_email = true + ui_locales = false + user_info_url = "https://graph.microsoft.com/oidc/userinfo" + validate_signature = true } # keycloak_oidc_identity_provider.cmu_git will be updated in-place ! resource "keycloak_oidc_identity_provider" "cmu_git" { ! client_secret_wo = (write-only attribute) - gui_order = "1" -> null id = "cmu-dev" # (30 unchanged attributes hidden) } # keycloak_oidc_identity_provider.codeberg will be destroyed # (because keycloak_oidc_identity_provider.codeberg is not in configuration) - resource "keycloak_oidc_identity_provider" "codeberg" { - accepts_prompt_none_forward_from_client = false -> null - add_read_token_role_on_create = false -> null - alias = "codeberg" -> null - authenticate_by_default = false -> null - authorization_url = "https://codeberg.org/login/oauth/authorize" -> null - backchannel_supported = true -> null - client_id = "63438ffe-847f-4467-a3ac-b795bc56fd5e" -> null - client_secret = (sensitive value) -> null - client_secret_wo = (write-only attribute) -> null - default_scopes = "openid" -> null - disable_type_claim_check = false -> null - disable_user_info = false -> null - display_name = "Codeberg" -> null - enabled = true -> null - extra_config = { - "clientAuthMethod" = "client_secret_post" } -> null - first_broker_login_flow_alias = "first broker login" -> null - gui_order = "6" -> null - hide_on_login_page = true -> null - id = "codeberg" -> null - internal_id = "34cc58bc-2cea-423a-8f87-2e6730b5034c" -> null - issuer = "https://codeberg.org" -> null - jwks_url = "https://codeberg.org/login/oauth/keys" -> null - link_only = true -> null - org_redirect_mode_email_matches = false -> null - provider_id = "oidc" -> null - realm = "scottylabs" -> null - store_token = true -> null - sync_mode = "IMPORT" -> null - token_url = "https://codeberg.org/login/oauth/access_token" -> null - trust_email = false -> null - ui_locales = false -> null - user_info_url = "https://codeberg.org/login/oauth/userinfo" -> null - validate_signature = true -> null } # keycloak_oidc_identity_provider.slack will be updated in-place ! resource "keycloak_oidc_identity_provider" "slack" { ! client_secret_wo = (write-only attribute) - gui_order = "4" -> null id = "slack" # (30 unchanged attributes hidden) } # keycloak_realm_user_profile.scottylabs will be updated in-place ! resource "keycloak_realm_user_profile" "scottylabs" { id = "scottylabs" # (2 unchanged attributes hidden) ! attribute { ! display_name = "Codeberg ID" -> "cmu.dev ID" ! name = "codeberg_id" -> "cmudev_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Username" -> "cmu.dev Username" ! name = "codeberg_username" -> "cmudev_username" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Email" -> "cmu.dev Email" ! name = "codeberg_email" -> "cmudev_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Name" -> "cmu.dev Name" ! name = "codeberg_name" -> "cmudev_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev ID" -> "Slack ID" ! name = "cmudev_id" -> "slack_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Username" -> "Slack Email" ! name = "cmudev_username" -> "slack_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Email" -> "Slack Name" ! name = "cmudev_email" -> "slack_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Name" -> "Google ID" ! name = "cmudev_name" -> "google_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Slack ID" -> "Google Email" ! name = "slack_id" -> "google_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Slack Email" -> "Google Name" ! name = "slack_email" -> "google_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } - attribute { - annotations = {} -> null - display_name = "Slack Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "slack_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google ID" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_id" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google Email" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_email" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub ID" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_id" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Username" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_username" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Email" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_email" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } # (21 unchanged blocks hidden) } # keycloak_saml_identity_provider.cmu_saml will be created + resource "keycloak_saml_identity_provider" "cmu_saml" { + add_read_token_role_on_create = false + alias = "cmu-saml" + authenticate_by_default = false + display_name = "CMU SAML" + enabled = false + entity_id = "https://idp.scottylabs.org/realms/scottylabs" + extra_config = { + "allowCreate" = "true" + "attributeConsumingServiceIndex" = "0" + "idpEntityId" = "https://login.cmu.edu/idp/shibboleth" + "metadataDescriptorUrl" = "https://login.cmu.edu/idp/shibboleth" + "useMetadataDescriptorUrl" = "true" } + first_broker_login_flow_alias = "Auto-link LDAP users" + gui_order = "7" + hide_on_login_page = true + id = (known after apply) + internal_id = (known after apply) + link_only = false + name_id_policy_format = "Transient" + org_redirect_mode_email_matches = false + post_binding_authn_request = true + post_binding_response = true + post_broker_login_flow_alias = "SAML post login" + principal_attribute = "eduPersonPrincipalName" + principal_type = "FRIENDLY_ATTRIBUTE" + provider_id = "saml" + realm = "scottylabs" + signature_algorithm = "RSA_SHA256" + single_sign_on_service_url = "https://login.cmu.edu/idp/profile/SAML2/POST/SSO" + store_token = false + sync_mode = "FORCE" + trust_email = true + validate_signature = true + want_authn_requests_signed = true + xml_sign_key_info_key_name_transformer = "KEY_ID" } Plan: 25 to add, 4 to change, 9 to destroy. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 5 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_ldap_user_federation.cmu, │ on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu: │ 423: "vendor": "AD" │ │ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` Plan: 25 to add, 4 to change, 9 to destroy. --- ### 13. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... vault_policy.kennel: Refreshing state... [id=kennel] vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/69d39c29b1921be962b2d55f17285861e6eacc298c1e8d048b86551cfc98dcb7.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] random_password.litellm_salt_key: Refreshing state... [id=none] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 17 projects, 2 with changes, 15 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
anish commented 2026-09-22 23:34:44 +00:00
Author
Owner
Copy link

atlantis apply -p openbao

atlantis apply -p openbao
scottylabs-bot commented 2026-09-22 23:34:46 +00:00
Owner
Copy link

Ran Apply for project: openbao dir: . workspace: openbao

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.devops: Modifying... [id=devops]
vault_policy.devops: Modifications complete after 0s [id=devops]

Apply complete! Resources: 0 added, 1 changed, 0 destroyed.

Outputs:

approle_role_ids = {
  "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8"
  "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194"
  "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22"
  "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043"
}
Ran Apply for project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.devops: Modifying... [id=devops] vault_policy.devops: Modifications complete after 0s [id=devops] Apply complete! Resources: 0 added, 1 changed, 0 destroyed. Outputs: approle_role_ids = { "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8" "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194" "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22" "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043" } ``` </details>
anish commented 2026-09-22 23:36:30 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_saml_identity_provider.cmu_saml scottylabs/cmu-saml

atlantis import -p keycloak keycloak_saml_identity_provider.cmu_saml scottylabs/cmu-saml
scottylabs-bot commented 2026-09-22 23:36:36 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.keycloak_realm.scottylabs: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
keycloak_saml_identity_provider.cmu_saml: Importing from ID "scottylabs/cmu-saml"...
keycloak_saml_identity_provider.cmu_saml: Import prepared!
  Prepared keycloak_saml_identity_provider for import
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.keycloak_realm.scottylabs: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] keycloak_saml_identity_provider.cmu_saml: Importing from ID "scottylabs/cmu-saml"... keycloak_saml_identity_provider.cmu_saml: Import prepared! Prepared keycloak_saml_identity_provider for import keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:36:44 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_custom_identity_provider_mapper.cmu_saml_username scottylabs/cmu-saml/32fed5ec-b30e-4b69-90a3-64c58f592ded

atlantis import -p keycloak keycloak_custom_identity_provider_mapper.cmu_saml_username scottylabs/cmu-saml/32fed5ec-b30e-4b69-90a3-64c58f592ded
scottylabs-bot commented 2026-09-22 23:36:50 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Importing from ID "scottylabs/cmu-saml/32fed5ec-b30e-4b69-90a3-64c58f592ded"...
keycloak_custom_identity_provider_mapper.cmu_saml_username: Import prepared!
  Prepared keycloak_custom_identity_provider_mapper for import
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_custom_identity_provider_mapper.cmu_saml_username: Importing from ID "scottylabs/cmu-saml/32fed5ec-b30e-4b69-90a3-64c58f592ded"... keycloak_custom_identity_provider_mapper.cmu_saml_username: Import prepared! Prepared keycloak_custom_identity_provider_mapper for import keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:36:56 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_federation.cmu scottylabs/TtPPdhQJRUSFFwr_nJ2gcA

atlantis import -p keycloak keycloak_ldap_user_federation.cmu scottylabs/TtPPdhQJRUSFFwr_nJ2gcA
scottylabs-bot commented 2026-09-22 23:37:01 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_federation.cmu: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA"...
keycloak_ldap_user_federation.cmu: Import prepared!
  Prepared keycloak_ldap_user_federation for import
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_federation.cmu: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA"... keycloak_ldap_user_federation.cmu: Import prepared! Prepared keycloak_ldap_user_federation for import keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:37:07 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/d5051889-ed12-4307-ae20-6cb808f988d1

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/d5051889-ed12-4307-ae20-6cb808f988d1
scottylabs-bot commented 2026-09-22 23:37:12 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/d5051889-ed12-4307-ae20-6cb808f988d1"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
data.cloudflare_zones.all: Read complete after 0s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/d5051889-ed12-4307-ae20-6cb808f988d1"... keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] data.cloudflare_zones.all: Read complete after 0s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:37:15 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_class scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/2f7671ad-081b-497a-b868-e48ba2e1d651

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_class scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/2f7671ad-081b-497a-b868-e48ba2e1d651
scottylabs-bot commented 2026-09-22 23:37:20 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.cloudflare_zones.all: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/2f7671ad-081b-497a-b868-e48ba2e1d651"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.cloudflare_zones.all: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/2f7671ad-081b-497a-b868-e48ba2e1d651"... keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:37:26 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/0ad2e74c-edb9-48c8-a7c7-3958d49ca802

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/0ad2e74c-edb9-48c8-a7c7-3958d49ca802
scottylabs-bot commented 2026-09-22 23:37:31 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/0ad2e74c-edb9-48c8-a7c7-3958d49ca802"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/0ad2e74c-edb9-48c8-a7c7-3958d49ca802"... keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:37:38 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/e271c3e5-024c-441d-8662-00aff6f95f60

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/e271c3e5-024c-441d-8662-00aff6f95f60
scottylabs-bot commented 2026-09-22 23:37:41 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/e271c3e5-024c-441d-8662-00aff6f95f60"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/e271c3e5-024c-441d-8662-00aff6f95f60"... keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:37:47 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_departments scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/da295d4b-3ee1-41b2-a9cb-4364c308c4fc

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_departments scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/da295d4b-3ee1-41b2-a9cb-4364c308c4fc
scottylabs-bot commented 2026-09-22 23:37:51 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.cloudflare_zones.all: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/da295d4b-3ee1-41b2-a9cb-4364c308c4fc"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.cloudflare_zones.all: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/da295d4b-3ee1-41b2-a9cb-4364c308c4fc"... keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:37:55 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/ffc86fab-f094-4d62-83a8-9aeffb3b6784

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/ffc86fab-f094-4d62-83a8-9aeffb3b6784
scottylabs-bot commented 2026-09-22 23:38:00 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/ffc86fab-f094-4d62-83a8-9aeffb3b6784"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/ffc86fab-f094-4d62-83a8-9aeffb3b6784"... keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:38:11 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_email scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/409b11eb-37ae-4943-9983-7613b0bf392f

