ScottyLabs/infrastructure
Watch
13
0
Fork
You've already forked infrastructure
 3
Code Issues 41 Pull requests 5 Projects Releases Packages Wiki Activity Actions

feat: let governance read the grouper password #192

Merged
anish merged 1 commit from grouper into main 2026-10-28 03:41:15 +00:00
Conversation 9 Commits 1 Files changed 1 +5
anish commented 2026-10-28 03:36:25 +00:00
Owner
Copy link
No description provided.
feat: let governance read the grouper password
Some checks failed
atlantis/apply: keycloak Apply succeeded.
Details
atlantis/apply: headscale Apply succeeded.
Details
atlantis/apply: matrix Apply succeeded.
Details
atlantis/apply: atlantis Apply succeeded.
Details
atlantis/apply: observability Apply succeeded.
Details
atlantis/apply: mail Apply succeeded.
Details
atlantis/apply: nixbot Apply succeeded.
Details
atlantis/apply: litellm Apply succeeded.
Details
atlantis/apply: occ Apply succeeded.
Details
atlantis/apply: forgejo Apply succeeded.
Details
atlantis/apply: cloudflare-tokens Apply succeeded.
Details
atlantis/apply: governance Apply succeeded.
Details
atlantis/apply: hosts Apply succeeded.
Details
atlantis/apply: garage-webadmin Apply succeeded.
Details
atlantis/apply: kennel Apply succeeded.
Details
atlantis/apply: snot Apply succeeded.
Details
atlantis/apply: vaultwarden Apply succeeded.
Details
atlantis/apply: ricochet Apply succeeded.
Details
atlantis/apply: openbao Apply succeeded.
Details
atlantis/apply: posthog Apply succeeded.
Details
atlantis/apply: webhook Apply succeeded.
Details
atlantis/apply: search-console Apply succeeded.
Details
atlantis/apply 22/22 projects applied successfully.
nixbot/nix-build 0 attributes built
Details
nixbot/nix-eval evaluation succeeded
Details
kennel/build build succeeded
Details
kennel/deploy deployment healthy
CI / check-1 (push) Failing after 59s
Details
CI / build (push) Failing after 1m4s
Details
CI / check (push) Failing after 0s
Details
d43b9f366e
 
Signed-off-by: Anish Pallati <i@anish.land>
scottylabs-bot commented 2026-10-28 03:37:05 +00:00
Owner
Copy link

Kennel Deployments

Torn down at 2026-10-28 03:41:17 UTC.

<!-- kennel-deployment --> ### Kennel Deployments Torn down at 2026-10-28 03:41:17 UTC.
scottylabs-bot commented 2026-10-28 03:37:09 +00:00
Owner
Copy link

Ran Plan for 22 projects:

  1. project: mail dir: . workspace: mail
  2. project: governance dir: . workspace: governance
  3. project: forgejo dir: . workspace: forgejo
  4. project: occ dir: . workspace: occ
  5. project: posthog dir: . workspace: posthog
  6. project: search-console dir: . workspace: search-console
  7. project: snot dir: . workspace: snot
  8. project: openbao dir: . workspace: openbao
  9. project: vaultwarden dir: . workspace: vaultwarden
  10. project: kennel dir: . workspace: kennel
  11. project: ricochet dir: . workspace: ricochet
  12. project: headscale dir: . workspace: headscale
  13. project: hosts dir: . workspace: hosts
  14. project: nixbot dir: . workspace: nixbot
  15. project: litellm dir: . workspace: litellm
  16. project: keycloak dir: . workspace: keycloak
  17. project: observability dir: . workspace: observability
  18. project: matrix dir: . workspace: matrix
  19. project: webhook dir: . workspace: webhook
  20. project: cloudflare-tokens dir: . workspace: cloudflare-tokens
  21. project: garage-webadmin dir: . workspace: garage-webadmin
  22. project: atlantis dir: . workspace: atlantis

1. project: mail dir: . workspace: mail

Plan Failed: This project is currently locked by an unapplied plan from pull #177. To continue, delete the lock from #177 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

2. project: governance dir: . workspace: governance

Plan Failed: This project is currently locked by an unapplied plan from pull #177. To continue, delete the lock from #177 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

3. project: forgejo dir: . workspace: forgejo

Plan Failed: This project is currently locked by an unapplied plan from pull #177. To continue, delete the lock from #177 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

4. project: occ dir: . workspace: occ

Plan Failed: This project is currently locked by an unapplied plan from pull #177. To continue, delete the lock from #177 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

5. project: posthog dir: . workspace: posthog

Plan Failed: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

6. project: search-console dir: . workspace: search-console

Plan Failed: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

7. project: snot dir: . workspace: snot

Plan Failed: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

8. project: openbao dir: . workspace: openbao

Show Output 
copying 1 paths...
copying path '/nix/store/w3pqcwwcdfm2arks5fj1h6f3jgd5xbnk-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_policy.infra: Refreshing state... [id=infra]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_mount.kv: Refreshing state... [id=secret]
vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.shared_read: Refreshing state... [id=shared-read]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_policy.devops: Refreshing state... [id=devops]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200]
data.vault_auth_backend.token: Reading...
vault_identity_oidc_key.terranix: Refreshing state... [id=terranix]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis]
data.vault_auth_backend.token: Read complete after 0s [id=token]
vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03]
vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01]
vault_approle_auth_backend_role.host["www-04"]: Refreshing state... [id=auth/approle/role/www-04]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c]
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p openbao
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p openbao

No changes. Your infrastructure matches the configuration.

9. project: vaultwarden dir: . workspace: vaultwarden

Show Output 
copying 1 paths...
copying path '/nix/store/xc4lxb832rk23ndxfffskk695867g60s-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p vaultwarden
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p vaultwarden

No changes. Your infrastructure matches the configuration.

10. project: kennel dir: . workspace: kennel

Show Output 
copying 1 paths...
copying path '/nix/store/m1298kr42nwxyjqmakh3b50z8v27hqhz-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p kennel
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p kennel

No changes. Your infrastructure matches the configuration.

11. project: ricochet dir: . workspace: ricochet

Show Output 
copying 1 paths...
copying path '/nix/store/rkj9gn6ikjn7yijhqkbbfhxixrpicgid-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p ricochet
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p ricochet

No changes. Your infrastructure matches the configuration.

12. project: headscale dir: . workspace: headscale

Show Output 
copying 1 paths...
copying path '/nix/store/3fhja8ibp72sh1jvkmsirikfhaw43ydb-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p headscale
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p headscale

No changes. Your infrastructure matches the configuration.

13. project: hosts dir: . workspace: hosts

Show Output 
copying 1 paths...
copying path '/nix/store/dnz6n879bndm6w2bzcisid9kaqx5g8dy-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849]
cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4]
cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8]
cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696]
cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e]
cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p hosts
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p hosts

No changes. Your infrastructure matches the configuration.

14. project: nixbot dir: . workspace: nixbot

Show Output 
copying 1 paths...
copying path '/nix/store/9d7kgqmanpw6r2wlkhhcb1mpnzj7j070-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing svalabs/forgejo v1.7.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed svalabs/forgejo v1.7.0 (unauthenticated)
- Using svalabs/forgejo v1.7.0 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.nixbot_forgejo: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
forgejo_team.nixbot: Refreshing state... [name=nixbot]
forgejo_user.nixbot: Refreshing state...
forgejo_team_member.nixbot: Refreshing state...
cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731]
vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot]
vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo]

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p nixbot
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p nixbot

No changes. Your infrastructure matches the configuration.

15. project: litellm dir: . workspace: litellm

Show Output 
copying 1 paths...
copying path '/nix/store/f5waki3bmz7w3wblbwxfq7952iqhkv06-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p litellm
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p litellm

No changes. Your infrastructure matches the configuration.

16. project: keycloak dir: . workspace: keycloak

Show Output 
copying 1 paths...
copying path '/nix/store/jay1f90fvj8p1fghfsrmb3xdvrlf9jcl-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.vault_kv_secret_v2.keycloak_idp: Reading...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.forgejo_idp: Opening...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.master: Reading...
keycloak_realm.scottylabs: Refreshing state... [id=scottylabs]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
data.keycloak_realm.master: Read complete after 0s [id=master]
keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
data.keycloak_role.master_admin: Reading...
keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2]
keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad]
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs]
keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix]
ephemeral.vault_kv_secret_v2.forgejo_idp: Closing...
keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4]
ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.keycloak_idp,
│   on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp:
│   21:       }
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 488, in resource.keycloak_oidc_google_identity_provider.google:
│  488:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵
  • ▶️ To apply this plan, comment: 
    atlantis apply -p keycloak
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak

No changes. Your infrastructure matches the configuration.

17. project: observability dir: . workspace: observability

Show Output 
copying 1 paths...
copying path '/nix/store/ihhx61m8j5zk2bq27mi79fxq8h0l8v0q-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p observability
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p observability

No changes. Your infrastructure matches the configuration.

18. project: matrix dir: . workspace: matrix

Show Output 
copying 1 paths...
copying path '/nix/store/fq4yc5jrszb3bvz1slf7d2idkm9h9v1s-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p matrix
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p matrix

No changes. Your infrastructure matches the configuration.

