Skip to content

Add tango CNAME record for tango.jakob-lingel.dev - #54

Merged
Davidcode2 merged 2 commits into
mainfrom
add-tango-dns
Aug 5, 2026
Merged

Add tango CNAME record for tango.jakob-lingel.dev#54
Davidcode2 merged 2 commits into
mainfrom
add-tango-dns

Conversation

@Davidcode2

Copy link
Copy Markdown
Owner

What

Adds a CNAME DNS record for tango.jakob-lingel.dev pointing to the apex domain.

Why

New project: Tango — a modern alternative UI for the myTNG customer portal (Astro SSR + Cheerio scraper). The app deploys to the tango namespace on the k3s cluster with ingress at tango.jakob-lingel.dev.

The app-of-apps manifests are already committed. This DNS record is the last piece needed for the ingress + cert-manager TLS to work.

Changes

resource digitalocean_record jakob_lingel_dev_tango {
  domain = digitalocean_domain.jakob-lingel-dev.name
  type   = CNAME
  name   = tango
  value  = ${digitalocean_domain.jakob-lingel-dev.name}.
  ttl    = 1800
}

@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

Terraform Format and Style 🖌failure

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan
Acquiring state lock. This may take a few moments...
module.dns.digitalocean_domain.gmymf_com: Refreshing state... [id=gmymf.com]
module.dns.digitalocean_domain.jakob-lingel-dev: Refreshing state... [id=jakob-lingel.dev]
module.dns.digitalocean_domain.immoly-io: Refreshing state... [id=immoly.io]
tls_private_key.hetzner_private_key: Refreshing state... [id=976e6cb73e196f15de378de25cb856d93156d17a]
module.dns.digitalocean_domain.mimis_kreativstudio_de: Refreshing state... [id=mimis-kreativstudio.de]
module.dns.digitalocean_domain.alemazung_de: Refreshing state... [id=alemazung.de]
module.dns.digitalocean_domain.schluesselmomente_freiburg_de: Refreshing state... [id=schluesselmomente-freiburg.de]
hcloud_server.bot_node[0]: Refreshing state... [id=154112110]
hcloud_firewall.bot_node: Refreshing state... [id=11352564]
hcloud_firewall_attachment.bot_node: Refreshing state... [id=11352564]
hcloud_ssh_key.hetzner_ssh_key: Refreshing state... [id=29251013]
hcloud_network_subnet.bot_private_subnet: Refreshing state... [id=12478431-10.1.1.0/24]
hcloud_network.bot_private_net: Refreshing state... [id=12478431]
hcloud_firewall.k8s_cluster: Refreshing state... [id=10471312]
hcloud_firewall.legacy_vm: Refreshing state... [id=10471313]
hcloud_network.k8s_private_net: Refreshing state... [id=11620945]
hcloud_ssh_key.deployment_key: Refreshing state... [id=29750012]
module.dns.digitalocean_record.jakob_lingel_dev_ns1: Refreshing state... [id=1776334973]
module.dns.digitalocean_record.jakob_lingel_dev_auth_A: Refreshing state... [id=1817217999]
module.dns.digitalocean_record.jakob_lingel_dev_alemazung: Refreshing state... [id=1790821024]
module.dns.digitalocean_record.jakob_lingel_dev_blog_CNAME: Refreshing state... [id=1793047348]
module.dns.digitalocean_record.jakob_lingel_dev_www_homeatsea_CNAME: Refreshing state... [id=1807741897]
module.dns.digitalocean_record.jakob_lingel_dev_schreinerei_app: Refreshing state... [id=1819978660]
module.dns.digitalocean_record.jakob_lingel_dev_notifications: Refreshing state... [id=1812601340]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_api_A: Refreshing state... [id=1817217997]
module.dns.digitalocean_record.jakob_lingel_dev_analytics: Refreshing state... [id=1793025268]
module.dns.digitalocean_record.jakob_lingel_dev_schreinerei: Refreshing state... [id=1817713954]
module.dns.digitalocean_record.jakob_lingel_dev_www_telemetry: Refreshing state... [id=1811080611]
module.dns.digitalocean_record.jakob_lingel_dev_api_homeatsea_CNAME: Refreshing state... [id=1807741899]
module.dns.digitalocean_record.jakob_lingel_dev_www_analytics: Refreshing state... [id=1798224424]
module.dns.digitalocean_record.jakob_lingel_dev_ns3: Refreshing state... [id=1776334975]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_www_blog_CNAME: Refreshing state... [id=1817217991]
module.dns.digitalocean_record.jakob_lingel_dev_argocd: Refreshing state... [id=1798180103]