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_email scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/409b11eb-37ae-4943-9983-7613b0bf392f
scottylabs-bot commented 2026-09-22 23:38:14 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/409b11eb-37ae-4943-9983-7613b0bf392f"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
data.cloudflare_zones.all: Read complete after 0s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/409b11eb-37ae-4943-9983-7613b0bf392f"... keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] data.cloudflare_zones.all: Read complete after 0s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:38:18 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5545f837-8bb1-4435-8797-a780dfd3c290

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5545f837-8bb1-4435-8797-a780dfd3c290
scottylabs-bot commented 2026-09-22 23:38:22 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5545f837-8bb1-4435-8797-a780dfd3c290"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5545f837-8bb1-4435-8797-a780dfd3c290"... keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:38:29 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/267b1bc1-9714-46d5-85c0-e3b9a120b4da

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/267b1bc1-9714-46d5-85c0-e3b9a120b4da
scottylabs-bot commented 2026-09-22 23:38:32 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.cloudflare_zones.all: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/267b1bc1-9714-46d5-85c0-e3b9a120b4da"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.cloudflare_zones.all: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/267b1bc1-9714-46d5-85c0-e3b9a120b4da"... keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:38:39 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/3246c4a5-14c9-444d-ba7d-ab2fa110c38d

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/3246c4a5-14c9-444d-ba7d-ab2fa110c38d
scottylabs-bot commented 2026-09-22 23:38:43 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/3246c4a5-14c9-444d-ba7d-ab2fa110c38d"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
data.cloudflare_zones.all: Read complete after 0s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/3246c4a5-14c9-444d-ba7d-ab2fa110c38d"... keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] data.cloudflare_zones.all: Read complete after 0s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:38:51 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5f10a23b-84b2-4441-ac93-8042dd701e29

atlantis import -p keycloak keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5f10a23b-84b2-4441-ac93-8042dd701e29
scottylabs-bot commented 2026-09-22 23:38:55 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5f10a23b-84b2-4441-ac93-8042dd701e29"...
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Import prepared!
  Prepared keycloak_ldap_custom_mapper for import
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5f10a23b-84b2-4441-ac93-8042dd701e29"... keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Import prepared! Prepared keycloak_ldap_custom_mapper for import keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:39:00 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/1bdeb17a-f3b5-4d20-9405-f18950582ec9

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/1bdeb17a-f3b5-4d20-9405-f18950582ec9
scottylabs-bot commented 2026-09-22 23:39:04 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/1bdeb17a-f3b5-4d20-9405-f18950582ec9"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/1bdeb17a-f3b5-4d20-9405-f18950582ec9"... keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:39:08 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_level scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/981dc6b9-9957-48d2-94f4-c9e8182af115

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_level scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/981dc6b9-9957-48d2-94f4-c9e8182af115
scottylabs-bot commented 2026-09-22 23:39:12 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/981dc6b9-9957-48d2-94f4-c9e8182af115"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
data.cloudflare_zones.all: Read complete after 0s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/981dc6b9-9957-48d2-94f4-c9e8182af115"... keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] data.cloudflare_zones.all: Read complete after 0s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:39:16 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/73050ab4-9a3a-43cd-be03-6eaf2c891113

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/73050ab4-9a3a-43cd-be03-6eaf2c891113
scottylabs-bot commented 2026-09-22 23:39:20 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/73050ab4-9a3a-43cd-be03-6eaf2c891113"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/73050ab4-9a3a-43cd-be03-6eaf2c891113"... keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:39:24 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5618310c-00e4-4bec-9e04-3975357268ae

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5618310c-00e4-4bec-9e04-3975357268ae
scottylabs-bot commented 2026-09-22 23:39:28 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.cloudflare_zones.all: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5618310c-00e4-4bec-9e04-3975357268ae"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.cloudflare_zones.all: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/5618310c-00e4-4bec-9e04-3975357268ae"... keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:39:33 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/59e25378-3850-47d9-bfa3-18aec5d2bef3

atlantis import -p keycloak keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/59e25378-3850-47d9-bfa3-18aec5d2bef3
scottylabs-bot commented 2026-09-22 23:39:37 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 1s [id=secret/data/infra/keycloak-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/59e25378-3850-47d9-bfa3-18aec5d2bef3"...
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Import prepared!
  Prepared keycloak_ldap_msad_user_account_control_mapper for import
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
data.cloudflare_zones.all: Read complete after 0s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.keycloak_idp: Read complete after 1s [id=secret/data/infra/keycloak-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/59e25378-3850-47d9-bfa3-18aec5d2bef3"... keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Import prepared! Prepared keycloak_ldap_msad_user_account_control_mapper for import keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] data.cloudflare_zones.all: Read complete after 0s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:39:40 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/66b0d533-9f67-4b17-8bce-d056c3196377

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/66b0d533-9f67-4b17-8bce-d056c3196377
scottylabs-bot commented 2026-09-22 23:39:45 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/66b0d533-9f67-4b17-8bce-d056c3196377"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/66b0d533-9f67-4b17-8bce-d056c3196377"... keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:39:51 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/68cb7c40-51a4-4b5f-b520-617ae560163b

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/68cb7c40-51a4-4b5f-b520-617ae560163b
scottylabs-bot commented 2026-09-22 23:39:55 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.cloudflare_zones.all: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/68cb7c40-51a4-4b5f-b520-617ae560163b"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.cloudflare_zones.all: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/68cb7c40-51a4-4b5f-b520-617ae560163b"... keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:39:59 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_status scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/c4907832-a07a-4c5c-9a36-852b13f90cf6

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_status scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/c4907832-a07a-4c5c-9a36-852b13f90cf6
scottylabs-bot commented 2026-09-22 23:40:05 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/c4907832-a07a-4c5c-9a36-852b13f90cf6"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
data.cloudflare_zones.all: Read complete after 3s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/c4907832-a07a-4c5c-9a36-852b13f90cf6"... keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] data.cloudflare_zones.all: Read complete after 3s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:40:20 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_username scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/4277dde1-b06e-42ff-acf8-5537604cb505

atlantis import -p keycloak keycloak_ldap_user_attribute_mapper.cmu_ldap_username scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/4277dde1-b06e-42ff-acf8-5537604cb505
scottylabs-bot commented 2026-09-22 23:40:24 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/4277dde1-b06e-42ff-acf8-5537604cb505"...
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Import prepared!
  Prepared keycloak_ldap_user_attribute_mapper for import
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
data.cloudflare_zones.all: Read complete after 0s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Importing from ID "scottylabs/TtPPdhQJRUSFFwr_nJ2gcA/4277dde1-b06e-42ff-acf8-5537604cb505"... keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Import prepared! Prepared keycloak_ldap_user_attribute_mapper for import keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] data.cloudflare_zones.all: Read complete after 0s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:41:26 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_oidc_identity_provider.cmu scottylabs/cmu

atlantis import -p keycloak keycloak_oidc_identity_provider.cmu scottylabs/cmu
scottylabs-bot commented 2026-09-22 23:41:30 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.cloudflare_zones.all: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_oidc_identity_provider.cmu: Importing from ID "scottylabs/cmu"...
keycloak_oidc_identity_provider.cmu: Import prepared!
  Prepared keycloak_oidc_identity_provider for import
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.cloudflare_zones.all: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_oidc_identity_provider.cmu: Importing from ID "scottylabs/cmu"... keycloak_oidc_identity_provider.cmu: Import prepared! Prepared keycloak_oidc_identity_provider for import keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:41:39 +00:00
Author
Owner
Copy link

atlantis import -p keycloak keycloak_custom_identity_provider_mapper.cmu_username scottylabs/cmu/65d1857d-19e5-4db5-940c-7751b770b4ac

atlantis import -p keycloak keycloak_custom_identity_provider_mapper.cmu_username scottylabs/cmu/65d1857d-19e5-4db5-940c-7751b770b4ac
scottylabs-bot commented 2026-09-22 23:41:43 +00:00
Owner
Copy link

Ran Import for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_custom_identity_provider_mapper.cmu_username: Importing from ID "scottylabs/cmu/65d1857d-19e5-4db5-940c-7751b770b4ac"...
keycloak_custom_identity_provider_mapper.cmu_username: Import prepared!
  Prepared keycloak_custom_identity_provider_mapper for import
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
data.cloudflare_zones.all: Read complete after 1s

Import successful!

The resources that were imported are shown above. These resources are now in
your OpenTofu state and will henceforth be managed by OpenTofu.

╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵
🚮 A plan file was discarded. Re-plan would be required before applying.
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak
Ran Import for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_custom_identity_provider_mapper.cmu_username: Importing from ID "scottylabs/cmu/65d1857d-19e5-4db5-940c-7751b770b4ac"... keycloak_custom_identity_provider_mapper.cmu_username: Import prepared! Prepared keycloak_custom_identity_provider_mapper for import keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] data.cloudflare_zones.all: Read complete after 1s Import successful! The resources that were imported are shown above. These resources are now in your OpenTofu state and will henceforth be managed by OpenTofu. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ``` </details> :put_litter_in_its_place: A plan file was discarded. Re-plan would be required before applying. * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ```
anish commented 2026-09-22 23:41:50 +00:00
Author
Owner
Copy link

atlantis plan -p keycloak

atlantis plan -p keycloak
scottylabs-bot commented 2026-09-22 23:41:54 +00:00
Owner
Copy link

Ran Plan for project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef]
keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1]
keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2]
keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg]
keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12]
keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4]
keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59]
keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5]
keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93]
data.keycloak_realm.scottylabs: Reading...
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)
  - destroy

OpenTofu will perform the following actions:

  # keycloak_custom_identity_provider_mapper.cmu_saml_username will be updated in-place
!   resource "keycloak_custom_identity_provider_mapper" "cmu_saml_username" {
!       extra_config             = {
          + "syncMode" = "INHERIT"
          + "target"   = "BROKER_USERNAME"
          + "template" = "${ATTRIBUTE.urn:oid:1.3.6.1.4.1.5923.1.1.1.6 | localpart}"
        }
        id                       = "32fed5ec-b30e-4b69-90a3-64c58f592ded"
        name                     = "username"
        # (3 unchanged attributes hidden)
    }

  # keycloak_custom_identity_provider_mapper.cmu_username will be updated in-place
!   resource "keycloak_custom_identity_provider_mapper" "cmu_username" {
!       extra_config             = {
          + "syncMode" = "INHERIT"
          + "target"   = "BROKER_USERNAME"
          + "template" = "${CLAIM.preferred_username | localpart}"
        }
        id                       = "65d1857d-19e5-4db5-940c-7751b770b4ac"
        name                     = "username"
        # (3 unchanged attributes hidden)
    }