19. project: webhook dir: . workspace: webhook

Show Output 
copying 1 paths...
copying path '/nix/store/xqxh6acvlfm25snkh8ngp0kdnn5smclf-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing svalabs/forgejo v1.7.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed svalabs/forgejo v1.7.0 (unauthenticated)
- Using svalabs/forgejo v1.7.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.forgejo_repository.kennel: Reading...
data.forgejo_repository.kennel: Read complete after 0s [name=kennel]
forgejo_repository_webhook.kennel_renovate: Refreshing state...
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p webhook
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p webhook

No changes. Your infrastructure matches the configuration.

20. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

Show Output 
copying 1 paths...
copying path '/nix/store/x6n4m6lfj8vnagm1bkwmv840p44dawn2-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.cloudflare_api_token_permission_groups_list.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
data.cloudflare_api_token_permission_groups_list.all: Read complete after 1s
cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012]
cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2]
cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04]
cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71]
cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b]
vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp]
vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel]
vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail]
vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns]
vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts]

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p cloudflare-tokens
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p cloudflare-tokens

No changes. Your infrastructure matches the configuration.

21. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output 
copying 1 paths...
copying path '/nix/store/g02x0bvl888yy46cw51vck1m5q687x6y-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p garage-webadmin
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p garage-webadmin

No changes. Your infrastructure matches the configuration.

22. project: atlantis dir: . workspace: atlantis

Show Output 
copying 1 paths...
copying path '/nix/store/526q6976ja68m7mnr6f99m7kbpgiak7a-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing svalabs/forgejo v1.7.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed svalabs/forgejo v1.7.0 (unauthenticated)
- Using svalabs/forgejo v1.7.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.infrastructure: Refreshing state...
forgejo_repository_webhook.governance: Refreshing state...
data.keycloak_realm.scottylabs: Reading...
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p atlantis
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p atlantis

No changes. Your infrastructure matches the configuration.

Plan Summary

22 projects, 0 with changes, 15 with no changes, 7 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 22 projects: 1. project: `mail` dir: `.` workspace: `mail` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `occ` dir: `.` workspace: `occ` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `search-console` dir: `.` workspace: `search-console` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `atlantis` dir: `.` workspace: `atlantis` --- ### 1. project: `mail` dir: `.` workspace: `mail` **Plan Failed**: This project is currently locked by an unapplied plan from pull #177. To continue, delete the lock from #177 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 2. project: `governance` dir: `.` workspace: `governance` **Plan Failed**: This project is currently locked by an unapplied plan from pull #177. To continue, delete the lock from #177 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 3. project: `forgejo` dir: `.` workspace: `forgejo` **Plan Failed**: This project is currently locked by an unapplied plan from pull #177. To continue, delete the lock from #177 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 4. project: `occ` dir: `.` workspace: `occ` **Plan Failed**: This project is currently locked by an unapplied plan from pull #177. To continue, delete the lock from #177 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 5. project: `posthog` dir: `.` workspace: `posthog` **Plan Failed**: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 6. project: `search-console` dir: `.` workspace: `search-console` **Plan Failed**: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 7. project: `snot` dir: `.` workspace: `snot` **Plan Failed**: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 8. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/w3pqcwwcdfm2arks5fj1h6f3jgd5xbnk-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_auth_backend.approle: Refreshing state... [id=approle] vault_policy.infra: Refreshing state... [id=infra] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_mount.kv: Refreshing state... [id=secret] vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_policy.ci: Refreshing state... [id=ci] vault_policy.shared_read: Refreshing state... [id=shared-read] ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_policy.devops: Refreshing state... [id=devops] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200] data.vault_auth_backend.token: Reading... vault_identity_oidc_key.terranix: Refreshing state... [id=terranix] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis] data.vault_auth_backend.token: Read complete after 0s [id=token] vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03] vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01] vault_approle_auth_backend_role.host["www-04"]: Refreshing state... [id=auth/approle/role/www-04] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c] cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/xc4lxb832rk23ndxfffskk695867g60s-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/m1298kr42nwxyjqmakh3b50z8v27hqhz-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/rkj9gn6ikjn7yijhqkbbfhxixrpicgid-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/3fhja8ibp72sh1jvkmsirikfhaw43ydb-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/dnz6n879bndm6w2bzcisid9kaqx5g8dy-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849] cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4] cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8] cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696] cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e] cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/9d7kgqmanpw6r2wlkhhcb1mpnzj7j070-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing svalabs/forgejo v1.7.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed svalabs/forgejo v1.7.0 (unauthenticated) - Using svalabs/forgejo v1.7.0 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.nixbot_forgejo: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s forgejo_team.nixbot: Refreshing state... [name=nixbot] forgejo_user.nixbot: Refreshing state... forgejo_team_member.nixbot: Refreshing state... cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731] vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot] vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p nixbot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fnixbot%252Fnixbot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p nixbot ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/f5waki3bmz7w3wblbwxfq7952iqhkv06-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s random_password.litellm_master_key: Refreshing state... [id=none] random_password.litellm_salt_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/jay1f90fvj8p1fghfsrmb3xdvrlf9jcl-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.vault_kv_secret_v2.keycloak_idp: Reading... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.forgejo_idp: Opening... ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.master: Reading... keycloak_realm.scottylabs: Refreshing state... [id=scottylabs] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] data.keycloak_realm.master: Read complete after 0s [id=master] keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] data.keycloak_role.master_admin: Reading... keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2] keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad] cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs] keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix] ephemeral.vault_kv_secret_v2.forgejo_idp: Closing... keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4] ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing... ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.keycloak_idp, │ on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp: │ 21: } │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 488, in resource.keycloak_oidc_google_identity_provider.google: │ 488: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/ihhx61m8j5zk2bq27mi79fxq8h0l8v0q-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 18. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/fq4yc5jrszb3bvz1slf7d2idkm9h9v1s-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 19. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/xqxh6acvlfm25snkh8ngp0kdnn5smclf-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing svalabs/forgejo v1.7.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed svalabs/forgejo v1.7.0 (unauthenticated) - Using svalabs/forgejo v1.7.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.forgejo_repository.kennel: Reading... data.forgejo_repository.kennel: Read complete after 0s [name=kennel] forgejo_repository_webhook.kennel_renovate: Refreshing state... cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 20. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/x6n4m6lfj8vnagm1bkwmv840p44dawn2-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.cloudflare_api_token_permission_groups_list.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s data.cloudflare_api_token_permission_groups_list.all: Read complete after 1s cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012] cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2] cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04] cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71] cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b] vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp] vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel] vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail] vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns] vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p cloudflare-tokens ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fcloudflare-tokens%252Fcloudflare-tokens) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p cloudflare-tokens ``` No changes. Your infrastructure matches the configuration. --- ### 21. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/g02x0bvl888yy46cw51vck1m5q687x6y-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 22. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/526q6976ja68m7mnr6f99m7kbpgiak7a-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing svalabs/forgejo v1.7.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed svalabs/forgejo v1.7.0 (unauthenticated) - Using svalabs/forgejo v1.7.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.infrastructure: Refreshing state... forgejo_repository_webhook.governance: Refreshing state... data.keycloak_realm.scottylabs: Reading... cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 22 projects, 0 with changes, 15 with no changes, 7 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
anish commented 2026-10-28 03:38:21 +00:00
Author
Owner
Copy link

atlantis plan

atlantis plan
scottylabs-bot commented 2026-10-28 03:38:39 +00:00
Owner
Copy link

Ran Plan for 22 projects:

  1. project: litellm dir: . workspace: litellm
  2. project: observability dir: . workspace: observability
  3. project: posthog dir: . workspace: posthog
  4. project: hosts dir: . workspace: hosts
  5. project: search-console dir: . workspace: search-console
  6. project: headscale dir: . workspace: headscale
  7. project: snot dir: . workspace: snot
  8. project: cloudflare-tokens dir: . workspace: cloudflare-tokens
  9. project: keycloak dir: . workspace: keycloak
  10. project: kennel dir: . workspace: kennel
  11. project: nixbot dir: . workspace: nixbot
  12. project: atlantis dir: . workspace: atlantis
  13. project: occ dir: . workspace: occ
  14. project: forgejo dir: . workspace: forgejo
  15. project: mail dir: . workspace: mail
  16. project: garage-webadmin dir: . workspace: garage-webadmin
  17. project: governance dir: . workspace: governance
  18. project: matrix dir: . workspace: matrix
  19. project: ricochet dir: . workspace: ricochet
  20. project: openbao dir: . workspace: openbao
  21. project: webhook dir: . workspace: webhook
  22. project: vaultwarden dir: . workspace: vaultwarden

1. project: litellm dir: . workspace: litellm

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p litellm
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p litellm

No changes. Your infrastructure matches the configuration.

2. project: observability dir: . workspace: observability

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p observability
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p observability

No changes. Your infrastructure matches the configuration.

3. project: posthog dir: . workspace: posthog

Plan Failed: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

4. project: hosts dir: . workspace: hosts

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4]
cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8]
cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e]
cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44]
cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
data.keycloak_realm.scottylabs: Reading...
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p hosts
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p hosts

No changes. Your infrastructure matches the configuration.

5. project: search-console dir: . workspace: search-console

Plan Failed: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

6. project: headscale dir: . workspace: headscale

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p headscale
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p headscale

No changes. Your infrastructure matches the configuration.