module.dns.digitalocean_record.jakob_lingel_dev_immoly_google_verification: Refreshing state... [id=1793041158]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_app_A: Refreshing state... [id=1817217990]
module.dns.digitalocean_record.jakob_lingel_dev_gmymf_storefront: Refreshing state... [id=1815605874]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_A: Refreshing state... [id=1817217993]
module.dns.digitalocean_record.jakob_lingel_dev_portfolio_A: Refreshing state... [id=1812143504]
module.dns.digitalocean_record.jakob_lingel_dev_www_uptime: Refreshing state... [id=1803544468]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_netlify_challenge_TXT: Refreshing state... [id=1817217994]
module.dns.digitalocean_record.jakob_lingel_dev_www_blog_CNAME: Refreshing state... [id=1798224425]
module.dns.digitalocean_record.jakob_lingel_dev_vogthof: Refreshing state... [id=1814524296]
module.dns.digitalocean_record.jakob_lingel_dev_www_argocd: Refreshing state... [id=1798224423]
module.dns.digitalocean_record.jakob_lingel_dev_www_auth_CNAME: Refreshing state... [id=1817217992]
module.dns.digitalocean_record.jakob_lingel_dev_homeatsea_CNAME: Refreshing state... [id=1807741898]
module.dns.digitalocean_record.jakob_lingel_dev_telemetry: Refreshing state... [id=1811080612]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_www_A: Refreshing state... [id=1817217995]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_portfolio_CNAME: Refreshing state... [id=1817217998]
module.dns.digitalocean_record.jakob_lingel_dev_www_immo: Refreshing state... [id=1825241915]
module.dns.digitalocean_record.jakob_lingel_dev_www_schreinerei_app: Refreshing state... [id=1825241913]
module.dns.digitalocean_record.jakob_lingel_dev_www_A: Refreshing state... [id=1776336757]
module.dns.digitalocean_record.jakob_lingel_dev_ns2: Refreshing state... [id=1776334974]
module.dns.digitalocean_record.jakob_lingel_dev_bueromoebel: Refreshing state... [id=1815502540]
module.dns.digitalocean_record.jakob_lingel_dev_A: Refreshing state... [id=1776336745]
module.dns.digitalocean_record.jakob_lingel_dev_immo: Refreshing state... [id=1825241914]
module.dns.digitalocean_record.jakob_lingel_dev_paperless: Refreshing state... [id=1813871415]
module.dns.digitalocean_record.jakob_lingel_dev_immoly_CNAME: Refreshing state... [id=1782036502]
module.dns.digitalocean_record.jakob_lingel_dev_uptime: Refreshing state... [id=1803544466]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_blog_CNAME: Refreshing state... [id=1817217996]
module.dns.digitalocean_record.jakob_lingel_dev_gmymf_medusa: Refreshing state... [id=1815601486]
module.dns.digitalocean_record.alemazung_de_ns2: Refreshing state... [id=1813504227]
module.dns.digitalocean_record.alemazung_de_www_api_A: Refreshing state... [id=1825319353]
module.dns.digitalocean_record.alemazung_de_ns1: Refreshing state... [id=1813504225]
module.dns.digitalocean_record.alemazung_de_ns3: Refreshing state... [id=1813504229]
module.dns.digitalocean_record.alemazung_de_A: Refreshing state... [id=1813504226]
module.dns.digitalocean_record.alemazung_de_api_A: Refreshing state... [id=1825319355]
module.dns.digitalocean_record.alemazung_de_www_A: Refreshing state... [id=1813504228]
module.dns.digitalocean_record.mimis_kreativstudio_de_A: Refreshing state... [id=1789898809]
module.dns.digitalocean_record.mimis_kreativstudio_de_ns2: Refreshing state... [id=1789898808]
module.dns.digitalocean_record.mimis_kreativstudio_de_www_A: Refreshing state... [id=1789898806]
module.dns.digitalocean_record.mimis_kreativstudio_de_ns3: Refreshing state... [id=1789898810]
module.dns.digitalocean_record.mimis_kreativstudio_de_ns1: Refreshing state... [id=1789898807]
module.dns.digitalocean_record.gmymf_com_A: Refreshing state... [id=1815888852]
module.dns.digitalocean_record.gmymf_com_www_A: Refreshing state... [id=1815888859]
module.dns.digitalocean_record.gmymf_com_ns1: Refreshing state... [id=1815888856]