  # keycloak_custom_identity_provider_mapper.codeberg_email will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_email is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_email" {
-       extra_config             = {
          - "claim"          = "email"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_email"
        } -> null
-       id                       = "2bce1987-97ce-4ee5-adda-0e435c2b49ef" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_email" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_id will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_id is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_id" {
-       extra_config             = {
          - "claim"          = "sub"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_id"
        } -> null
-       id                       = "850eadbb-9508-4fac-9d43-d0f5cee2fc59" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_id" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_name will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_name is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_name" {
-       extra_config             = {
          - "claim"          = "name"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_name"
        } -> null
-       id                       = "8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_name" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_username will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_username is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_username" {
-       extra_config             = {
          - "claim"          = "preferred_username"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_username"
        } -> null
-       id                       = "e64e5c0b-d189-414d-b3bd-762d46d30a93" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_username" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_email will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_email is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_email" {
-       extra_config             = {
          - "jsonField"     = "email"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_email"
        } -> null
-       id                       = "9cdd2173-27de-46ae-bff3-66ee03797ab1" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_email" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_id will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_id is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_id" {
-       extra_config             = {
          - "jsonField"     = "id"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_id"
        } -> null
-       id                       = "e7462d44-1d0b-49e6-ae64-fb88031492c4" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_id" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_name will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_name is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_name" {
-       extra_config             = {
          - "jsonField"     = "name"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_name"
        } -> null
-       id                       = "0d38db58-87ca-46f4-82e5-23cba653dc12" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_name" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_username will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_username is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_username" {
-       extra_config             = {
          - "jsonField"     = "login"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_username"
        } -> null
-       id                       = "c07573c3-8e48-4084-89cb-3a628e5cdae2" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_username" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date will be updated in-place
!   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_creation_date" {
!       attribute_force_default     = false -> true
        id                          = "e271c3e5-024c-441d-8662-00aff6f95f60"
        name                        = "creation date"
        # (8 unchanged attributes hidden)
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date will be updated in-place
!   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_modify_date" {
!       attribute_force_default     = false -> true
        id                          = "5618310c-00e4-4bec-9e04-3975357268ae"
        name                        = "modify date"
        # (8 unchanged attributes hidden)
    }

  # keycloak_ldap_user_federation.cmu will be updated in-place
!   resource "keycloak_ldap_user_federation" "cmu" {
+       bind_credential                 = (sensitive value)
+       debug                           = "false"
        id                              = "TtPPdhQJRUSFFwr_nJ2gcA"
        name                            = "CMU LDAP"
!       user_object_classes             = [
-           "cmuAccountPerson,inetOrgPerson",
+           "cmuAccountPerson",
+           "inetOrgPerson",
        ]
        # (27 unchanged attributes hidden)
    }

  # keycloak_oidc_google_identity_provider.google will be updated in-place
!   resource "keycloak_oidc_google_identity_provider" "google" {
-       gui_order                               = "3" -> null
        id                                      = "google"
        # (23 unchanged attributes hidden)
    }

  # keycloak_oidc_identity_provider.cmu will be updated in-place
!   resource "keycloak_oidc_identity_provider" "cmu" {
+       accepts_prompt_none_forward_from_client = false
+       client_secret                           = (sensitive value)
!       client_secret_wo                        = (write-only attribute)
+       default_scopes                          = "openid profile email offline_access"
!       extra_config                            = {
          + "claimFilterName"  = "preferred_username"
          + "claimFilterValue" = "(?i)[^@]+@andrew\\.cmu\\.edu"
          + "clientAuthMethod" = "client_secret_post"
          + "filteredByClaim"  = "true"
          + "pkceEnabled"      = "true"
          + "pkceMethod"       = "S256"
        }
-       gui_order                               = "0" -> null
        id                                      = "cmu"
-       login_hint                              = "false" -> null
+       provider_id                             = "oidc"
        # (27 unchanged attributes hidden)
    }

  # keycloak_oidc_identity_provider.cmu_git will be updated in-place
!   resource "keycloak_oidc_identity_provider" "cmu_git" {
!       client_secret_wo                        = (write-only attribute)
-       gui_order                               = "1" -> null
        id                                      = "cmu-dev"
        # (30 unchanged attributes hidden)
    }

  # keycloak_oidc_identity_provider.codeberg will be destroyed
  # (because keycloak_oidc_identity_provider.codeberg is not in configuration)
-   resource "keycloak_oidc_identity_provider" "codeberg" {
-       accepts_prompt_none_forward_from_client = false -> null
-       add_read_token_role_on_create           = false -> null
-       alias                                   = "codeberg" -> null
-       authenticate_by_default                 = false -> null
-       authorization_url                       = "https://codeberg.org/login/oauth/authorize" -> null
-       backchannel_supported                   = true -> null
-       client_id                               = "63438ffe-847f-4467-a3ac-b795bc56fd5e" -> null
-       client_secret                           = (sensitive value) -> null
-       client_secret_wo                        = (write-only attribute) -> null
-       default_scopes                          = "openid" -> null
-       disable_type_claim_check                = false -> null
-       disable_user_info                       = false -> null
-       display_name                            = "Codeberg" -> null
-       enabled                                 = true -> null
-       extra_config                            = {
          - "clientAuthMethod" = "client_secret_post"
        } -> null
-       first_broker_login_flow_alias           = "first broker login" -> null
-       gui_order                               = "6" -> null
-       hide_on_login_page                      = true -> null
-       id                                      = "codeberg" -> null
-       internal_id                             = "34cc58bc-2cea-423a-8f87-2e6730b5034c" -> null
-       issuer                                  = "https://codeberg.org" -> null
-       jwks_url                                = "https://codeberg.org/login/oauth/keys" -> null
-       link_only                               = true -> null
-       org_redirect_mode_email_matches         = false -> null
-       provider_id                             = "oidc" -> null
-       realm                                   = "scottylabs" -> null
-       store_token                             = true -> null
-       sync_mode                               = "IMPORT" -> null
-       token_url                               = "https://codeberg.org/login/oauth/access_token" -> null
-       trust_email                             = false -> null
-       ui_locales                              = false -> null
-       user_info_url                           = "https://codeberg.org/login/oauth/userinfo" -> null
-       validate_signature                      = true -> null
    }

  # keycloak_oidc_identity_provider.slack will be updated in-place
!   resource "keycloak_oidc_identity_provider" "slack" {
!       client_secret_wo                        = (write-only attribute)
-       gui_order                               = "4" -> null
        id                                      = "slack"
        # (30 unchanged attributes hidden)
    }

  # keycloak_realm_user_profile.scottylabs will be updated in-place
!   resource "keycloak_realm_user_profile" "scottylabs" {
        id                         = "scottylabs"
        # (2 unchanged attributes hidden)

!       attribute {
!           display_name        = "Codeberg ID" -> "cmu.dev ID"
!           name                = "codeberg_id" -> "cmudev_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Username" -> "cmu.dev Username"
!           name                = "codeberg_username" -> "cmudev_username"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Email" -> "cmu.dev Email"
!           name                = "codeberg_email" -> "cmudev_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Name" -> "cmu.dev Name"
!           name                = "codeberg_name" -> "cmudev_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev ID" -> "Slack ID"
!           name                = "cmudev_id" -> "slack_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Username" -> "Slack Email"
!           name                = "cmudev_username" -> "slack_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Email" -> "Slack Name"
!           name                = "cmudev_email" -> "slack_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Name" -> "Google ID"
!           name                = "cmudev_name" -> "google_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Slack ID" -> "Google Email"
!           name                = "slack_id" -> "google_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Slack Email" -> "Google Name"
!           name                = "slack_email" -> "google_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Slack Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "slack_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google ID" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_id" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google Email" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_email" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub ID" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_id" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Username" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_username" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Email" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_email" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }

        # (21 unchanged blocks hidden)
    }

  # keycloak_saml_identity_provider.cmu_saml will be updated in-place
!   resource "keycloak_saml_identity_provider" "cmu_saml" {
!       authn_context_class_refs               = [
-           "",
        ]
-       authn_context_comparison_type          = "exact" -> null
!       authn_context_decl_refs                = [
-           "",
        ]
!       extra_config                           = {
          + "allowCreate"                    = "true"
          + "attributeConsumingServiceIndex" = "0"
          + "idpEntityId"                    = "https://login.cmu.edu/idp/shibboleth"
          + "metadataDescriptorUrl"          = "https://login.cmu.edu/idp/shibboleth"
          + "useMetadataDescriptorUrl"       = "true"
        }
        id                                     = "cmu-saml"
!       link_only                              = true -> false
-       login_hint                             = "false" -> null
+       provider_id                            = "saml"
-       signing_certificate                    = <<-EOT
            MIIDLDCCAhSgAwIBAgIJAO1Zt6Sg0xhmMA0GCSqGSIb3DQEBBQUAMBgxFjAUBgNV
            BAMTDWxvZ2luLmNtdS5lZHUwHhcNMTQwMTIyMTkzMDM2WhcNMzAwNjI5MTkzMDM2
            WjAYMRYwFAYDVQQDEw1sb2dpbi5jbXUuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOC
            AQ8AMIIBCgKCAQEA4yIV5lVs9/7jdmRTi23AINTzGQTrL+p8EXmV1iL48YAZ36T+
            xnDpTXt2RDaioI34/P9vHYpSKY6C5gDNyXGQZYTrgJQHQRgJAGTsXshYoDeBboZZ
            9ax+7m86rKqmHZAprHALONubY0UtPDEGQKdMeeetAUAOh8kIKpGvKp96I+4pIT6S
            /p5VtBB80veOK6woqbzU0Qr9q1FbcZfJ6AjG8as9lBa9Si6vc/fGvFrjsJL3+cpv
            ECuyG/yHp9obdwXLgxlQNPtXNeBgclgiaJJE8zWcZBUxWPboVeuC2Jfv7spIOcCy
            KPKTGUlobBoANGHqGMqbK+/7YzQ+J/s/4n0tvwIDAQABo3kwdzAdBgNVHQ4EFgQU
            oZye8kn1Hznd+tCaxJ3elowNIbYwSAYDVR0jBEEwP4AUoZye8kn1Hznd+tCaxJ3e
            lowNIbahHKQaMBgxFjAUBgNVBAMTDWxvZ2luLmNtdS5lZHWCCQDtWbekoNMYZjAM
            BgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4IBAQCp51hb/WPVfRtdQNZm6OQj
            8I6HwDGWmu5PzUycJAkD/VYd3wCM1zLwd32LMbxbA2ArKWBstErEsUog94zvMBWy
            AeT3Q5Gyghji0emF0nbZpNjPjE9bXavMbUppXF2/VHbuBtzEMBxIKV53X2et2MMc
            9mnNzZN1rofuIB//W9Fg9IWV5PLVbsvEYI98IkJ5t4JP92/V5p497O8jMj6oLhy7
            mI4FNx0pQnirAvrQxxgFTwVV5SEm87DBYRblUb4ba0yYVSBQg0EVbIb7QEDxHFWb
            zt4+NLolAQAMSQW+SJKf9V7+6+4uhMwpJxQwezzn41u9kGTIg9F8/s0IrgsTlAm3
        EOT -> null
        # (31 unchanged attributes hidden)
    }

Plan: 0 to add, 11 to change, 9 to destroy.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 5 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_ldap_user_federation.cmu,
│   on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu:
│  423:         "vendor": "AD"
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan"
  • ▶️ To apply this plan, comment: 
    atlantis apply -p keycloak
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak

Plan: 0 to add, 11 to change, 9 to destroy.