7. project: snot dir: . workspace: snot

Plan Failed: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request.

Once the lock is released, comment atlantis plan here to re-plan.

8. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_api_token_permission_groups_list.all: Reading...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
data.cloudflare_api_token_permission_groups_list.all: Read complete after 1s
cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04]
cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71]
cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b]
cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2]
cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012]
vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns]
vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp]
vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel]
vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts]
vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail]

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p cloudflare-tokens
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p cloudflare-tokens

No changes. Your infrastructure matches the configuration.

9. project: keycloak dir: . workspace: keycloak

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.forgejo_idp: Opening...
data.vault_kv_secret_v2.keycloak_idp: Reading...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.master: Reading...
keycloak_realm.scottylabs: Refreshing state... [id=scottylabs]
data.keycloak_realm.master: Read complete after 0s [id=master]
keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4]
data.keycloak_role.master_admin: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad]
keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720]
vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs]
keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea]
ephemeral.vault_kv_secret_v2.forgejo_idp: Closing...
ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s
keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.keycloak_idp,
│   on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp:
│   21:       }
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 488, in resource.keycloak_oidc_google_identity_provider.google:
│  488:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵
  • ▶️ To apply this plan, comment: 
    atlantis apply -p keycloak
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak

No changes. Your infrastructure matches the configuration.

10. project: kennel dir: . workspace: kennel

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_policy.kennel: Refreshing state... [id=kennel]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p kennel
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p kennel

No changes. Your infrastructure matches the configuration.

11. project: nixbot dir: . workspace: nixbot

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
random_password.nixbot_forgejo: Refreshing state... [id=none]
forgejo_user.nixbot: Refreshing state...
forgejo_team.nixbot: Refreshing state... [name=nixbot]
forgejo_team_member.nixbot: Refreshing state...
cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731]
vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot]
vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo]

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p nixbot
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p nixbot

No changes. Your infrastructure matches the configuration.

12. project: atlantis dir: . workspace: atlantis

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.governance: Refreshing state...
forgejo_repository_webhook.infrastructure: Refreshing state...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p atlantis
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p atlantis

No changes. Your infrastructure matches the configuration.

13. project: occ dir: . workspace: occ

Show Output 
Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p occ
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p occ

No changes. Your infrastructure matches the configuration.

14. project: forgejo dir: . workspace: forgejo

Show Output 
Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p forgejo
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p forgejo

No changes. Your infrastructure matches the configuration.

15. project: mail dir: . workspace: mail

Show Output 
Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 1s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 1s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd]
cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677]
cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871]
cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c]
cloudflare_dns_record.this["scottylabs-org-dmarc"]: Refreshing state... [id=ea71a2845b01a4734db1a0f6233eb1d7]
cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a]
cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50]
cloudflare_dns_record.this["cmu-dev-dmarc"]: Refreshing state... [id=0d3fd67366a456cee1c6d14be0dd6b6f]
cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a]
cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p mail
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p mail

No changes. Your infrastructure matches the configuration.

16. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p garage-webadmin
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p garage-webadmin

No changes. Your infrastructure matches the configuration.

17. project: governance dir: . workspace: governance

Show Output 
copying 1 paths...
copying path '/nix/store/8crhx37yybvl2kg72nwhz3fzwnfph7s1-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_policy.governance: Refreshing state... [id=governance]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
data.keycloak_openid_client.realm_management: Read complete after 1s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # vault_policy.governance will be updated in-place
!   resource "vault_policy" "governance" {
        id     = "governance"
        name   = "governance"
!       policy = <<-EOT
            # Manage vault policies (project dev/prod policies)
            path "sys/policies/acl/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            # Manage identity groups and aliases
            path "identity/group" {
              capabilities = ["create", "update"]
            }
            
            path "identity/group/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            path "identity/group-alias" {
              capabilities = ["create", "update"]
            }
            
            path "identity/group-alias/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            # Manage CI identity entities and aliases
            path "identity/entity" {
              capabilities = ["create", "update"]
            }
            
            path "identity/entity/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            path "identity/entity-alias" {
              capabilities = ["create", "update"]
            }
            
            path "identity/entity-alias/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            path "identity/lookup/entity" {
              capabilities = ["update"]
            }
            
            # Read auth backend config (for mount accessor lookup)
            path "sys/auth" {
              capabilities = ["read"]
            }
            
            path "sys/mounts/auth/*" {
              capabilities = ["read"]
            }
            
            # Allow vault provider to create child tokens
            path "auth/token/create" {
              capabilities = ["create", "update"]
            }
            path "secret/data/secretspec/+/+/SENTRY_DSN" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SENTRY_DSN" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/POSTHOG_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/POSTHOG_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/POSTHOG_HOST" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/POSTHOG_HOST" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/OIDC_CLIENT_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/OIDC_CLIENT_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/OIDC_CLIENT_SECRET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/OIDC_CLIENT_SECRET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/KEYCLOAK_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/KEYCLOAK_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/KEYCLOAK_REALM" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/KEYCLOAK_REALM" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/OAUTH_RELAY_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/OAUTH_RELAY_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/PROJECT_GROUP" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/PROJECT_GROUP" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/PROJECT_ADMIN_GROUP" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/PROJECT_ADMIN_GROUP" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_SECRET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_SECRET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/LITELLM_API_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/LITELLM_API_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/LITELLM_BASE_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/LITELLM_BASE_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_S3_ENDPOINT" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_S3_ENDPOINT" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_S3_BUCKET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_S3_BUCKET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_ACCESS_KEY_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_ACCESS_KEY_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_SECRET_ACCESS_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_SECRET_ACCESS_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_PUBLIC_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_PUBLIC_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/EMAIL_FROM" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/EMAIL_FROM" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/SMTP_HOST" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SMTP_HOST" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/SMTP_PORT" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SMTP_PORT" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/SMTP_USERNAME" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SMTP_USERNAME" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/SMTP_PASSWORD" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SMTP_PASSWORD" {
              capabilities = ["create", "read", "update", "delete"]
            }
            # LiteLLM master key for governance to call the management API
            path "secret/data/infra/litellm-master-key" {
              capabilities = ["read"]
            }
            
            # Cloudflare token for governance's email feature
            path "secret/data/infra/cloudflare-governance-email" {
              capabilities = ["read"]
            }
            
+           # Grouper password for governance's grouper axis
+           path "secret/data/infra/grouper" {
+             capabilities = ["read"]
+           }
+           
            # Read shared CI cache credentials (cachix, sccache)
            path "secret/data/shared/*" {
              capabilities = ["read"]
            }
        EOT
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/192/governance/governance-governance.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/192/governance/governance-governance.tfplan"
  • ▶️ To apply this plan, comment: 
    atlantis apply -p governance
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p governance

Plan: 0 to add, 1 to change, 0 to destroy.

18. project: matrix dir: . workspace: matrix

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p matrix
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p matrix

No changes. Your infrastructure matches the configuration.

19. project: ricochet dir: . workspace: ricochet

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p ricochet
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p ricochet

No changes. Your infrastructure matches the configuration.

20. project: openbao dir: . workspace: openbao

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_identity_oidc_key.terranix: Refreshing state... [id=terranix]
vault_mount.kv: Refreshing state... [id=secret]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_auth_backend.approle: Refreshing state... [id=approle]
data.vault_auth_backend.token: Reading...
vault_policy.shared_read: Refreshing state... [id=shared-read]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.vault_auth_backend.token: Read complete after 0s [id=token]
vault_policy.devops: Refreshing state... [id=devops]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200]
vault_policy.infra: Refreshing state... [id=infra]
vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00]
vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_approle_auth_backend_role.host["www-04"]: Refreshing state... [id=auth/approle/role/www-04]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c]
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p openbao
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p openbao

No changes. Your infrastructure matches the configuration.

21. project: webhook dir: . workspace: webhook

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.forgejo_repository.kennel: Reading...
data.forgejo_repository.kennel: Read complete after 0s [name=kennel]
forgejo_repository_webhook.kennel_renovate: Refreshing state...
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p webhook
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p webhook

No changes. Your infrastructure matches the configuration.

22. project: vaultwarden dir: . workspace: vaultwarden

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p vaultwarden
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p vaultwarden

No changes. Your infrastructure matches the configuration.