module.dns.digitalocean_record.gmymf_com_ns3: Refreshing state... [id=1815888853]
module.dns.digitalocean_record.gmymf_com_ns2: Refreshing state... [id=1815888858]
module.dns.digitalocean_record.immoly_io_alemazung_CNAME: Refreshing state... [id=1798672744]
module.dns.digitalocean_record.immoly_io_A: Refreshing state... [id=1793981658]
module.dns.digitalocean_record.immoly_io_ns3: Refreshing state... [id=1793981664]
module.dns.digitalocean_record.immoly_io_blog_CNAME: Refreshing state... [id=1793981660]
module.dns.digitalocean_record.immoly_io_google_verification: Refreshing state... [id=1793982154]
module.dns.digitalocean_record.immoly_io_www_alemazung_CNAME: Refreshing state... [id=1798672741]
module.dns.digitalocean_record.immoly_io_api_alemazung_CNAME: Refreshing state... [id=1798672742]
module.dns.digitalocean_record.immoly_io_ns2: Refreshing state... [id=1793981663]
module.dns.digitalocean_record.immoly_io_ns1: Refreshing state... [id=1793981659]
module.dns.digitalocean_record.immoly_io_www_A: Refreshing state... [id=1793981662]
module.dns.digitalocean_record.immoly_io_www_api_alemazung_CNAME: Refreshing state... [id=1798672740]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_ns3: Refreshing state... [id=1776723516]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_www_admin_a: Refreshing state... [id=1781147690]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_root_a: Refreshing state... [id=1776723817]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_admin_a: Refreshing state... [id=1781139199]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_ns1: Refreshing state... [id=1776723512]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_api_a: Refreshing state... [id=1780508291]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_mx1: Refreshing state... [id=1777264684]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_zmail_dkim_txt: Refreshing state... [id=1777264856]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_ns2: Refreshing state... [id=1776723514]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_www_a: Refreshing state... [id=1776724211]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_spf_txt: Refreshing state... [id=1777264988]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_zoho_verification_txt: Refreshing state... [id=1777263731]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_s1_dkim_txt: Refreshing state... [id=1777773174]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_mx3: Refreshing state... [id=1777264751]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_mx2: Refreshing state... [id=1777264705]
hcloud_network_subnet.k8s_private_subnet: Refreshing state... [id=11620945-10.0.1.0/24]
hcloud_server.k8s_node[0]: Refreshing state... [id=112652680]
hcloud_server.k8s_node[1]: Refreshing state... [id=112652681]
hcloud_server.k8s_node[2]: Refreshing state... [id=112652679]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_db_encryption_key: Refreshing state... [id=/joy_alemazung/strapi/db/encryption_key]
module.projects.aws_ssm_parameter.hetzner_cloud_server_1_ipv4: Refreshing state... [id=/compute/hetzner-cloud-server-1/host]
module.projects.aws_ssm_parameter.gmymf_medusa_cookie_secret: Refreshing state... [id=/gmymf-medusa/cookie/secret]
module.projects.aws_ssm_parameter.teachme_keycloak_admin_password: Refreshing state... [id=/teachme/keycloak/admin_password]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_jwt_secret: Refreshing state... [id=/joy_alemazung/strapi/jwt_secret]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_admin_jwt_secret: Refreshing state... [id=/joy_alemazung/strapi/admin_jwt_secret]
module.projects.aws_ssm_parameter.schreinerei_keycloak_admin_client_id: Refreshing state... [id=/schreinerei/keycloak/admin_client_id]
module.projects.aws_ssm_parameter.teachme_backend_stripe_test_key: Refreshing state... [id=/teachme/backend/stripe_test_key]
module.projects.aws_ssm_parameter.immoly_db_name: Refreshing state... [id=/immoly/db/name]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_api_token: Refreshing state... [id=/joy_alemazung/strapi/api_token]