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef] keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1] keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2] keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg] keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12] keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4] keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59] keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5] keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93] data.keycloak_realm.scottylabs: Reading... data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) - destroy OpenTofu will perform the following actions: # keycloak_custom_identity_provider_mapper.cmu_saml_username will be updated in-place ! resource "keycloak_custom_identity_provider_mapper" "cmu_saml_username" { ! extra_config = { + "syncMode" = "INHERIT" + "target" = "BROKER_USERNAME" + "template" = "${ATTRIBUTE.urn:oid:1.3.6.1.4.1.5923.1.1.1.6 | localpart}" } id = "32fed5ec-b30e-4b69-90a3-64c58f592ded" name = "username" # (3 unchanged attributes hidden) } # keycloak_custom_identity_provider_mapper.cmu_username will be updated in-place ! resource "keycloak_custom_identity_provider_mapper" "cmu_username" { ! extra_config = { + "syncMode" = "INHERIT" + "target" = "BROKER_USERNAME" + "template" = "${CLAIM.preferred_username | localpart}" } id = "65d1857d-19e5-4db5-940c-7751b770b4ac" name = "username" # (3 unchanged attributes hidden) } # keycloak_custom_identity_provider_mapper.codeberg_email will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_email is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_email" { - extra_config = { - "claim" = "email" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_email" } -> null - id = "2bce1987-97ce-4ee5-adda-0e435c2b49ef" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_email" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_id will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_id is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_id" { - extra_config = { - "claim" = "sub" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_id" } -> null - id = "850eadbb-9508-4fac-9d43-d0f5cee2fc59" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_id" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_name will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_name is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_name" { - extra_config = { - "claim" = "name" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_name" } -> null - id = "8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_name" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_username will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_username is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_username" { - extra_config = { - "claim" = "preferred_username" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_username" } -> null - id = "e64e5c0b-d189-414d-b3bd-762d46d30a93" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_username" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_email will be destroyed # (because keycloak_custom_identity_provider_mapper.github_email is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_email" { - extra_config = { - "jsonField" = "email" - "syncMode" = "FORCE" - "userAttribute" = "github_email" } -> null - id = "9cdd2173-27de-46ae-bff3-66ee03797ab1" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_email" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_id will be destroyed # (because keycloak_custom_identity_provider_mapper.github_id is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_id" { - extra_config = { - "jsonField" = "id" - "syncMode" = "FORCE" - "userAttribute" = "github_id" } -> null - id = "e7462d44-1d0b-49e6-ae64-fb88031492c4" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_id" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_name will be destroyed # (because keycloak_custom_identity_provider_mapper.github_name is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_name" { - extra_config = { - "jsonField" = "name" - "syncMode" = "FORCE" - "userAttribute" = "github_name" } -> null - id = "0d38db58-87ca-46f4-82e5-23cba653dc12" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_name" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_username will be destroyed # (because keycloak_custom_identity_provider_mapper.github_username is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_username" { - extra_config = { - "jsonField" = "login" - "syncMode" = "FORCE" - "userAttribute" = "github_username" } -> null - id = "c07573c3-8e48-4084-89cb-3a628e5cdae2" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_username" -> null - realm = "scottylabs" -> null } # keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date will be updated in-place ! resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_creation_date" { ! attribute_force_default = false -> true id = "e271c3e5-024c-441d-8662-00aff6f95f60" name = "creation date" # (8 unchanged attributes hidden) } # keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date will be updated in-place ! resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_modify_date" { ! attribute_force_default = false -> true id = "5618310c-00e4-4bec-9e04-3975357268ae" name = "modify date" # (8 unchanged attributes hidden) } # keycloak_ldap_user_federation.cmu will be updated in-place ! resource "keycloak_ldap_user_federation" "cmu" { + bind_credential = (sensitive value) + debug = "false" id = "TtPPdhQJRUSFFwr_nJ2gcA" name = "CMU LDAP" ! user_object_classes = [ - "cmuAccountPerson,inetOrgPerson", + "cmuAccountPerson", + "inetOrgPerson", ] # (27 unchanged attributes hidden) } # keycloak_oidc_google_identity_provider.google will be updated in-place ! resource "keycloak_oidc_google_identity_provider" "google" { - gui_order = "3" -> null id = "google" # (23 unchanged attributes hidden) } # keycloak_oidc_identity_provider.cmu will be updated in-place ! resource "keycloak_oidc_identity_provider" "cmu" { + accepts_prompt_none_forward_from_client = false + client_secret = (sensitive value) ! client_secret_wo = (write-only attribute) + default_scopes = "openid profile email offline_access" ! extra_config = { + "claimFilterName" = "preferred_username" + "claimFilterValue" = "(?i)[^@]+@andrew\\.cmu\\.edu" + "clientAuthMethod" = "client_secret_post" + "filteredByClaim" = "true" + "pkceEnabled" = "true" + "pkceMethod" = "S256" } - gui_order = "0" -> null id = "cmu" - login_hint = "false" -> null + provider_id = "oidc" # (27 unchanged attributes hidden) } # keycloak_oidc_identity_provider.cmu_git will be updated in-place ! resource "keycloak_oidc_identity_provider" "cmu_git" { ! client_secret_wo = (write-only attribute) - gui_order = "1" -> null id = "cmu-dev" # (30 unchanged attributes hidden) } # keycloak_oidc_identity_provider.codeberg will be destroyed # (because keycloak_oidc_identity_provider.codeberg is not in configuration) - resource "keycloak_oidc_identity_provider" "codeberg" { - accepts_prompt_none_forward_from_client = false -> null - add_read_token_role_on_create = false -> null - alias = "codeberg" -> null - authenticate_by_default = false -> null - authorization_url = "https://codeberg.org/login/oauth/authorize" -> null - backchannel_supported = true -> null - client_id = "63438ffe-847f-4467-a3ac-b795bc56fd5e" -> null - client_secret = (sensitive value) -> null - client_secret_wo = (write-only attribute) -> null - default_scopes = "openid" -> null - disable_type_claim_check = false -> null - disable_user_info = false -> null - display_name = "Codeberg" -> null - enabled = true -> null - extra_config = { - "clientAuthMethod" = "client_secret_post" } -> null - first_broker_login_flow_alias = "first broker login" -> null - gui_order = "6" -> null - hide_on_login_page = true -> null - id = "codeberg" -> null - internal_id = "34cc58bc-2cea-423a-8f87-2e6730b5034c" -> null - issuer = "https://codeberg.org" -> null - jwks_url = "https://codeberg.org/login/oauth/keys" -> null - link_only = true -> null - org_redirect_mode_email_matches = false -> null - provider_id = "oidc" -> null - realm = "scottylabs" -> null - store_token = true -> null - sync_mode = "IMPORT" -> null - token_url = "https://codeberg.org/login/oauth/access_token" -> null - trust_email = false -> null - ui_locales = false -> null - user_info_url = "https://codeberg.org/login/oauth/userinfo" -> null - validate_signature = true -> null } # keycloak_oidc_identity_provider.slack will be updated in-place ! resource "keycloak_oidc_identity_provider" "slack" { ! client_secret_wo = (write-only attribute) - gui_order = "4" -> null id = "slack" # (30 unchanged attributes hidden) } # keycloak_realm_user_profile.scottylabs will be updated in-place ! resource "keycloak_realm_user_profile" "scottylabs" { id = "scottylabs" # (2 unchanged attributes hidden) ! attribute { ! display_name = "Codeberg ID" -> "cmu.dev ID" ! name = "codeberg_id" -> "cmudev_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Username" -> "cmu.dev Username" ! name = "codeberg_username" -> "cmudev_username" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Email" -> "cmu.dev Email" ! name = "codeberg_email" -> "cmudev_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Name" -> "cmu.dev Name" ! name = "codeberg_name" -> "cmudev_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev ID" -> "Slack ID" ! name = "cmudev_id" -> "slack_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Username" -> "Slack Email" ! name = "cmudev_username" -> "slack_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Email" -> "Slack Name" ! name = "cmudev_email" -> "slack_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Name" -> "Google ID" ! name = "cmudev_name" -> "google_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Slack ID" -> "Google Email" ! name = "slack_id" -> "google_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Slack Email" -> "Google Name" ! name = "slack_email" -> "google_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } - attribute { - annotations = {} -> null - display_name = "Slack Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "slack_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google ID" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_id" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google Email" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_email" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub ID" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_id" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Username" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_username" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Email" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_email" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } # (21 unchanged blocks hidden) } # keycloak_saml_identity_provider.cmu_saml will be updated in-place ! resource "keycloak_saml_identity_provider" "cmu_saml" { ! authn_context_class_refs = [ - "", ] - authn_context_comparison_type = "exact" -> null ! authn_context_decl_refs = [ - "", ] ! extra_config = { + "allowCreate" = "true" + "attributeConsumingServiceIndex" = "0" + "idpEntityId" = "https://login.cmu.edu/idp/shibboleth" + "metadataDescriptorUrl" = "https://login.cmu.edu/idp/shibboleth" + "useMetadataDescriptorUrl" = "true" } id = "cmu-saml" ! link_only = true -> false - login_hint = "false" -> null + provider_id = "saml" - signing_certificate = <<-EOT MIIDLDCCAhSgAwIBAgIJAO1Zt6Sg0xhmMA0GCSqGSIb3DQEBBQUAMBgxFjAUBgNV BAMTDWxvZ2luLmNtdS5lZHUwHhcNMTQwMTIyMTkzMDM2WhcNMzAwNjI5MTkzMDM2 WjAYMRYwFAYDVQQDEw1sb2dpbi5jbXUuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA4yIV5lVs9/7jdmRTi23AINTzGQTrL+p8EXmV1iL48YAZ36T+ xnDpTXt2RDaioI34/P9vHYpSKY6C5gDNyXGQZYTrgJQHQRgJAGTsXshYoDeBboZZ 9ax+7m86rKqmHZAprHALONubY0UtPDEGQKdMeeetAUAOh8kIKpGvKp96I+4pIT6S /p5VtBB80veOK6woqbzU0Qr9q1FbcZfJ6AjG8as9lBa9Si6vc/fGvFrjsJL3+cpv ECuyG/yHp9obdwXLgxlQNPtXNeBgclgiaJJE8zWcZBUxWPboVeuC2Jfv7spIOcCy KPKTGUlobBoANGHqGMqbK+/7YzQ+J/s/4n0tvwIDAQABo3kwdzAdBgNVHQ4EFgQU oZye8kn1Hznd+tCaxJ3elowNIbYwSAYDVR0jBEEwP4AUoZye8kn1Hznd+tCaxJ3e lowNIbahHKQaMBgxFjAUBgNVBAMTDWxvZ2luLmNtdS5lZHWCCQDtWbekoNMYZjAM BgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4IBAQCp51hb/WPVfRtdQNZm6OQj 8I6HwDGWmu5PzUycJAkD/VYd3wCM1zLwd32LMbxbA2ArKWBstErEsUog94zvMBWy AeT3Q5Gyghji0emF0nbZpNjPjE9bXavMbUppXF2/VHbuBtzEMBxIKV53X2et2MMc 9mnNzZN1rofuIB//W9Fg9IWV5PLVbsvEYI98IkJ5t4JP92/V5p497O8jMj6oLhy7 mI4FNx0pQnirAvrQxxgFTwVV5SEm87DBYRblUb4ba0yYVSBQg0EVbIb7QEDxHFWb zt4+NLolAQAMSQW+SJKf9V7+6+4uhMwpJxQwezzn41u9kGTIg9F8/s0IrgsTlAm3 EOT -> null # (31 unchanged attributes hidden) } Plan: 0 to add, 11 to change, 9 to destroy. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 5 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_ldap_user_federation.cmu, │ on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu: │ 423: "vendor": "AD" │ │ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` Plan: 0 to add, 11 to change, 9 to destroy. --- * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
fix: preserve idp gui order and cmu-saml link-only
All checks were successful
CI / build (pull_request) Successful in 55s
Details
CI / check (pull_request) Successful in 0s
Details
atlantis/apply: posthog Apply succeeded.
Details
atlantis/apply: observability Apply succeeded.
Details
atlantis/apply: forgejo Apply succeeded.
Details
atlantis/apply: ricochet Apply succeeded.
Details
atlantis/apply: garage-webadmin Apply succeeded.
Details
atlantis/apply: matrix Apply succeeded.
Details
atlantis/apply: litellm Apply succeeded.
Details
atlantis/apply: kennel Apply succeeded.
Details
atlantis/apply: headscale Apply succeeded.
Details
atlantis/apply: snot Apply succeeded.
Details
atlantis/apply: governance Apply succeeded.
Details
atlantis/apply: openbao Apply succeeded.
Details
atlantis/apply: atlantis Apply succeeded.
Details
atlantis/apply: hosts Apply succeeded.
Details
atlantis/apply: keycloak Apply succeeded.
Details
atlantis/apply: vaultwarden Apply succeeded.
Details
atlantis/apply: webhook Apply succeeded.
Details
atlantis/apply 17/17 projects applied successfully.
kennel/build build succeeded
Details
kennel/deploy deployment healthy
CI / check-1 (push) Successful in 1m3s
Details
CI / build (push) Successful in 55s
Details
CI / check (push) Successful in 0s
Details
atlantis/plan: webhook No changes. Your infrastructure matches the configuration.
Details
atlantis/plan: vaultwarden No changes. Your infrastructure matches the configuration.
Details
atlantis/plan 17/17 projects planned successfully.
CI / check-1 (pull_request) Successful in 1m3s
Details
atlantis/pre_workflow_hook: Generate atlantis.yaml from the flake succeeded.
Details
2029e7e355
 