Plan Summary

22 projects, 1 with changes, 18 with no changes, 3 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 22 projects: 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `search-console` dir: `.` workspace: `search-console` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `occ` dir: `.` workspace: `occ` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` --- ### 1. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.litellm_salt_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `posthog` dir: `.` workspace: `posthog` **Plan Failed**: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 4. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4] cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8] cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e] cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44] cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] data.keycloak_realm.scottylabs: Reading... cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `search-console` dir: `.` workspace: `search-console` **Plan Failed**: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 6. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `snot` dir: `.` workspace: `snot` **Plan Failed**: This project is currently locked by an unapplied plan from pull #175. To continue, delete the lock from #175 or apply that plan and merge the pull request. Once the lock is released, comment `atlantis plan` here to re-plan. --- ### 8. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_api_token_permission_groups_list.all: Reading... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s data.cloudflare_api_token_permission_groups_list.all: Read complete after 1s cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04] cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71] cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b] cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2] cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012] vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns] vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp] vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel] vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts] vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p cloudflare-tokens ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fcloudflare-tokens%252Fcloudflare-tokens) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p cloudflare-tokens ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.forgejo_idp: Opening... data.vault_kv_secret_v2.keycloak_idp: Reading... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.master: Reading... keycloak_realm.scottylabs: Refreshing state... [id=scottylabs] data.keycloak_realm.master: Read complete after 0s [id=master] keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4] data.keycloak_role.master_admin: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad] keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720] vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing... ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs] keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea] ephemeral.vault_kv_secret_v2.forgejo_idp: Closing... ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.keycloak_idp, │ on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp: │ 21: } │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 488, in resource.keycloak_oidc_google_identity_provider.google: │ 488: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_policy.kennel: Refreshing state... [id=kennel] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s random_password.nixbot_forgejo: Refreshing state... [id=none] forgejo_user.nixbot: Refreshing state... forgejo_team.nixbot: Refreshing state... [name=nixbot] forgejo_team_member.nixbot: Refreshing state... cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731] vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot] vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p nixbot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fnixbot%252Fnixbot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p nixbot ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.governance: Refreshing state... forgejo_repository_webhook.infrastructure: Refreshing state... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `occ` dir: `.` workspace: `occ` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p occ ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Focc%252Focc) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p occ ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `mail` dir: `.` workspace: `mail` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 1s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 1s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd] cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677] cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871] cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c] cloudflare_dns_record.this["scottylabs-org-dmarc"]: Refreshing state... [id=ea71a2845b01a4734db1a0f6233eb1d7] cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a] cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50] cloudflare_dns_record.this["cmu-dev-dmarc"]: Refreshing state... [id=0d3fd67366a456cee1c6d14be0dd6b6f] cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a] cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p mail ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmail%252Fmail) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p mail ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.garage_webadmin_jwt: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/8crhx37yybvl2kg72nwhz3fzwnfph7s1-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_policy.governance: Refreshing state... [id=governance] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... data.keycloak_openid_client.realm_management: Read complete after 1s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # vault_policy.governance will be updated in-place ! resource "vault_policy" "governance" { id = "governance" name = "governance" ! policy = <<-EOT # Manage vault policies (project dev/prod policies) path "sys/policies/acl/*" { capabilities = ["create", "read", "update", "delete", "list"] } # Manage identity groups and aliases path "identity/group" { capabilities = ["create", "update"] } path "identity/group/*" { capabilities = ["create", "read", "update", "delete", "list"] } path "identity/group-alias" { capabilities = ["create", "update"] } path "identity/group-alias/*" { capabilities = ["create", "read", "update", "delete", "list"] } # Manage CI identity entities and aliases path "identity/entity" { capabilities = ["create", "update"] } path "identity/entity/*" { capabilities = ["create", "read", "update", "delete", "list"] } path "identity/entity-alias" { capabilities = ["create", "update"] } path "identity/entity-alias/*" { capabilities = ["create", "read", "update", "delete", "list"] } path "identity/lookup/entity" { capabilities = ["update"] } # Read auth backend config (for mount accessor lookup) path "sys/auth" { capabilities = ["read"] } path "sys/mounts/auth/*" { capabilities = ["read"] } # Allow vault provider to create child tokens path "auth/token/create" { capabilities = ["create", "update"] } path "secret/data/secretspec/+/+/SENTRY_DSN" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SENTRY_DSN" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/POSTHOG_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/POSTHOG_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/POSTHOG_HOST" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/POSTHOG_HOST" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/OIDC_CLIENT_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/OIDC_CLIENT_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/OIDC_CLIENT_SECRET" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/OIDC_CLIENT_SECRET" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/KEYCLOAK_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/KEYCLOAK_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/KEYCLOAK_REALM" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/KEYCLOAK_REALM" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/OAUTH_RELAY_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/OAUTH_RELAY_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/PROJECT_GROUP" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/PROJECT_GROUP" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/PROJECT_ADMIN_GROUP" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/PROJECT_ADMIN_GROUP" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_SECRET" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_SECRET" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/LITELLM_API_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/LITELLM_API_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/LITELLM_BASE_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/LITELLM_BASE_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_S3_ENDPOINT" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_S3_ENDPOINT" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_S3_BUCKET" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_S3_BUCKET" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_ACCESS_KEY_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_ACCESS_KEY_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_SECRET_ACCESS_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_SECRET_ACCESS_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_PUBLIC_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_PUBLIC_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/EMAIL_FROM" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/EMAIL_FROM" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/SMTP_HOST" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SMTP_HOST" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/SMTP_PORT" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SMTP_PORT" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/SMTP_USERNAME" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SMTP_USERNAME" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/SMTP_PASSWORD" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SMTP_PASSWORD" { capabilities = ["create", "read", "update", "delete"] } # LiteLLM master key for governance to call the management API path "secret/data/infra/litellm-master-key" { capabilities = ["read"] } # Cloudflare token for governance's email feature path "secret/data/infra/cloudflare-governance-email" { capabilities = ["read"] } + # Grouper password for governance's grouper axis + path "secret/data/infra/grouper" { + capabilities = ["read"] + } + # Read shared CI cache credentials (cachix, sccache) path "secret/data/shared/*" { capabilities = ["read"] } EOT } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/192/governance/governance-governance.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/192/governance/governance-governance.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 18. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 19. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 20. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.ci: Refreshing state... [id=ci] vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_identity_oidc_key.terranix: Refreshing state... [id=terranix] vault_mount.kv: Refreshing state... [id=secret] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_auth_backend.approle: Refreshing state... [id=approle] data.vault_auth_backend.token: Reading... vault_policy.shared_read: Refreshing state... [id=shared-read] ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.vault_auth_backend.token: Read complete after 0s [id=token] vault_policy.devops: Refreshing state... [id=devops] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200] vault_policy.infra: Refreshing state... [id=infra] vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00] vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_approle_auth_backend_role.host["www-04"]: Refreshing state... [id=auth/approle/role/www-04] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c] cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 21. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.forgejo_repository.kennel: Reading... data.forgejo_repository.kennel: Read complete after 0s [name=kennel] forgejo_repository_webhook.kennel_renovate: Refreshing state... cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 22. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.keycloak_realm.scottylabs: Reading... cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 22 projects, 1 with changes, 18 with no changes, 3 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
anish commented 2026-10-28 03:40:24 +00:00
Author
Owner
Copy link

atlantis plan

atlantis plan
scottylabs-bot commented 2026-10-28 03:40:48 +00:00
Owner
Copy link

Ran Plan for 22 projects:

  1. project: matrix dir: . workspace: matrix
  2. project: hosts dir: . workspace: hosts
  3. project: litellm dir: . workspace: litellm
  4. project: occ dir: . workspace: occ
  5. project: governance dir: . workspace: governance
  6. project: cloudflare-tokens dir: . workspace: cloudflare-tokens
  7. project: kennel dir: . workspace: kennel
  8. project: headscale dir: . workspace: headscale
  9. project: atlantis dir: . workspace: atlantis
  10. project: garage-webadmin dir: . workspace: garage-webadmin
  11. project: mail dir: . workspace: mail
  12. project: observability dir: . workspace: observability
  13. project: forgejo dir: . workspace: forgejo
  14. project: keycloak dir: . workspace: keycloak
  15. project: nixbot dir: . workspace: nixbot
  16. project: ricochet dir: . workspace: ricochet
  17. project: vaultwarden dir: . workspace: vaultwarden
  18. project: openbao dir: . workspace: openbao
  19. project: webhook dir: . workspace: webhook
  20. project: posthog dir: . workspace: posthog
  21. project: snot dir: . workspace: snot
  22. project: search-console dir: . workspace: search-console

1. project: matrix dir: . workspace: matrix

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p matrix
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p matrix

No changes. Your infrastructure matches the configuration.

2. project: hosts dir: . workspace: hosts

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4]
cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849]
cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8]
cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e]
cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696]
cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p hosts
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p hosts

No changes. Your infrastructure matches the configuration.

3. project: litellm dir: . workspace: litellm

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p litellm
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p litellm

No changes. Your infrastructure matches the configuration.

4. project: occ dir: . workspace: occ

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p occ
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p occ

No changes. Your infrastructure matches the configuration.