module.projects.aws_ssm_parameter.teachme_keycloak_admin_username: Refreshing state... [id=/teachme/keycloak/admin_username]
module.projects.aws_ssm_parameter.schluesselmomente_be_mailgun_api_key: Refreshing state... [id=/schluesselmomente/be/mailgun_api_key]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_api_token_salt: Refreshing state... [id=/joy_alemazung/strapi/api_token_salt]
module.projects.aws_ssm_parameter.schreinerei_keycloak_admin_realm: Refreshing state... [id=/schreinerei/keycloak/admin_realm]
module.projects.aws_ssm_parameter.teachme_backend_recaptcha_secret: Refreshing state... [id=/teachme/backend/recaptcha_secret]
module.projects.aws_ssm_parameter.teachme_backend_gcloud_api_key: Refreshing state... [id=/teachme/backend/gcloud_api_key]
module.projects.aws_ssm_parameter.gmymf_storefront_medusa_publishable_key: Refreshing state... [id=/gmymf-storefront/medusa/publishable_key]
module.projects.aws_ssm_parameter.teachme_keycloak_db_postgres_password: Refreshing state... [id=/teachme/keycloak-db/postgres_password]
module.projects.aws_ssm_parameter.paperless_db_password: Refreshing state... [id=/paperless/db/password]
module.projects.aws_ssm_parameter.schluesselmomente_be_schluesselmomente_sendkey: Refreshing state... [id=/schluesselmomente/be/schluesselmomente_sendkey]
module.projects.aws_ssm_parameter.teachme_backend_keycloak_client_secret: Refreshing state... [id=/teachme/backend/keycloak_client_secret]
module.projects.aws_ssm_parameter.gmymf_medusa_jwt_secret: Refreshing state... [id=/gmymf-medusa/jwt/secret]
module.projects.aws_ssm_parameter.hetzner_cloud_server_1_private_ssh_key: Refreshing state... [id=/ssh/hetzner-cloud-server-1/deployment_private_ssh_key]
module.projects.aws_ssm_parameter.message_router_api_key: Refreshing state... [id=/message-router/api-key]
module.projects.aws_ssm_parameter.teachme_backend_jwt_refresh_secret: Refreshing state... [id=/teachme/backend/jwt_refresh_secret]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_transfer_token_salt: Refreshing state... [id=/joy_alemazung/strapi/transfer_token_salt]
aws_iam_user.external_secrets: Refreshing state... [id=external-secrets-ssm]
module.projects.aws_ssm_parameter.schluesselmomente_be_mail: Refreshing state... [id=/schluesselmomente/be/mail]
module.projects.aws_ssm_parameter.schreinerei_db_user: Refreshing state... [id=/schreinerei/db/user]
module.projects.aws_ssm_parameter.teachme_backend_session_secret: Refreshing state... [id=/teachme/backend/session_secret]
module.projects.aws_ssm_parameter.gmymf_medusa_db_password: Refreshing state... [id=/gmymf-medusa/db/password]
module.projects.aws_ssm_parameter.mimis_kreativstudio_notifications_recipient_email_address: Refreshing state... [id=/mimis-kreativstudio/notifications/recipient_email_address]
module.projects.aws_ssm_parameter.joy_alemazung_notifications_recipient_email_address: Refreshing state... [id=/joy_alemazung/notifications/recipient_email_address]
module.projects.aws_ssm_parameter.teachme_keycloak_db_password: Refreshing state... [id=/teachme/keycloak/db_password]
aws_iam_role.terraform_ci_role: Refreshing state... [id=terraform-ci-role]
module.projects.aws_ssm_parameter.teachme_keycloak_db_postgres_user: Refreshing state... [id=/teachme/keycloak-db/postgres_user]
module.projects.aws_ssm_parameter.teachme_backend_jwt_secret: Refreshing state... [id=/teachme/backend/jwt_secret]
module.projects.aws_ssm_parameter.teachme_backend_db_username: Refreshing state... [id=/teachme/backend/db_username]
module.projects.aws_ssm_parameter.schreinerei_db_password: Refreshing state... [id=/schreinerei/db/password]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/aws/account_id"]: Refreshing state... [id=/infra/terraform/aws/account_id]
module.projects.aws_ssm_parameter.schluesselmomente_be_password: Refreshing state... [id=/schluesselmomente/be/password]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_app_keys: Refreshing state... [id=/joy_alemazung/strapi/app_keys]