Signed-off-by: Anish Pallati <i@anish.land>
scottylabs-bot commented 2026-09-22 23:46:16 +00:00
Owner
Copy link

Ran Plan for 17 projects:

  1. project: snot dir: . workspace: snot
  2. project: posthog dir: . workspace: posthog
  3. project: forgejo dir: . workspace: forgejo
  4. project: governance dir: . workspace: governance
  5. project: kennel dir: . workspace: kennel
  6. project: headscale dir: . workspace: headscale
  7. project: matrix dir: . workspace: matrix
  8. project: ricochet dir: . workspace: ricochet
  9. project: observability dir: . workspace: observability
  10. project: litellm dir: . workspace: litellm
  11. project: keycloak dir: . workspace: keycloak
  12. project: atlantis dir: . workspace: atlantis
  13. project: openbao dir: . workspace: openbao
  14. project: garage-webadmin dir: . workspace: garage-webadmin
  15. project: hosts dir: . workspace: hosts
  16. project: webhook dir: . workspace: webhook
  17. project: vaultwarden dir: . workspace: vaultwarden

1. project: snot dir: . workspace: snot

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p snot
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p snot

No changes. Your infrastructure matches the configuration.

2. project: posthog dir: . workspace: posthog

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p posthog
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p posthog

No changes. Your infrastructure matches the configuration.

3. project: forgejo dir: . workspace: forgejo

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
data.cloudflare_zones.all: Reading...
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p forgejo
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p forgejo

No changes. Your infrastructure matches the configuration.

4. project: governance dir: . workspace: governance

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_policy.governance: Refreshing state... [id=governance]
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.keycloak_openid_client.realm_management: Reading...
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.cloudflare_zones.all: Reading...
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
data.cloudflare_zones.all: Read complete after 1s

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p governance
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p governance

No changes. Your infrastructure matches the configuration.

5. project: kennel dir: . workspace: kennel

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p kennel
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p kennel

No changes. Your infrastructure matches the configuration.

6. project: headscale dir: . workspace: headscale

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p headscale
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p headscale

No changes. Your infrastructure matches the configuration.

7. project: matrix dir: . workspace: matrix

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p matrix
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p matrix

No changes. Your infrastructure matches the configuration.

8. project: ricochet dir: . workspace: ricochet

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p ricochet
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p ricochet

No changes. Your infrastructure matches the configuration.

9. project: observability dir: . workspace: observability

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p observability
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p observability

No changes. Your infrastructure matches the configuration.

10. project: litellm dir: . workspace: litellm

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p litellm
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p litellm

No changes. Your infrastructure matches the configuration.

11. project: keycloak dir: . workspace: keycloak

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy
this derivation will be built:
  /nix/store/j8xy1cwgkm41gvdqsjifiwn8lwxhh264-config.tf.json.drv
building '/nix/store/j8xy1cwgkm41gvdqsjifiwn8lwxhh264-config.tf.json.drv'...


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5]
keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4]
keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2]
keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1]
keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef]
keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12]
keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg]
keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93]
keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59]
data.keycloak_realm.scottylabs: Reading...
data.vault_kv_secret_v2.keycloak_ldap: Reading...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.vault_kv_secret_v2.forgejo_idp: Reading...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap]
data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
data.cloudflare_zones.all: Read complete after 1s
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)
  - destroy

OpenTofu will perform the following actions:

  # keycloak_custom_identity_provider_mapper.cmu_saml_username will be updated in-place
!   resource "keycloak_custom_identity_provider_mapper" "cmu_saml_username" {
!       extra_config             = {
          + "syncMode" = "INHERIT"
          + "target"   = "BROKER_USERNAME"
          + "template" = "${ATTRIBUTE.urn:oid:1.3.6.1.4.1.5923.1.1.1.6 | localpart}"
        }
        id                       = "32fed5ec-b30e-4b69-90a3-64c58f592ded"
        name                     = "username"
        # (3 unchanged attributes hidden)
    }

  # keycloak_custom_identity_provider_mapper.cmu_username will be updated in-place
!   resource "keycloak_custom_identity_provider_mapper" "cmu_username" {
!       extra_config             = {
          + "syncMode" = "INHERIT"
          + "target"   = "BROKER_USERNAME"
          + "template" = "${CLAIM.preferred_username | localpart}"
        }
        id                       = "65d1857d-19e5-4db5-940c-7751b770b4ac"
        name                     = "username"
        # (3 unchanged attributes hidden)
    }

  # keycloak_custom_identity_provider_mapper.codeberg_email will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_email is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_email" {
-       extra_config             = {
          - "claim"          = "email"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_email"
        } -> null
-       id                       = "2bce1987-97ce-4ee5-adda-0e435c2b49ef" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_email" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_id will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_id is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_id" {
-       extra_config             = {
          - "claim"          = "sub"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_id"
        } -> null
-       id                       = "850eadbb-9508-4fac-9d43-d0f5cee2fc59" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_id" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_name will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_name is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_name" {
-       extra_config             = {
          - "claim"          = "name"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_name"
        } -> null
-       id                       = "8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_name" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.codeberg_username will be destroyed
  # (because keycloak_custom_identity_provider_mapper.codeberg_username is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "codeberg_username" {
-       extra_config             = {
          - "claim"          = "preferred_username"
          - "syncMode"       = "FORCE"
          - "user.attribute" = "codeberg_username"
        } -> null
-       id                       = "e64e5c0b-d189-414d-b3bd-762d46d30a93" -> null
-       identity_provider_alias  = "codeberg" -> null
-       identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null
-       name                     = "codeberg_username" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_email will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_email is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_email" {
-       extra_config             = {
          - "jsonField"     = "email"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_email"
        } -> null
-       id                       = "9cdd2173-27de-46ae-bff3-66ee03797ab1" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_email" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_id will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_id is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_id" {
-       extra_config             = {
          - "jsonField"     = "id"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_id"
        } -> null
-       id                       = "e7462d44-1d0b-49e6-ae64-fb88031492c4" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_id" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_name will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_name is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_name" {
-       extra_config             = {
          - "jsonField"     = "name"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_name"
        } -> null
-       id                       = "0d38db58-87ca-46f4-82e5-23cba653dc12" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_name" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_custom_identity_provider_mapper.github_username will be destroyed
  # (because keycloak_custom_identity_provider_mapper.github_username is not in configuration)
-   resource "keycloak_custom_identity_provider_mapper" "github_username" {
-       extra_config             = {
          - "jsonField"     = "login"
          - "syncMode"      = "FORCE"
          - "userAttribute" = "github_username"
        } -> null
-       id                       = "c07573c3-8e48-4084-89cb-3a628e5cdae2" -> null
-       identity_provider_alias  = "github" -> null
-       identity_provider_mapper = "github-user-attribute-mapper" -> null
-       name                     = "github_username" -> null
-       realm                    = "scottylabs" -> null
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date will be updated in-place
!   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_creation_date" {
!       attribute_force_default     = false -> true
        id                          = "e271c3e5-024c-441d-8662-00aff6f95f60"
        name                        = "creation date"
        # (8 unchanged attributes hidden)
    }

  # keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date will be updated in-place
!   resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_modify_date" {
!       attribute_force_default     = false -> true
        id                          = "5618310c-00e4-4bec-9e04-3975357268ae"
        name                        = "modify date"
        # (8 unchanged attributes hidden)
    }

  # keycloak_ldap_user_federation.cmu will be updated in-place
!   resource "keycloak_ldap_user_federation" "cmu" {
+       bind_credential                 = (sensitive value)
+       debug                           = "false"
        id                              = "TtPPdhQJRUSFFwr_nJ2gcA"
        name                            = "CMU LDAP"
!       user_object_classes             = [
-           "cmuAccountPerson,inetOrgPerson",
+           "cmuAccountPerson",
+           "inetOrgPerson",
        ]
        # (27 unchanged attributes hidden)
    }

  # keycloak_oidc_identity_provider.cmu will be updated in-place
!   resource "keycloak_oidc_identity_provider" "cmu" {
+       accepts_prompt_none_forward_from_client = false
+       client_secret                           = (sensitive value)
!       client_secret_wo                        = (write-only attribute)
+       default_scopes                          = "openid profile email offline_access"
!       extra_config                            = {
          + "claimFilterName"  = "preferred_username"
          + "claimFilterValue" = "(?i)[^@]+@andrew\\.cmu\\.edu"
          + "clientAuthMethod" = "client_secret_post"
          + "filteredByClaim"  = "true"
          + "pkceEnabled"      = "true"
          + "pkceMethod"       = "S256"
        }
        id                                      = "cmu"
-       login_hint                              = "false" -> null
+       provider_id                             = "oidc"
        # (28 unchanged attributes hidden)
    }

  # keycloak_oidc_identity_provider.codeberg will be destroyed
  # (because keycloak_oidc_identity_provider.codeberg is not in configuration)
-   resource "keycloak_oidc_identity_provider" "codeberg" {
-       accepts_prompt_none_forward_from_client = false -> null
-       add_read_token_role_on_create           = false -> null
-       alias                                   = "codeberg" -> null
-       authenticate_by_default                 = false -> null
-       authorization_url                       = "https://codeberg.org/login/oauth/authorize" -> null
-       backchannel_supported                   = true -> null
-       client_id                               = "63438ffe-847f-4467-a3ac-b795bc56fd5e" -> null
-       client_secret                           = (sensitive value) -> null
-       client_secret_wo                        = (write-only attribute) -> null
-       default_scopes                          = "openid" -> null
-       disable_type_claim_check                = false -> null
-       disable_user_info                       = false -> null
-       display_name                            = "Codeberg" -> null
-       enabled                                 = true -> null
-       extra_config                            = {
          - "clientAuthMethod" = "client_secret_post"
        } -> null
-       first_broker_login_flow_alias           = "first broker login" -> null
-       gui_order                               = "6" -> null
-       hide_on_login_page                      = true -> null
-       id                                      = "codeberg" -> null
-       internal_id                             = "34cc58bc-2cea-423a-8f87-2e6730b5034c" -> null
-       issuer                                  = "https://codeberg.org" -> null
-       jwks_url                                = "https://codeberg.org/login/oauth/keys" -> null
-       link_only                               = true -> null
-       org_redirect_mode_email_matches         = false -> null
-       provider_id                             = "oidc" -> null
-       realm                                   = "scottylabs" -> null
-       store_token                             = true -> null
-       sync_mode                               = "IMPORT" -> null
-       token_url                               = "https://codeberg.org/login/oauth/access_token" -> null
-       trust_email                             = false -> null
-       ui_locales                              = false -> null
-       user_info_url                           = "https://codeberg.org/login/oauth/userinfo" -> null
-       validate_signature                      = true -> null
    }