5. project: governance dir: . workspace: governance

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_policy.governance: Refreshing state... [id=governance]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # vault_policy.governance will be updated in-place
!   resource "vault_policy" "governance" {
        id     = "governance"
        name   = "governance"
!       policy = <<-EOT
            # Manage vault policies (project dev/prod policies)
            path "sys/policies/acl/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            # Manage identity groups and aliases
            path "identity/group" {
              capabilities = ["create", "update"]
            }
            
            path "identity/group/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            path "identity/group-alias" {
              capabilities = ["create", "update"]
            }
            
            path "identity/group-alias/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            # Manage CI identity entities and aliases
            path "identity/entity" {
              capabilities = ["create", "update"]
            }
            
            path "identity/entity/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            path "identity/entity-alias" {
              capabilities = ["create", "update"]
            }
            
            path "identity/entity-alias/*" {
              capabilities = ["create", "read", "update", "delete", "list"]
            }
            
            path "identity/lookup/entity" {
              capabilities = ["update"]
            }
            
            # Read auth backend config (for mount accessor lookup)
            path "sys/auth" {
              capabilities = ["read"]
            }
            
            path "sys/mounts/auth/*" {
              capabilities = ["read"]
            }
            
            # Allow vault provider to create child tokens
            path "auth/token/create" {
              capabilities = ["create", "update"]
            }
            path "secret/data/secretspec/+/+/SENTRY_DSN" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SENTRY_DSN" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/POSTHOG_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/POSTHOG_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/POSTHOG_HOST" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/POSTHOG_HOST" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/OIDC_CLIENT_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/OIDC_CLIENT_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/OIDC_CLIENT_SECRET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/OIDC_CLIENT_SECRET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/KEYCLOAK_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/KEYCLOAK_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/KEYCLOAK_REALM" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/KEYCLOAK_REALM" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/OAUTH_RELAY_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/OAUTH_RELAY_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/PROJECT_GROUP" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/PROJECT_GROUP" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/PROJECT_ADMIN_GROUP" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/PROJECT_ADMIN_GROUP" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_SECRET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_SECRET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/LITELLM_API_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/LITELLM_API_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/LITELLM_BASE_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/LITELLM_BASE_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_S3_ENDPOINT" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_S3_ENDPOINT" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_S3_BUCKET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_S3_BUCKET" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_ACCESS_KEY_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_ACCESS_KEY_ID" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_SECRET_ACCESS_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_SECRET_ACCESS_KEY" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/CDN_PUBLIC_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/CDN_PUBLIC_URL" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/EMAIL_FROM" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/EMAIL_FROM" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/SMTP_HOST" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SMTP_HOST" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/SMTP_PORT" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SMTP_PORT" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/SMTP_USERNAME" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SMTP_USERNAME" {
              capabilities = ["create", "read", "update", "delete"]
            }
            path "secret/data/secretspec/+/+/SMTP_PASSWORD" {
              capabilities = ["create", "read", "update", "delete"]
            }
            
            path "secret/metadata/secretspec/+/+/SMTP_PASSWORD" {
              capabilities = ["create", "read", "update", "delete"]
            }
            # LiteLLM master key for governance to call the management API
            path "secret/data/infra/litellm-master-key" {
              capabilities = ["read"]
            }
            
            # Cloudflare token for governance's email feature
            path "secret/data/infra/cloudflare-governance-email" {
              capabilities = ["read"]
            }
            
+           # Grouper password for governance's grouper axis
+           path "secret/data/infra/grouper" {
+             capabilities = ["read"]
+           }
+           
            # Read shared CI cache credentials (cachix, sccache)
            path "secret/data/shared/*" {
              capabilities = ["read"]
            }
        EOT
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/192/governance/governance-governance.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/192/governance/governance-governance.tfplan"
  • ▶️ To apply this plan, comment: 
    atlantis apply -p governance
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p governance

Plan: 0 to add, 1 to change, 0 to destroy.

6. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.cloudflare_api_token_permission_groups_list.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
data.cloudflare_api_token_permission_groups_list.all: Read complete after 1s
cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71]
cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04]
cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012]
cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b]
cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2]
vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel]
vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp]
vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts]
vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns]
vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail]

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p cloudflare-tokens
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p cloudflare-tokens

No changes. Your infrastructure matches the configuration.

7. project: kennel dir: . workspace: kennel

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p kennel
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p kennel

No changes. Your infrastructure matches the configuration.

8. project: headscale dir: . workspace: headscale

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 1s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 1s
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p headscale
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p headscale

No changes. Your infrastructure matches the configuration.

9. project: atlantis dir: . workspace: atlantis

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Reading...
data.forgejo_repository.governance: Read complete after 0s [name=governance]
forgejo_repository_webhook.governance: Refreshing state...
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
forgejo_repository_webhook.infrastructure: Refreshing state...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p atlantis
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p atlantis

No changes. Your infrastructure matches the configuration.

10. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.keycloak_realm.scottylabs: Reading...
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p garage-webadmin
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p garage-webadmin

No changes. Your infrastructure matches the configuration.

11. project: mail dir: . workspace: mail

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871]
cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c]
cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50]
cloudflare_dns_record.this["cmu-dev-dmarc"]: Refreshing state... [id=0d3fd67366a456cee1c6d14be0dd6b6f]
cloudflare_dns_record.this["scottylabs-org-dmarc"]: Refreshing state... [id=ea71a2845b01a4734db1a0f6233eb1d7]
cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a]
cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d]
cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a]
cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd]
cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p mail
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p mail

No changes. Your infrastructure matches the configuration.

12. project: observability dir: . workspace: observability

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p observability
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p observability

No changes. Your infrastructure matches the configuration.

13. project: forgejo dir: . workspace: forgejo

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p forgejo
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p forgejo

No changes. Your infrastructure matches the configuration.

14. project: keycloak dir: . workspace: keycloak

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.vault_kv_secret_v2.keycloak_idp: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening...
ephemeral.vault_kv_secret_v2.forgejo_idp: Opening...
ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.master: Reading...
keycloak_realm.scottylabs: Refreshing state... [id=scottylabs]
data.keycloak_realm.master: Read complete after 0s [id=master]
data.keycloak_role.master_admin: Reading...
keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad]
keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea]
keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs]
ephemeral.vault_kv_secret_v2.forgejo_idp: Closing...
ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s
ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s
keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.keycloak_idp,
│   on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp:
│   21:       }
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 488, in resource.keycloak_oidc_google_identity_provider.google:
│  488:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵
  • ▶️ To apply this plan, comment: 
    atlantis apply -p keycloak
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p keycloak

No changes. Your infrastructure matches the configuration.

15. project: nixbot dir: . workspace: nixbot

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.nixbot_forgejo: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
forgejo_team.nixbot: Refreshing state... [name=nixbot]
forgejo_user.nixbot: Refreshing state...
forgejo_team_member.nixbot: Refreshing state...
cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot]
vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo]

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p nixbot
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p nixbot

No changes. Your infrastructure matches the configuration.

16. project: ricochet dir: . workspace: ricochet

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p ricochet
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p ricochet

No changes. Your infrastructure matches the configuration.

17. project: vaultwarden dir: . workspace: vaultwarden

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p vaultwarden
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p vaultwarden

No changes. Your infrastructure matches the configuration.

18. project: openbao dir: . workspace: openbao

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_policy.devops: Refreshing state... [id=devops]
vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_identity_oidc_key.terranix: Refreshing state... [id=terranix]
vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200]
vault_auth_backend.approle: Refreshing state... [id=approle]
ephemeral.vault_kv_secret_v2.keycloak: Opening...
vault_policy.shared_read: Refreshing state... [id=shared-read]
data.vault_auth_backend.token: Reading...
vault_mount.kv: Refreshing state... [id=secret]
data.vault_auth_backend.token: Read complete after 0s [id=token]
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
vault_policy.infra: Refreshing state... [id=infra]
vault_policy.ci: Refreshing state... [id=ci]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis]
vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_approle_auth_backend_role.host["www-04"]: Refreshing state... [id=auth/approle/role/www-04]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01]
vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p openbao
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p openbao

No changes. Your infrastructure matches the configuration.

19. project: webhook dir: . workspace: webhook

Show Output 
Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.forgejo_repository.kennel: Reading...
data.forgejo_repository.kennel: Read complete after 0s [name=kennel]
forgejo_repository_webhook.kennel_renovate: Refreshing state...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p webhook
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p webhook

No changes. Your infrastructure matches the configuration.

20. project: posthog dir: . workspace: posthog

Show Output 
Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding posthog/posthog versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing posthog/posthog v1.0.27 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed posthog/posthog v1.0.27 (unauthenticated)
- Using posthog/posthog v1.0.27 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - posthog/posthog
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e]
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p posthog
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p posthog

No changes. Your infrastructure matches the configuration.

21. project: snot dir: . workspace: snot

Show Output 
Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]
data.keycloak_realm.scottylabs: Reading...
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p snot
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p snot

No changes. Your infrastructure matches the configuration.