  # keycloak_realm_user_profile.scottylabs will be updated in-place
!   resource "keycloak_realm_user_profile" "scottylabs" {
        id                         = "scottylabs"
        # (2 unchanged attributes hidden)

!       attribute {
!           display_name        = "Codeberg ID" -> "cmu.dev ID"
!           name                = "codeberg_id" -> "cmudev_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Username" -> "cmu.dev Username"
!           name                = "codeberg_username" -> "cmudev_username"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Email" -> "cmu.dev Email"
!           name                = "codeberg_email" -> "cmudev_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Codeberg Name" -> "cmu.dev Name"
!           name                = "codeberg_name" -> "cmudev_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev ID" -> "Slack ID"
!           name                = "cmudev_id" -> "slack_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Username" -> "Slack Email"
!           name                = "cmudev_username" -> "slack_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Email" -> "Slack Name"
!           name                = "cmudev_email" -> "slack_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "cmu.dev Name" -> "Google ID"
!           name                = "cmudev_name" -> "google_id"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Slack ID" -> "Google Email"
!           name                = "slack_id" -> "google_email"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
!       attribute {
!           display_name        = "Slack Email" -> "Google Name"
!           name                = "slack_email" -> "google_name"
            # (5 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Slack Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "slack_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google ID" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_id" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google Email" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_email" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "Google Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "google_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub ID" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_id" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Username" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_username" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Email" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_email" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }
-       attribute {
-           annotations         = {} -> null
-           display_name        = "GitHub Name" -> null
-           enabled_when_scope  = [] -> null
-           multi_valued        = false -> null
-           name                = "github_name" -> null
-           required_for_roles  = [] -> null
-           required_for_scopes = [] -> null

-           permissions {
-               edit = [
-                   "admin",
                ] -> null
-               view = [
-                   "admin",
                ] -> null
            }
        }

        # (21 unchanged blocks hidden)
    }

  # keycloak_saml_identity_provider.cmu_saml will be updated in-place
!   resource "keycloak_saml_identity_provider" "cmu_saml" {
!       authn_context_class_refs               = [
-           "",
        ]
-       authn_context_comparison_type          = "exact" -> null
!       authn_context_decl_refs                = [
-           "",
        ]
!       extra_config                           = {
          + "allowCreate"                    = "true"
          + "attributeConsumingServiceIndex" = "0"
          + "idpEntityId"                    = "https://login.cmu.edu/idp/shibboleth"
          + "metadataDescriptorUrl"          = "https://login.cmu.edu/idp/shibboleth"
          + "useMetadataDescriptorUrl"       = "true"
        }
        id                                     = "cmu-saml"
-       login_hint                             = "false" -> null
+       provider_id                            = "saml"
-       signing_certificate                    = <<-EOT
            MIIDLDCCAhSgAwIBAgIJAO1Zt6Sg0xhmMA0GCSqGSIb3DQEBBQUAMBgxFjAUBgNV
            BAMTDWxvZ2luLmNtdS5lZHUwHhcNMTQwMTIyMTkzMDM2WhcNMzAwNjI5MTkzMDM2
            WjAYMRYwFAYDVQQDEw1sb2dpbi5jbXUuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOC
            AQ8AMIIBCgKCAQEA4yIV5lVs9/7jdmRTi23AINTzGQTrL+p8EXmV1iL48YAZ36T+
            xnDpTXt2RDaioI34/P9vHYpSKY6C5gDNyXGQZYTrgJQHQRgJAGTsXshYoDeBboZZ
            9ax+7m86rKqmHZAprHALONubY0UtPDEGQKdMeeetAUAOh8kIKpGvKp96I+4pIT6S
            /p5VtBB80veOK6woqbzU0Qr9q1FbcZfJ6AjG8as9lBa9Si6vc/fGvFrjsJL3+cpv
            ECuyG/yHp9obdwXLgxlQNPtXNeBgclgiaJJE8zWcZBUxWPboVeuC2Jfv7spIOcCy
            KPKTGUlobBoANGHqGMqbK+/7YzQ+J/s/4n0tvwIDAQABo3kwdzAdBgNVHQ4EFgQU
            oZye8kn1Hznd+tCaxJ3elowNIbYwSAYDVR0jBEEwP4AUoZye8kn1Hznd+tCaxJ3e
            lowNIbahHKQaMBgxFjAUBgNVBAMTDWxvZ2luLmNtdS5lZHWCCQDtWbekoNMYZjAM
            BgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4IBAQCp51hb/WPVfRtdQNZm6OQj
            8I6HwDGWmu5PzUycJAkD/VYd3wCM1zLwd32LMbxbA2ArKWBstErEsUog94zvMBWy
            AeT3Q5Gyghji0emF0nbZpNjPjE9bXavMbUppXF2/VHbuBtzEMBxIKV53X2et2MMc
            9mnNzZN1rofuIB//W9Fg9IWV5PLVbsvEYI98IkJ5t4JP92/V5p497O8jMj6oLhy7
            mI4FNx0pQnirAvrQxxgFTwVV5SEm87DBYRblUb4ba0yYVSBQg0EVbIb7QEDxHFWb
            zt4+NLolAQAMSQW+SJKf9V7+6+4uhMwpJxQwezzn41u9kGTIg9F8/s0IrgsTlAm3
        EOT -> null
        # (32 unchanged attributes hidden)
    }

Plan: 0 to add, 8 to change, 9 to destroy.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.forgejo_idp,
│   on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp:
│   15:       },
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 5 more similar warnings elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_ldap_user_federation.cmu,
│   on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu:
│  423:         "vendor": "AD"
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and 2 more similar warnings elsewhere)
╵

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan"
  • ▶️ To apply this plan, comment: 
    atlantis apply -p keycloak
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak

Plan: 0 to add, 8 to change, 9 to destroy.

12. project: atlantis dir: . workspace: atlantis

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed svalabs/forgejo v1.6.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
forgejo_repository_webhook.infrastructure: Refreshing state...
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.governance: Refreshing state...
data.cloudflare_zones.all: Reading...
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p atlantis
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p atlantis

No changes. Your infrastructure matches the configuration.

13. project: openbao dir: . workspace: openbao

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_mount.kv: Refreshing state... [id=secret]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_policy.devops: Refreshing state... [id=devops]
vault_policy.infra: Refreshing state... [id=infra]
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p openbao
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p openbao

No changes. Your infrastructure matches the configuration.

14. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p garage-webadmin
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p garage-webadmin

No changes. Your infrastructure matches the configuration.

15. project: hosts dir: . workspace: hosts

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 1s
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p hosts
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p hosts

No changes. Your infrastructure matches the configuration.

16. project: webhook dir: . workspace: webhook

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p webhook
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p webhook

No changes. Your infrastructure matches the configuration.

17. project: vaultwarden dir: . workspace: vaultwarden

Show Output 
warning: ignoring untrusted flake configuration setting 'extra-substituters'.
Pass '--accept-flake-config' to trust it
warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'.
Pass '--accept-flake-config' to trust it
error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed keycloak/keycloak v5.9.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.12.0
- Using previously-installed cloudflare/cloudflare v5.25.0

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_zones.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_zones.all: Read complete after 0s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]

No changes. Your infrastructure matches the configuration.

OpenTofu has compared your real infrastructure against your configuration and
found no differences, so no changes are needed.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p vaultwarden
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p vaultwarden

No changes. Your infrastructure matches the configuration.

Plan Summary

17 projects, 1 with changes, 16 with no changes, 0 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 17 projects: 1. project: `snot` dir: `.` workspace: `snot` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` --- ### 1. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] data.cloudflare_zones.all: Reading... vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_policy.governance: Refreshing state... [id=governance] vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.keycloak_openid_client.realm_management: Reading... keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.cloudflare_zones.all: Reading... data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] data.cloudflare_zones.all: Read complete after 1s No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... random_password.litellm_salt_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy this derivation will be built: /nix/store/j8xy1cwgkm41gvdqsjifiwn8lwxhh264-config.tf.json.drv building '/nix/store/j8xy1cwgkm41gvdqsjifiwn8lwxhh264-config.tf.json.drv'... Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... keycloak_custom_identity_provider_mapper.codeberg_name: Refreshing state... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5] keycloak_custom_identity_provider_mapper.github_id: Refreshing state... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4] keycloak_custom_identity_provider_mapper.github_username: Refreshing state... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2] keycloak_custom_identity_provider_mapper.github_email: Refreshing state... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1] keycloak_custom_identity_provider_mapper.codeberg_email: Refreshing state... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef] keycloak_custom_identity_provider_mapper.github_name: Refreshing state... [id=0d38db58-87ca-46f4-82e5-23cba653dc12] keycloak_oidc_identity_provider.codeberg: Refreshing state... [id=codeberg] keycloak_custom_identity_provider_mapper.codeberg_username: Refreshing state... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93] keycloak_custom_identity_provider_mapper.codeberg_id: Refreshing state... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59] data.keycloak_realm.scottylabs: Reading... data.vault_kv_secret_v2.keycloak_ldap: Reading... data.vault_kv_secret_v2.keycloak_idp: Reading... data.vault_kv_secret_v2.forgejo_idp: Reading... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.vault_kv_secret_v2.keycloak_ldap: Read complete after 0s [id=secret/data/infra/keycloak-ldap] data.vault_kv_secret_v2.forgejo_idp: Read complete after 0s [id=secret/data/infra/forgejo-idp] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] data.cloudflare_zones.all: Read complete after 1s keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) - destroy OpenTofu will perform the following actions: # keycloak_custom_identity_provider_mapper.cmu_saml_username will be updated in-place ! resource "keycloak_custom_identity_provider_mapper" "cmu_saml_username" { ! extra_config = { + "syncMode" = "INHERIT" + "target" = "BROKER_USERNAME" + "template" = "${ATTRIBUTE.urn:oid:1.3.6.1.4.1.5923.1.1.1.6 | localpart}" } id = "32fed5ec-b30e-4b69-90a3-64c58f592ded" name = "username" # (3 unchanged attributes hidden) } # keycloak_custom_identity_provider_mapper.cmu_username will be updated in-place ! resource "keycloak_custom_identity_provider_mapper" "cmu_username" { ! extra_config = { + "syncMode" = "INHERIT" + "target" = "BROKER_USERNAME" + "template" = "${CLAIM.preferred_username | localpart}" } id = "65d1857d-19e5-4db5-940c-7751b770b4ac" name = "username" # (3 unchanged attributes hidden) } # keycloak_custom_identity_provider_mapper.codeberg_email will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_email is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_email" { - extra_config = { - "claim" = "email" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_email" } -> null - id = "2bce1987-97ce-4ee5-adda-0e435c2b49ef" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_email" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_id will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_id is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_id" { - extra_config = { - "claim" = "sub" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_id" } -> null - id = "850eadbb-9508-4fac-9d43-d0f5cee2fc59" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_id" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_name will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_name is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_name" { - extra_config = { - "claim" = "name" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_name" } -> null - id = "8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_name" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.codeberg_username will be destroyed # (because keycloak_custom_identity_provider_mapper.codeberg_username is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "codeberg_username" { - extra_config = { - "claim" = "preferred_username" - "syncMode" = "FORCE" - "user.attribute" = "codeberg_username" } -> null - id = "e64e5c0b-d189-414d-b3bd-762d46d30a93" -> null - identity_provider_alias = "codeberg" -> null - identity_provider_mapper = "oidc-user-attribute-idp-mapper" -> null - name = "codeberg_username" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_email will be destroyed # (because keycloak_custom_identity_provider_mapper.github_email is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_email" { - extra_config = { - "jsonField" = "email" - "syncMode" = "FORCE" - "userAttribute" = "github_email" } -> null - id = "9cdd2173-27de-46ae-bff3-66ee03797ab1" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_email" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_id will be destroyed # (because keycloak_custom_identity_provider_mapper.github_id is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_id" { - extra_config = { - "jsonField" = "id" - "syncMode" = "FORCE" - "userAttribute" = "github_id" } -> null - id = "e7462d44-1d0b-49e6-ae64-fb88031492c4" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_id" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_name will be destroyed # (because keycloak_custom_identity_provider_mapper.github_name is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_name" { - extra_config = { - "jsonField" = "name" - "syncMode" = "FORCE" - "userAttribute" = "github_name" } -> null - id = "0d38db58-87ca-46f4-82e5-23cba653dc12" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_name" -> null - realm = "scottylabs" -> null } # keycloak_custom_identity_provider_mapper.github_username will be destroyed # (because keycloak_custom_identity_provider_mapper.github_username is not in configuration) - resource "keycloak_custom_identity_provider_mapper" "github_username" { - extra_config = { - "jsonField" = "login" - "syncMode" = "FORCE" - "userAttribute" = "github_username" } -> null - id = "c07573c3-8e48-4084-89cb-3a628e5cdae2" -> null - identity_provider_alias = "github" -> null - identity_provider_mapper = "github-user-attribute-mapper" -> null - name = "github_username" -> null - realm = "scottylabs" -> null } # keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date will be updated in-place ! resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_creation_date" { ! attribute_force_default = false -> true id = "e271c3e5-024c-441d-8662-00aff6f95f60" name = "creation date" # (8 unchanged attributes hidden) } # keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date will be updated in-place ! resource "keycloak_ldap_user_attribute_mapper" "cmu_ldap_modify_date" { ! attribute_force_default = false -> true id = "5618310c-00e4-4bec-9e04-3975357268ae" name = "modify date" # (8 unchanged attributes hidden) } # keycloak_ldap_user_federation.cmu will be updated in-place ! resource "keycloak_ldap_user_federation" "cmu" { + bind_credential = (sensitive value) + debug = "false" id = "TtPPdhQJRUSFFwr_nJ2gcA" name = "CMU LDAP" ! user_object_classes = [ - "cmuAccountPerson,inetOrgPerson", + "cmuAccountPerson", + "inetOrgPerson", ] # (27 unchanged attributes hidden) } # keycloak_oidc_identity_provider.cmu will be updated in-place ! resource "keycloak_oidc_identity_provider" "cmu" { + accepts_prompt_none_forward_from_client = false + client_secret = (sensitive value) ! client_secret_wo = (write-only attribute) + default_scopes = "openid profile email offline_access" ! extra_config = { + "claimFilterName" = "preferred_username" + "claimFilterValue" = "(?i)[^@]+@andrew\\.cmu\\.edu" + "clientAuthMethod" = "client_secret_post" + "filteredByClaim" = "true" + "pkceEnabled" = "true" + "pkceMethod" = "S256" } id = "cmu" - login_hint = "false" -> null + provider_id = "oidc" # (28 unchanged attributes hidden) } # keycloak_oidc_identity_provider.codeberg will be destroyed # (because keycloak_oidc_identity_provider.codeberg is not in configuration) - resource "keycloak_oidc_identity_provider" "codeberg" { - accepts_prompt_none_forward_from_client = false -> null - add_read_token_role_on_create = false -> null - alias = "codeberg" -> null - authenticate_by_default = false -> null - authorization_url = "https://codeberg.org/login/oauth/authorize" -> null - backchannel_supported = true -> null - client_id = "63438ffe-847f-4467-a3ac-b795bc56fd5e" -> null - client_secret = (sensitive value) -> null - client_secret_wo = (write-only attribute) -> null - default_scopes = "openid" -> null - disable_type_claim_check = false -> null - disable_user_info = false -> null - display_name = "Codeberg" -> null - enabled = true -> null - extra_config = { - "clientAuthMethod" = "client_secret_post" } -> null - first_broker_login_flow_alias = "first broker login" -> null - gui_order = "6" -> null - hide_on_login_page = true -> null - id = "codeberg" -> null - internal_id = "34cc58bc-2cea-423a-8f87-2e6730b5034c" -> null - issuer = "https://codeberg.org" -> null - jwks_url = "https://codeberg.org/login/oauth/keys" -> null - link_only = true -> null - org_redirect_mode_email_matches = false -> null - provider_id = "oidc" -> null - realm = "scottylabs" -> null - store_token = true -> null - sync_mode = "IMPORT" -> null - token_url = "https://codeberg.org/login/oauth/access_token" -> null - trust_email = false -> null - ui_locales = false -> null - user_info_url = "https://codeberg.org/login/oauth/userinfo" -> null - validate_signature = true -> null } # keycloak_realm_user_profile.scottylabs will be updated in-place ! resource "keycloak_realm_user_profile" "scottylabs" { id = "scottylabs" # (2 unchanged attributes hidden) ! attribute { ! display_name = "Codeberg ID" -> "cmu.dev ID" ! name = "codeberg_id" -> "cmudev_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Username" -> "cmu.dev Username" ! name = "codeberg_username" -> "cmudev_username" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Email" -> "cmu.dev Email" ! name = "codeberg_email" -> "cmudev_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Codeberg Name" -> "cmu.dev Name" ! name = "codeberg_name" -> "cmudev_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev ID" -> "Slack ID" ! name = "cmudev_id" -> "slack_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Username" -> "Slack Email" ! name = "cmudev_username" -> "slack_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Email" -> "Slack Name" ! name = "cmudev_email" -> "slack_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "cmu.dev Name" -> "Google ID" ! name = "cmudev_name" -> "google_id" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Slack ID" -> "Google Email" ! name = "slack_id" -> "google_email" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } ! attribute { ! display_name = "Slack Email" -> "Google Name" ! name = "slack_email" -> "google_name" # (5 unchanged attributes hidden) # (1 unchanged block hidden) } - attribute { - annotations = {} -> null - display_name = "Slack Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "slack_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google ID" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_id" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google Email" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_email" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "Google Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "google_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub ID" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_id" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Username" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_username" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Email" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_email" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } - attribute { - annotations = {} -> null - display_name = "GitHub Name" -> null - enabled_when_scope = [] -> null - multi_valued = false -> null - name = "github_name" -> null - required_for_roles = [] -> null - required_for_scopes = [] -> null - permissions { - edit = [ - "admin", ] -> null - view = [ - "admin", ] -> null } } # (21 unchanged blocks hidden) } # keycloak_saml_identity_provider.cmu_saml will be updated in-place ! resource "keycloak_saml_identity_provider" "cmu_saml" { ! authn_context_class_refs = [ - "", ] - authn_context_comparison_type = "exact" -> null ! authn_context_decl_refs = [ - "", ] ! extra_config = { + "allowCreate" = "true" + "attributeConsumingServiceIndex" = "0" + "idpEntityId" = "https://login.cmu.edu/idp/shibboleth" + "metadataDescriptorUrl" = "https://login.cmu.edu/idp/shibboleth" + "useMetadataDescriptorUrl" = "true" } id = "cmu-saml" - login_hint = "false" -> null + provider_id = "saml" - signing_certificate = <<-EOT MIIDLDCCAhSgAwIBAgIJAO1Zt6Sg0xhmMA0GCSqGSIb3DQEBBQUAMBgxFjAUBgNV BAMTDWxvZ2luLmNtdS5lZHUwHhcNMTQwMTIyMTkzMDM2WhcNMzAwNjI5MTkzMDM2 WjAYMRYwFAYDVQQDEw1sb2dpbi5jbXUuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA4yIV5lVs9/7jdmRTi23AINTzGQTrL+p8EXmV1iL48YAZ36T+ xnDpTXt2RDaioI34/P9vHYpSKY6C5gDNyXGQZYTrgJQHQRgJAGTsXshYoDeBboZZ 9ax+7m86rKqmHZAprHALONubY0UtPDEGQKdMeeetAUAOh8kIKpGvKp96I+4pIT6S /p5VtBB80veOK6woqbzU0Qr9q1FbcZfJ6AjG8as9lBa9Si6vc/fGvFrjsJL3+cpv ECuyG/yHp9obdwXLgxlQNPtXNeBgclgiaJJE8zWcZBUxWPboVeuC2Jfv7spIOcCy KPKTGUlobBoANGHqGMqbK+/7YzQ+J/s/4n0tvwIDAQABo3kwdzAdBgNVHQ4EFgQU oZye8kn1Hznd+tCaxJ3elowNIbYwSAYDVR0jBEEwP4AUoZye8kn1Hznd+tCaxJ3e lowNIbahHKQaMBgxFjAUBgNVBAMTDWxvZ2luLmNtdS5lZHWCCQDtWbekoNMYZjAM BgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4IBAQCp51hb/WPVfRtdQNZm6OQj 8I6HwDGWmu5PzUycJAkD/VYd3wCM1zLwd32LMbxbA2ArKWBstErEsUog94zvMBWy AeT3Q5Gyghji0emF0nbZpNjPjE9bXavMbUppXF2/VHbuBtzEMBxIKV53X2et2MMc 9mnNzZN1rofuIB//W9Fg9IWV5PLVbsvEYI98IkJ5t4JP92/V5p497O8jMj6oLhy7 mI4FNx0pQnirAvrQxxgFTwVV5SEm87DBYRblUb4ba0yYVSBQg0EVbIb7QEDxHFWb zt4+NLolAQAMSQW+SJKf9V7+6+4uhMwpJxQwezzn41u9kGTIg9F8/s0IrgsTlAm3 EOT -> null # (32 unchanged attributes hidden) } Plan: 0 to add, 8 to change, 9 to destroy. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.forgejo_idp, │ on config.tf.json line 15, in data.vault_kv_secret_v2.forgejo_idp: │ 15: }, │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 5 more similar warnings elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_ldap_user_federation.cmu, │ on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu: │ 423: "vendor": "AD" │ │ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and 2 more similar warnings elsewhere) ╵ ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/153/keycloak/keycloak-keycloak.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` Plan: 0 to add, 8 to change, 9 to destroy. --- ### 12. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed svalabs/forgejo v1.6.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] forgejo_repository_webhook.infrastructure: Refreshing state... data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.governance: Refreshing state... data.cloudflare_zones.all: Reading... data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_mount.kv: Refreshing state... [id=secret] vault_auth_backend.approle: Refreshing state... [id=approle] vault_policy.devops: Refreshing state... [id=devops] vault_policy.infra: Refreshing state... [id=infra] vault_policy.ci: Refreshing state... [id=ci] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] data.cloudflare_zones.all: Read complete after 1s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 1s cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff warning: ignoring untrusted flake configuration setting 'extra-substituters'. Pass '--accept-flake-config' to trust it warning: ignoring untrusted flake configuration setting 'extra-trusted-public-keys'. Pass '--accept-flake-config' to trust it error (ignored): SQLite database '/var/lib/atlantis/.cache/nix/eval-cache-v6/cf79a1b177110460f763e8659d0ce39ea857f1ef95f16679ca49152d42adeb13.sqlite' is busy Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed keycloak/keycloak v5.9.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.12.0 - Using previously-installed cloudflare/cloudflare v5.25.0 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_zones.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_zones.all: Read complete after 0s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] No changes. Your infrastructure matches the configuration. OpenTofu has compared your real infrastructure against your configuration and found no differences, so no changes are needed. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 17 projects, 1 with changes, 16 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
anish commented 2026-09-22 23:47:06 +00:00
Author
Owner
Copy link

atlantis apply

atlantis apply
scottylabs-bot commented 2026-09-22 23:47:14 +00:00
Owner
Copy link