22. project: search-console dir: . workspace: search-console

Show Output 
copying 2 paths...
copying path '/nix/store/6p1870a8swj71hw603f1biw7is8pkdj3-openbao-google-token.drv' to 'daemon'...
copying path '/nix/store/x8x9ayg50n4wl80k4j60vlzbzfj3j3cw-config.tf.json.drv' to 'daemon'...
copying path '/nix/store/aa7i752awnz9k2fkm840fixm62kq504a-ShellCheck-0.11.0' from 'http://localhost:5000'...
copying 0 paths...
copying 1 paths...
copying path '/nix/store/z5gmh2f0yn773f84r1x84czcng97ac6x-openbao-google-token' from 'ssh-ng://eu.nixbuild.net'...
✔  config.tf.json.drv (0s)
✔  openbao-google-token (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/google versions matching "~> 7.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/google v7.46.2 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory
- Installed hashicorp/google v7.46.2 (unauthenticated)
- Using hashicorp/google v7.46.2 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/google
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.keycloak: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s
data.google_site_verification_token.tartanhacks_com: Reading...
data.google_site_verification_token.cmu_homes: Reading...
data.google_site_verification_token.scottylabs_org: Reading...
data.google_site_verification_token.cmuhousing_com: Reading...
data.google_site_verification_token.tartan_vote: Reading...
data.google_site_verification_token.scottygo_com: Reading...
data.google_site_verification_token.cmueats_com: Reading...
data.google_site_verification_token.scotty_lol: Reading...
data.google_site_verification_token.cmuinsta_com: Reading...
data.google_site_verification_token.cmu_courses: Reading...
data.google_site_verification_token.cmuhousing_com: Read complete after 1s [id=cmuhousing.com]
data.google_site_verification_token.tartanhacks_com: Read complete after 1s [id=tartanhacks.com]
data.google_site_verification_token.cmu_homes: Read complete after 1s [id=cmu.homes]
data.google_site_verification_token.cmumaps_com: Reading...
data.google_site_verification_token.collegecart_org: Reading...
data.google_site_verification_token.tartan_vote: Read complete after 1s [id=tartan.vote]
data.google_site_verification_token.cmugpt_com: Reading...
data.google_site_verification_token.cmucourses_com: Reading...
data.google_site_verification_token.scottylabs_org: Read complete after 1s [id=scottylabs.org]
data.google_site_verification_token.rent-pgh_com: Reading...
data.google_site_verification_token.cmueats_com: Read complete after 1s [id=cmueats.com]
data.google_site_verification_token.cmuinsta_com: Read complete after 1s [id=cmuinsta.com]
data.google_site_verification_token.cmu_lol: Reading...
data.google_site_verification_token.andrew-inbox_com: Reading...
data.google_site_verification_token.cmu_courses: Read complete after 0s [id=cmu.courses]
data.google_site_verification_token.occ_build: Reading...
data.google_site_verification_token.scotty_lol: Read complete after 1s [id=scotty.lol]
data.google_site_verification_token.terrier_build: Reading...
data.google_site_verification_token.cmumaps_com: Read complete after 0s [id=cmumaps.com]
data.google_site_verification_token.tartanhacks_org: Reading...
data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com]
data.google_site_verification_token.cmu_guide: Reading...
data.google_site_verification_token.terrier_build: Read complete after 0s [id=terrier.build]
data.google_site_verification_token.occ_build: Read complete after 0s [id=occ.build]
data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org]
data.google_site_verification_token.roomies_live: Reading...
data.google_site_verification_token.cmucal_com: Reading...
data.google_site_verification_token.cmubulletin_com: Reading...
data.google_site_verification_token.cmugpt_com: Read complete after 0s [id=cmugpt.com]
data.google_site_verification_token.scottylabs_dev: Reading...
data.google_site_verification_token.scottygo_com: Read complete after 1s [id=scottygo.com]
data.google_site_verification_token.cmuservice_shop: Reading...
data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com]
data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol]
data.google_site_verification_token.cmu_quest: Reading...
data.google_site_verification_token.cmustudy_com: Reading...
data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org]
data.google_site_verification_token.cmu_do: Reading...
data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide]
data.google_site_verification_token.doggylabs_org: Reading...
data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live]
data.google_site_verification_token.cmu_dev: Reading...
data.google_site_verification_token.cmucal_com: Read complete after 0s [id=cmucal.com]
data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com]
data.google_site_verification_token.scottylabs_net: Reading...
data.keycloak_realm.scottylabs: Reading...
data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest]
data.google_site_verification_token.cmustudy_com: Read complete after 0s [id=cmustudy.com]
data.google_site_verification_token.scottylabs_dev: Read complete after 0s [id=scottylabs.dev]
data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org]
data.google_site_verification_token.cmuservice_shop: Read complete after 0s [id=cmuservice.shop]
data.google_site_verification_token.rent-pgh_com: Read complete after 0s [id=rent-pgh.com]
data.google_site_verification_token.cmu_dev: Read complete after 0s [id=cmu.dev]
data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do]
data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak: Closing...
ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s
cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb]
cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978]
cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116]
cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14]
cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57]
cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40]
cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4]
cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493]
cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b]
cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43]
cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790]
cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a]
cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857]
cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237]
cloudflare_dns_record.this["scottygo.com-search-console"]: Refreshing state... [id=f842d9865ff180039ca1d4feb4997c42]
cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169]
cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb]
cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3]
cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f]
cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f]
cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c]
cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4]
cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d]
cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666]
cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb]
cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4]
cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234]
cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc]
cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a]
cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0]
cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe]
cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199]
google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org]
google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net]
google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol]
google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev]
google_site_verification_web_resource.scottygo_com: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com]
google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses]
google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com]
google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do]
google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com]
google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest]
google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes]
google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live]
google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com]
google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com]
google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org]
google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build]
google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com]
google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com]
google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com]
google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com]
google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide]
google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build]
google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org]
google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev]
google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol]
google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com]
google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com]
google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop]
google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org]
google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com]
google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote]
google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com]
google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org]
google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org]
google_site_verification_owner.scottygo_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/admin@scottylabs.org]
google_site_verification_owner.scottygo_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/ops@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org]
google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org]
google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org]
google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org]
google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org]
google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org]
google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org]
google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org]
google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org]
google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org]
google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org]
google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org]
google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org]
google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org]
google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org]
google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org]
google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org]
google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org]
google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org]
google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org]
google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org]
google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org]
google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org]
google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org]
google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org]
google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org]
google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org]
google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org]
google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org]
google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org]
google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org]
google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org]
google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org]
google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org]
google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org]
google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org]
google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org]
google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org]
google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org]
google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org]
google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org]
google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org]
google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org]
google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org]
google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org]
google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org]
google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org]
google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org]
google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org]
google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org]
google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org]
google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org]
google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org]
google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org]
google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org]
google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org]
google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org]
google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.
  • ▶️ To apply this plan, comment: 
    atlantis apply -p search-console
  • 🚮 To delete this plan and lock, click here
  • 🔁 To plan this project again, comment: 
    atlantis plan -p search-console

No changes. Your infrastructure matches the configuration.