Ran Apply for 17 projects:

  1. project: posthog dir: . workspace: posthog
  2. project: observability dir: . workspace: observability
  3. project: forgejo dir: . workspace: forgejo
  4. project: ricochet dir: . workspace: ricochet
  5. project: garage-webadmin dir: . workspace: garage-webadmin
  6. project: matrix dir: . workspace: matrix
  7. project: litellm dir: . workspace: litellm
  8. project: kennel dir: . workspace: kennel
  9. project: headscale dir: . workspace: headscale
  10. project: snot dir: . workspace: snot
  11. project: governance dir: . workspace: governance
  12. project: openbao dir: . workspace: openbao
  13. project: atlantis dir: . workspace: atlantis
  14. project: hosts dir: . workspace: hosts
  15. project: keycloak dir: . workspace: keycloak
  16. project: vaultwarden dir: . workspace: vaultwarden
  17. project: webhook dir: . workspace: webhook

1. project: posthog dir: . workspace: posthog

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

2. project: observability dir: . workspace: observability

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

3. project: forgejo dir: . workspace: forgejo

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

4. project: ricochet dir: . workspace: ricochet

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

5. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

garage_webadmin_client_secret = <sensitive>

6. project: matrix dir: . workspace: matrix

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

7. project: litellm dir: . workspace: litellm

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

8. project: kennel dir: . workspace: kennel

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc"

9. project: headscale dir: . workspace: headscale

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

headplane_client_secret = <sensitive>
headscale_client_secret = <sensitive>

10. project: snot dir: . workspace: snot

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

11. project: governance dir: . workspace: governance

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf"

12. project: openbao dir: . workspace: openbao

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

approle_role_ids = {
  "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8"
  "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194"
  "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22"
  "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043"
}

13. project: atlantis dir: . workspace: atlantis

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

14. project: hosts dir: . workspace: hosts

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

15. project: keycloak dir: . workspace: keycloak

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
keycloak_custom_identity_provider_mapper.codeberg_email: Destroying... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef]
keycloak_custom_identity_provider_mapper.github_username: Destroying... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2]
keycloak_custom_identity_provider_mapper.codeberg_name: Destroying... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5]
keycloak_custom_identity_provider_mapper.github_id: Destroying... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4]
keycloak_custom_identity_provider_mapper.github_name: Destroying... [id=0d38db58-87ca-46f4-82e5-23cba653dc12]
keycloak_custom_identity_provider_mapper.codeberg_username: Destroying... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93]
keycloak_custom_identity_provider_mapper.github_email: Destroying... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1]
keycloak_custom_identity_provider_mapper.codeberg_id: Destroying... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59]
keycloak_oidc_identity_provider.cmu: Modifying... [id=cmu]
keycloak_ldap_user_federation.cmu: Modifying... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_custom_identity_provider_mapper.codeberg_email: Destruction complete after 0s
keycloak_custom_identity_provider_mapper.github_email: Destruction complete after 0s
keycloak_custom_identity_provider_mapper.codeberg_id: Destruction complete after 0s
keycloak_custom_identity_provider_mapper.codeberg_username: Destruction complete after 0s
keycloak_saml_identity_provider.cmu_saml: Modifying... [id=cmu-saml]
keycloak_custom_identity_provider_mapper.codeberg_name: Destruction complete after 0s
keycloak_oidc_identity_provider.codeberg: Destroying... [id=codeberg]
keycloak_custom_identity_provider_mapper.github_id: Destruction complete after 0s
keycloak_custom_identity_provider_mapper.github_username: Destruction complete after 0s
keycloak_custom_identity_provider_mapper.github_name: Destruction complete after 0s
keycloak_oidc_identity_provider.cmu: Modifications complete after 0s [id=cmu]
keycloak_custom_identity_provider_mapper.cmu_username: Modifying... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_ldap_user_federation.cmu: Modifications complete after 0s [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_oidc_identity_provider.codeberg: Destruction complete after 0s
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Modifying... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Modifying... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_saml_identity_provider.cmu_saml: Modifications complete after 0s [id=cmu-saml]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Modifying... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_custom_identity_provider_mapper.cmu_username: Modifications complete after 0s [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_realm_user_profile.scottylabs: Modifying... [id=scottylabs]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Modifications complete after 0s [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Modifications complete after 0s [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Modifications complete after 0s [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_realm_user_profile.scottylabs: Modifications complete after 0s [id=scottylabs]
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_ldap_user_federation.cmu,
│   on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu:
│  423:         "vendor": "AD"
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵

Apply complete! Resources: 0 added, 8 changed, 9 destroyed.

16. project: vaultwarden dir: . workspace: vaultwarden

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

17. project: webhook dir: . workspace: webhook

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Apply Summary

17 projects, 17 successful, 0 failed, 0 errored

Ran Apply for 17 projects: 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `webhook` dir: `.` workspace: `webhook` --- ### 1. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 2. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 3. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 4. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 5. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: garage_webadmin_client_secret = <sensitive> ``` </details> --- ### 6. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 7. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 8. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc" ``` </details> --- ### 9. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: headplane_client_secret = <sensitive> headscale_client_secret = <sensitive> ``` </details> --- ### 10. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 11. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf" ``` </details> --- ### 12. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: approle_role_ids = { "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8" "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194" "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22" "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043" } ``` </details> --- ### 13. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 14. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 15. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ keycloak_custom_identity_provider_mapper.codeberg_email: Destroying... [id=2bce1987-97ce-4ee5-adda-0e435c2b49ef] keycloak_custom_identity_provider_mapper.github_username: Destroying... [id=c07573c3-8e48-4084-89cb-3a628e5cdae2] keycloak_custom_identity_provider_mapper.codeberg_name: Destroying... [id=8aa1c7b9-97d8-489f-a2dc-6e427c98fdb5] keycloak_custom_identity_provider_mapper.github_id: Destroying... [id=e7462d44-1d0b-49e6-ae64-fb88031492c4] keycloak_custom_identity_provider_mapper.github_name: Destroying... [id=0d38db58-87ca-46f4-82e5-23cba653dc12] keycloak_custom_identity_provider_mapper.codeberg_username: Destroying... [id=e64e5c0b-d189-414d-b3bd-762d46d30a93] keycloak_custom_identity_provider_mapper.github_email: Destroying... [id=9cdd2173-27de-46ae-bff3-66ee03797ab1] keycloak_custom_identity_provider_mapper.codeberg_id: Destroying... [id=850eadbb-9508-4fac-9d43-d0f5cee2fc59] keycloak_oidc_identity_provider.cmu: Modifying... [id=cmu] keycloak_ldap_user_federation.cmu: Modifying... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_custom_identity_provider_mapper.codeberg_email: Destruction complete after 0s keycloak_custom_identity_provider_mapper.github_email: Destruction complete after 0s keycloak_custom_identity_provider_mapper.codeberg_id: Destruction complete after 0s keycloak_custom_identity_provider_mapper.codeberg_username: Destruction complete after 0s keycloak_saml_identity_provider.cmu_saml: Modifying... [id=cmu-saml] keycloak_custom_identity_provider_mapper.codeberg_name: Destruction complete after 0s keycloak_oidc_identity_provider.codeberg: Destroying... [id=codeberg] keycloak_custom_identity_provider_mapper.github_id: Destruction complete after 0s keycloak_custom_identity_provider_mapper.github_username: Destruction complete after 0s keycloak_custom_identity_provider_mapper.github_name: Destruction complete after 0s keycloak_oidc_identity_provider.cmu: Modifications complete after 0s [id=cmu] keycloak_custom_identity_provider_mapper.cmu_username: Modifying... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_ldap_user_federation.cmu: Modifications complete after 0s [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_oidc_identity_provider.codeberg: Destruction complete after 0s keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Modifying... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Modifying... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_saml_identity_provider.cmu_saml: Modifications complete after 0s [id=cmu-saml] keycloak_custom_identity_provider_mapper.cmu_saml_username: Modifying... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_custom_identity_provider_mapper.cmu_username: Modifications complete after 0s [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_realm_user_profile.scottylabs: Modifying... [id=scottylabs] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Modifications complete after 0s [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Modifications complete after 0s [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_custom_identity_provider_mapper.cmu_saml_username: Modifications complete after 0s [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_realm_user_profile.scottylabs: Modifications complete after 0s [id=scottylabs] ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_ldap_user_federation.cmu, │ on config.tf.json line 423, in resource.keycloak_ldap_user_federation.cmu: │ 423: "vendor": "AD" │ │ This value is derived from data.vault_kv_secret_v2.keycloak_ldap, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ Apply complete! Resources: 0 added, 8 changed, 9 destroyed. ``` </details> --- ### 16. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 17. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/m0cylhlsw2r8kbp54nfrwbfq6apc50va-terraform-provider-forgejo-1.4.2-team-repository.2 │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### Apply Summary 17 projects, 17 successful, 0 failed, 0 errored
anish merged commit 2029e7e355 into main 2026-09-22 23:47:32 +00:00
anish deleted branch cmu-oidc 2026-09-22 23:47:32 +00:00
scottylabs-bot commented 2026-09-22 23:47:33 +00:00
Owner
Copy link

Locks and plans deleted for the projects and workspaces modified in this pull request:

  • dir: . workspaces: atlantis, forgejo, garage-webadmin, governance, headscale, hosts, kennel, keycloak, litellm, matrix, observability, openbao, posthog, ricochet, snot, vaultwarden, webhook
Locks and plans deleted for the projects and workspaces modified in this pull request: - dir: `.` workspaces: `atlantis`, `forgejo`, `garage-webadmin`, `governance`, `headscale`, `hosts`, `kennel`, `keycloak`, `litellm`, `matrix`, `observability`, `openbao`, `posthog`, `ricochet`, `snot`, `vaultwarden`, `webhook`
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
  
needs/docs
Must have documentation written

  
needs/research
Discuss the ideal implementation with the tech lead

  
needs/upstream
Needs a contribution to an upstream project

  
type/bug
Something not working as intended

  
type/external
Lives outside of code

  
type/feature
New functionality

  
type/refactor
Improving existing code

  
urgency
high
 This is currently causing issues

  
urgency
immediate
 This is making a project or feature unusable

  
urgency
low
 This can happen whenever

  
urgency
medium
 This is expected to cause issues soon

No labels
needs/docs
needs/research
needs/upstream
type/bug
type/external
type/feature
type/refactor
urgency
high
urgency
immediate
urgency
low
urgency
medium
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ScottyLabs/infrastructure!153
No description provided.