Plan Summary

22 projects, 1 with changes, 21 with no changes, 0 failed

  • ⏩ To apply all unapplied plans from this Pull Request, comment: 
    atlantis apply
  • 🚮 To delete all plans and locks from this Pull Request, comment: 
    atlantis unlock
Ran Plan for 22 projects: 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `occ` dir: `.` workspace: `occ` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `search-console` dir: `.` workspace: `search-console` --- ### 1. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["0dc43b309b5bcfe88dff25b3bc14e0d9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["scottylabs-signage-01"]: Refreshing state... [id=4118bad0eb9390bad41f516e0ac56ea4] cloudflare_dns_record.this["scottylabs-infra-03"]: Refreshing state... [id=c1bd2cbd0a560d10618adff804ff0849] cloudflare_dns_record.this["scottylabs-snoopy"]: Refreshing state... [id=db1608f78283dff325fa502eec91c7b8] cloudflare_dns_record.this["scottylabs-infra-01"]: Refreshing state... [id=9154cf96a263672aa17b5ee6b15bd35e] cloudflare_dns_record.this["scottylabs-infra-02"]: Refreshing state... [id=044a217430c03fa2c8aa936319538696] cloudflare_dns_record.this["scottylabs-deploy-01"]: Refreshing state... [id=cf10b64dd4650cf0bd250f46e697bb44] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_salt_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `occ` dir: `.` workspace: `occ` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p occ ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Focc%252Focc) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p occ ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_policy.governance: Refreshing state... [id=governance] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: ~ update in-place (current -> planned) OpenTofu will perform the following actions: # vault_policy.governance will be updated in-place ! resource "vault_policy" "governance" { id = "governance" name = "governance" ! policy = <<-EOT # Manage vault policies (project dev/prod policies) path "sys/policies/acl/*" { capabilities = ["create", "read", "update", "delete", "list"] } # Manage identity groups and aliases path "identity/group" { capabilities = ["create", "update"] } path "identity/group/*" { capabilities = ["create", "read", "update", "delete", "list"] } path "identity/group-alias" { capabilities = ["create", "update"] } path "identity/group-alias/*" { capabilities = ["create", "read", "update", "delete", "list"] } # Manage CI identity entities and aliases path "identity/entity" { capabilities = ["create", "update"] } path "identity/entity/*" { capabilities = ["create", "read", "update", "delete", "list"] } path "identity/entity-alias" { capabilities = ["create", "update"] } path "identity/entity-alias/*" { capabilities = ["create", "read", "update", "delete", "list"] } path "identity/lookup/entity" { capabilities = ["update"] } # Read auth backend config (for mount accessor lookup) path "sys/auth" { capabilities = ["read"] } path "sys/mounts/auth/*" { capabilities = ["read"] } # Allow vault provider to create child tokens path "auth/token/create" { capabilities = ["create", "update"] } path "secret/data/secretspec/+/+/SENTRY_DSN" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SENTRY_DSN" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/POSTHOG_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/POSTHOG_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/POSTHOG_HOST" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/POSTHOG_HOST" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/OIDC_CLIENT_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/OIDC_CLIENT_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/OIDC_CLIENT_SECRET" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/OIDC_CLIENT_SECRET" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/KEYCLOAK_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/KEYCLOAK_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/KEYCLOAK_REALM" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/KEYCLOAK_REALM" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/OAUTH_RELAY_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/OAUTH_RELAY_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/PROJECT_GROUP" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/PROJECT_GROUP" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/PROJECT_ADMIN_GROUP" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/PROJECT_ADMIN_GROUP" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_SECRET" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/KEYCLOAK_ADMIN_CLIENT_SECRET" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/LITELLM_API_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/LITELLM_API_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/LITELLM_BASE_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/LITELLM_BASE_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_S3_ENDPOINT" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_S3_ENDPOINT" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_S3_BUCKET" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_S3_BUCKET" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_ACCESS_KEY_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_ACCESS_KEY_ID" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_SECRET_ACCESS_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_SECRET_ACCESS_KEY" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/CDN_PUBLIC_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/CDN_PUBLIC_URL" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/EMAIL_FROM" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/EMAIL_FROM" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/SMTP_HOST" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SMTP_HOST" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/SMTP_PORT" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SMTP_PORT" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/SMTP_USERNAME" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SMTP_USERNAME" { capabilities = ["create", "read", "update", "delete"] } path "secret/data/secretspec/+/+/SMTP_PASSWORD" { capabilities = ["create", "read", "update", "delete"] } path "secret/metadata/secretspec/+/+/SMTP_PASSWORD" { capabilities = ["create", "read", "update", "delete"] } # LiteLLM master key for governance to call the management API path "secret/data/infra/litellm-master-key" { capabilities = ["read"] } # Cloudflare token for governance's email feature path "secret/data/infra/cloudflare-governance-email" { capabilities = ["read"] } + # Grouper password for governance's grouper axis + path "secret/data/infra/grouper" { + capabilities = ["read"] + } + # Read shared CI cache credentials (cachix, sccache) path "secret/data/shared/*" { capabilities = ["read"] } EOT } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/192/governance/governance-governance.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/192/governance/governance-governance.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` Plan: 0 to add, 1 to change, 0 to destroy. --- ### 6. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.cloudflare_api_token_permission_groups_list.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s data.cloudflare_api_token_permission_groups_list.all: Read complete after 1s cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71] cloudflare_api_token.kennel: Refreshing state... [id=5ee0ffc6fc58fb747477b1bee35ffd04] cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012] cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b] cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2] vault_kv_secret_v2.cloudflare_kennel: Refreshing state... [id=secret/data/infra/cloudflare-kennel] vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp] vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts] vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns] vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p cloudflare-tokens ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fcloudflare-tokens%252Fcloudflare-tokens) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p cloudflare-tokens ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 1s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 1s random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Reading... data.forgejo_repository.governance: Read complete after 0s [name=governance] forgejo_repository_webhook.governance: Refreshing state... data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] forgejo_repository_webhook.infrastructure: Refreshing state... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.garage_webadmin_jwt: Refreshing state... [id=none] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.keycloak_realm.scottylabs: Reading... cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `mail` dir: `.` workspace: `mail` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871] cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c] cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50] cloudflare_dns_record.this["cmu-dev-dmarc"]: Refreshing state... [id=0d3fd67366a456cee1c6d14be0dd6b6f] cloudflare_dns_record.this["scottylabs-org-dmarc"]: Refreshing state... [id=ea71a2845b01a4734db1a0f6233eb1d7] cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a] cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d] cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a] cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd] cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p mail ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmail%252Fmail) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p mail ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.vault_kv_secret_v2.keycloak_idp: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening... ephemeral.vault_kv_secret_v2.forgejo_idp: Opening... ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.master: Reading... keycloak_realm.scottylabs: Refreshing state... [id=scottylabs] data.keycloak_realm.master: Read complete after 0s [id=master] data.keycloak_role.master_admin: Reading... keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad] keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea] keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs] ephemeral.vault_kv_secret_v2.forgejo_idp: Closing... ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing... ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s keycloak_custom_identity_provider_mapper.master_devops_admin: Refreshing state... [id=c0b94b4c-21e5-401f-90dc-c05624c611e4] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.keycloak_idp, │ on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp: │ 21: } │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 488, in resource.keycloak_oidc_google_identity_provider.google: │ 488: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.nixbot_forgejo: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s forgejo_team.nixbot: Refreshing state... [name=nixbot] forgejo_user.nixbot: Refreshing state... forgejo_team_member.nixbot: Refreshing state... cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot] vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p nixbot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fnixbot%252Fnixbot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p nixbot ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 18. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_policy.devops: Refreshing state... [id=devops] vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_identity_oidc_key.terranix: Refreshing state... [id=terranix] vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200] vault_auth_backend.approle: Refreshing state... [id=approle] ephemeral.vault_kv_secret_v2.keycloak: Opening... vault_policy.shared_read: Refreshing state... [id=shared-read] data.vault_auth_backend.token: Reading... vault_mount.kv: Refreshing state... [id=secret] data.vault_auth_backend.token: Read complete after 0s [id=token] ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s vault_policy.infra: Refreshing state... [id=infra] vault_policy.ci: Refreshing state... [id=ci] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis] vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_approle_auth_backend_role.host["www-04"]: Refreshing state... [id=auth/approle/role/www-04] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["elect-01"]: Refreshing state... [id=auth/approle/role/elect-01] vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 19. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.forgejo_repository.kennel: Reading... data.forgejo_repository.kennel: Read complete after 0s [name=kennel] forgejo_repository_webhook.kennel_renovate: Refreshing state... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 20. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding posthog/posthog versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing posthog/posthog v1.0.27 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed posthog/posthog v1.0.27 (unauthenticated) - Using posthog/posthog v1.0.27 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - posthog/posthog │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e] cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 21. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] data.keycloak_realm.scottylabs: Reading... ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 22. project: `search-console` dir: `.` workspace: `search-console` <details><summary>Show Output</summary> ```diff copying 2 paths... copying path '/nix/store/6p1870a8swj71hw603f1biw7is8pkdj3-openbao-google-token.drv' to 'daemon'... copying path '/nix/store/x8x9ayg50n4wl80k4j60vlzbzfj3j3cw-config.tf.json.drv' to 'daemon'... copying path '/nix/store/aa7i752awnz9k2fkm840fixm62kq504a-ShellCheck-0.11.0' from 'http://localhost:5000'... copying 0 paths... copying 1 paths... copying path '/nix/store/z5gmh2f0yn773f84r1x84czcng97ac6x-openbao-google-token' from 'ssh-ng://eu.nixbuild.net'... ✔ config.tf.json.drv (0s) ✔ openbao-google-token (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/google versions matching "~> 7.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/google v7.46.2 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory - Installed hashicorp/google v7.46.2 (unauthenticated) - Using hashicorp/google v7.46.2 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/google │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.keycloak: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak: Open complete after 0s data.google_site_verification_token.tartanhacks_com: Reading... data.google_site_verification_token.cmu_homes: Reading... data.google_site_verification_token.scottylabs_org: Reading... data.google_site_verification_token.cmuhousing_com: Reading... data.google_site_verification_token.tartan_vote: Reading... data.google_site_verification_token.scottygo_com: Reading... data.google_site_verification_token.cmueats_com: Reading... data.google_site_verification_token.scotty_lol: Reading... data.google_site_verification_token.cmuinsta_com: Reading... data.google_site_verification_token.cmu_courses: Reading... data.google_site_verification_token.cmuhousing_com: Read complete after 1s [id=cmuhousing.com] data.google_site_verification_token.tartanhacks_com: Read complete after 1s [id=tartanhacks.com] data.google_site_verification_token.cmu_homes: Read complete after 1s [id=cmu.homes] data.google_site_verification_token.cmumaps_com: Reading... data.google_site_verification_token.collegecart_org: Reading... data.google_site_verification_token.tartan_vote: Read complete after 1s [id=tartan.vote] data.google_site_verification_token.cmugpt_com: Reading... data.google_site_verification_token.cmucourses_com: Reading... data.google_site_verification_token.scottylabs_org: Read complete after 1s [id=scottylabs.org] data.google_site_verification_token.rent-pgh_com: Reading... data.google_site_verification_token.cmueats_com: Read complete after 1s [id=cmueats.com] data.google_site_verification_token.cmuinsta_com: Read complete after 1s [id=cmuinsta.com] data.google_site_verification_token.cmu_lol: Reading... data.google_site_verification_token.andrew-inbox_com: Reading... data.google_site_verification_token.cmu_courses: Read complete after 0s [id=cmu.courses] data.google_site_verification_token.occ_build: Reading... data.google_site_verification_token.scotty_lol: Read complete after 1s [id=scotty.lol] data.google_site_verification_token.terrier_build: Reading... data.google_site_verification_token.cmumaps_com: Read complete after 0s [id=cmumaps.com] data.google_site_verification_token.tartanhacks_org: Reading... data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com] data.google_site_verification_token.cmu_guide: Reading... data.google_site_verification_token.terrier_build: Read complete after 0s [id=terrier.build] data.google_site_verification_token.occ_build: Read complete after 0s [id=occ.build] data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org] data.google_site_verification_token.roomies_live: Reading... data.google_site_verification_token.cmucal_com: Reading... data.google_site_verification_token.cmubulletin_com: Reading... data.google_site_verification_token.cmugpt_com: Read complete after 0s [id=cmugpt.com] data.google_site_verification_token.scottylabs_dev: Reading... data.google_site_verification_token.scottygo_com: Read complete after 1s [id=scottygo.com] data.google_site_verification_token.cmuservice_shop: Reading... data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com] data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol] data.google_site_verification_token.cmu_quest: Reading... data.google_site_verification_token.cmustudy_com: Reading... data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org] data.google_site_verification_token.cmu_do: Reading... data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide] data.google_site_verification_token.doggylabs_org: Reading... data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live] data.google_site_verification_token.cmu_dev: Reading... data.google_site_verification_token.cmucal_com: Read complete after 0s [id=cmucal.com] data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com] data.google_site_verification_token.scottylabs_net: Reading... data.keycloak_realm.scottylabs: Reading... data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest] data.google_site_verification_token.cmustudy_com: Read complete after 0s [id=cmustudy.com] data.google_site_verification_token.scottylabs_dev: Read complete after 0s [id=scottylabs.dev] data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org] data.google_site_verification_token.cmuservice_shop: Read complete after 0s [id=cmuservice.shop] data.google_site_verification_token.rent-pgh_com: Read complete after 0s [id=rent-pgh.com] data.google_site_verification_token.cmu_dev: Read complete after 0s [id=cmu.dev] data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do] data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak: Closing... ephemeral.vault_kv_secret_v2.keycloak: Close complete after 0s cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb] cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978] cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116] cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14] cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57] cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40] cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4] cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493] cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b] cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43] cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790] cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a] cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857] cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237] cloudflare_dns_record.this["scottygo.com-search-console"]: Refreshing state... [id=f842d9865ff180039ca1d4feb4997c42] cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169] cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb] cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3] cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f] cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f] cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c] cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4] cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d] cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666] cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb] cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4] cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234] cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc] cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a] cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0] cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe] cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199] google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org] google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net] google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol] google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev] google_site_verification_web_resource.scottygo_com: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com] google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses] google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com] google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do] google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com] google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest] google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes] google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live] google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com] google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com] google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org] google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build] google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com] google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com] google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com] google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com] google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide] google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build] google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org] google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev] google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol] google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com] google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com] google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop] google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org] google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com] google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote] google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com] google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org] google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org] google_site_verification_owner.scottygo_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/admin@scottylabs.org] google_site_verification_owner.scottygo_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottygo.com/ops@scottylabs.org] google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org] google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org] google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org] google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org] google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org] google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org] google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org] google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org] google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org] google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org] google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org] google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org] google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org] google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org] google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org] google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org] google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org] google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org] google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org] google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org] google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org] google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org] google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org] google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org] google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org] google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org] google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org] google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org] google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org] google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org] google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org] google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org] google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org] google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org] google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org] google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org] google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org] google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org] google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org] google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org] google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org] google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org] google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org] google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org] google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org] google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org] google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org] google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org] google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org] google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org] google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org] google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org] google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org] google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org] google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org] google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org] google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org] google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org] google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org] google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p search-console ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsearch-console%252Fsearch-console) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p search-console ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 22 projects, 1 with changes, 21 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```
anish commented 2026-10-28 03:40:56 +00:00
Author
Owner
Copy link

atlantis apply

atlantis apply
scottylabs-bot commented 2026-10-28 03:41:06 +00:00
Owner
Copy link

Ran Apply for 22 projects:

  1. project: keycloak dir: . workspace: keycloak
  2. project: headscale dir: . workspace: headscale
  3. project: matrix dir: . workspace: matrix
  4. project: atlantis dir: . workspace: atlantis
  5. project: observability dir: . workspace: observability
  6. project: mail dir: . workspace: mail
  7. project: nixbot dir: . workspace: nixbot
  8. project: litellm dir: . workspace: litellm
  9. project: occ dir: . workspace: occ
  10. project: forgejo dir: . workspace: forgejo
  11. project: cloudflare-tokens dir: . workspace: cloudflare-tokens
  12. project: governance dir: . workspace: governance
  13. project: hosts dir: . workspace: hosts
  14. project: garage-webadmin dir: . workspace: garage-webadmin
  15. project: kennel dir: . workspace: kennel
  16. project: snot dir: . workspace: snot
  17. project: vaultwarden dir: . workspace: vaultwarden
  18. project: ricochet dir: . workspace: ricochet
  19. project: openbao dir: . workspace: openbao
  20. project: posthog dir: . workspace: posthog
  21. project: webhook dir: . workspace: webhook
  22. project: search-console dir: . workspace: search-console

1. project: keycloak dir: . workspace: keycloak

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

2. project: headscale dir: . workspace: headscale

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

headplane_client_secret = <sensitive>
headscale_client_secret = <sensitive>

3. project: matrix dir: . workspace: matrix

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

4. project: atlantis dir: . workspace: atlantis

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

5. project: observability dir: . workspace: observability

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

6. project: mail dir: . workspace: mail

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

7. project: nixbot dir: . workspace: nixbot

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

8. project: litellm dir: . workspace: litellm

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

9. project: occ dir: . workspace: occ

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

10. project: forgejo dir: . workspace: forgejo

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

11. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

12. project: governance dir: . workspace: governance

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.governance: Modifying... [id=governance]
vault_policy.governance: Modifications complete after 0s [id=governance]

Apply complete! Resources: 0 added, 1 changed, 0 destroyed.

Outputs:

governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf"

13. project: hosts dir: . workspace: hosts

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

14. project: garage-webadmin dir: . workspace: garage-webadmin

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

garage_webadmin_client_secret = <sensitive>

15. project: kennel dir: . workspace: kennel

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc"

16. project: snot dir: . workspace: snot

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

17. project: vaultwarden dir: . workspace: vaultwarden

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

18. project: ricochet dir: . workspace: ricochet

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

19. project: openbao dir: . workspace: openbao

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

approle_role_ids = {
  "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8"
  "elect-01" = "effa5a9e-9439-99a1-0ad6-42f69e998dbc"
  "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194"
  "infra-03" = "89a95389-6f6c-b634-c9b2-9a148028b126"
  "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22"
  "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043"
  "www-04" = "1a62cddc-bd72-c3db-fbad-051421cb2d6e"
}
atlantis_entity_id = "dacc3864-d73d-d2ed-17a4-b679f82f8b00"

20. project: posthog dir: . workspace: posthog

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

21. project: webhook dir: . workspace: webhook

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

22. project: search-console dir: . workspace: search-console

Show Output 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Apply Summary

22 projects, 22 successful, 0 failed, 0 errored

Ran Apply for 22 projects: 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `occ` dir: `.` workspace: `occ` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `search-console` dir: `.` workspace: `search-console` --- ### 1. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 2. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: headplane_client_secret = <sensitive> headscale_client_secret = <sensitive> ``` </details> --- ### 3. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 4. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 5. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 6. project: `mail` dir: `.` workspace: `mail` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 7. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 8. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 9. project: `occ` dir: `.` workspace: `occ` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 10. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 11. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 12. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.governance: Modifying... [id=governance] vault_policy.governance: Modifications complete after 0s [id=governance] Apply complete! Resources: 0 added, 1 changed, 0 destroyed. Outputs: governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf" ``` </details> --- ### 13. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 14. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: garage_webadmin_client_secret = <sensitive> ``` </details> --- ### 15. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc" ``` </details> --- ### 16. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 17. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 18. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 19. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: approle_role_ids = { "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8" "elect-01" = "effa5a9e-9439-99a1-0ad6-42f69e998dbc" "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194" "infra-03" = "89a95389-6f6c-b634-c9b2-9a148028b126" "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22" "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043" "www-04" = "1a62cddc-bd72-c3db-fbad-051421cb2d6e" } atlantis_entity_id = "dacc3864-d73d-d2ed-17a4-b679f82f8b00" ``` </details> --- ### 20. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 21. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 22. project: `search-console` dir: `.` workspace: `search-console` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### Apply Summary 22 projects, 22 successful, 0 failed, 0 errored
anish merged commit d43b9f366e into main 2026-10-28 03:41:15 +00:00
anish deleted branch grouper 2026-10-28 03:41:16 +00:00
scottylabs-bot commented 2026-10-28 03:41:16 +00:00
Owner
Copy link

Locks and plans deleted for the projects and workspaces modified in this pull request:

  • dir: . workspaces: atlantis, cloudflare-tokens, forgejo, garage-webadmin, governance, headscale, hosts, kennel, keycloak, litellm, mail, matrix, nixbot, observability, occ, openbao, posthog, ricochet, search-console, snot, vaultwarden, webhook
Locks and plans deleted for the projects and workspaces modified in this pull request: - dir: `.` workspaces: `atlantis`, `cloudflare-tokens`, `forgejo`, `garage-webadmin`, `governance`, `headscale`, `hosts`, `kennel`, `keycloak`, `litellm`, `mail`, `matrix`, `nixbot`, `observability`, `occ`, `openbao`, `posthog`, `ricochet`, `search-console`, `snot`, `vaultwarden`, `webhook`
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
  
needs/docs
Must have documentation written

  
needs/research
Discuss the ideal implementation with the tech lead

  
needs/upstream
Needs a contribution to an upstream project

  
type/bug
Something not working as intended

  
type/external
Lives outside of code

  
type/feature
New functionality

  
type/refactor
Improving existing code

  
urgency
high
 This is currently causing issues

  
urgency
immediate
 This is making a project or feature unusable

  
urgency
low
 This can happen whenever

  
urgency
medium
 This is expected to cause issues soon

No labels
needs/docs
needs/research
needs/upstream
type/bug
type/external
type/feature
type/refactor
urgency
high
urgency
immediate
urgency
low
urgency
medium
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ScottyLabs/infrastructure!192
No description provided.