aws_iam_role.ci-role: Refreshing state... [id=ci-role]
module.projects.aws_ssm_parameter.paperless_secret_key: Refreshing state... [id=/paperless/secret-key]
module.projects.aws_ssm_parameter.vogthof_recipient_email: Refreshing state... [id=/vogthof/notifications/recipient_email_address]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/schluesselmomente_zmail_dkim"]: Refreshing state... [id=/infra/terraform/dns/schluesselmomente_zmail_dkim]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/providers/hcloud_token"]: Refreshing state... [id=/infra/terraform/providers/hcloud_token]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/portfolio_netlify_challenge"]: Refreshing state... [id=/infra/terraform/dns/portfolio_netlify_challenge]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/schluesselmomente_spf"]: Refreshing state... [id=/infra/terraform/dns/schluesselmomente_spf]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/schluesselmomente_zoho_verification"]: Refreshing state... [id=/infra/terraform/dns/schluesselmomente_zoho_verification]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/servers/digitalocean_droplet_1_ipv4"]: Refreshing state... [id=/infra/terraform/servers/digitalocean_droplet_1_ipv4]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/schluesselmomente_dkim"]: Refreshing state... [id=/infra/terraform/dns/schluesselmomente_dkim]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/providers/digitalocean_token"]: Refreshing state... [id=/infra/terraform/providers/digitalocean_token]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/servers/hcloud_ssh_key"]: Refreshing state... [id=/infra/terraform/servers/hcloud_ssh_key]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/servers/hetzner_server_1_ipv4"]: Refreshing state... [id=/infra/terraform/servers/hetzner_server_1_ipv4]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/ssh_private_key_path"]: Refreshing state... [id=/infra/terraform/ssh_private_key_path]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_db_password: Refreshing state... [id=/joy_alemazung/strapi/db/password]
module.projects.aws_ssm_parameter.umami_db_password: Refreshing state... [id=/umami/db/password]
module.projects.aws_ssm_parameter.schreinerei_mollie_api_key: Refreshing state... [id=/schreinerei/mollie/api_key]
module.projects.aws_ssm_parameter.teachme_keycloak_keystore_password: Refreshing state... [id=/teachme/keycloak/keystore_password]
module.projects.aws_ssm_parameter.hetzner_cloud_server_1_openssl_private_ssh_key: Refreshing state... [id=/ssh/hetzner-cloud-server-1/openssl_deployment_private_ssh_key]
module.projects.aws_ssm_parameter.schreinerei_keycloak_admin_client_secret: Refreshing state... [id=/schreinerei/keycloak/admin_client_secret]
data.aws_caller_identity.current: Reading...
module.projects.aws_ssm_parameter.business_website_notifications_recipient_email_address: Refreshing state... [id=/business-website/notifications/recipient_email_address]
data.aws_caller_identity.current: Read complete after 0s [id=787858641164]
module.projects.aws_ssm_parameter.teachme_backend_stripe_webhook_secret: Refreshing state... [id=/teachme/backend/stripe_webhook_secret]
aws_iam_openid_connect_provider.github: Refreshing state... [id=arn:aws:iam::787858641164:oidc-provider/token.actions.githubusercontent.com]
module.projects.aws_ssm_parameter.umami_app_secret: Refreshing state... [id=/umami/app_secret]
module.projects.aws_ssm_parameter.teachme_keycloak_db_username: Refreshing state... [id=/teachme/keycloak/db_username]
module.projects.aws_ssm_parameter.message_router_from_email: Refreshing state... [id=/message-router/from-email]
module.projects.aws_ssm_parameter.teachme_backend_db_password: Refreshing state... [id=/teachme/backend/db_password]
module.projects.aws_ssm_parameter.schreinerei_db_name: Refreshing state... [id=/schreinerei/db/name]
module.projects.aws_ssm_parameter.immoly_db_user: Refreshing state... [id=/immoly/db/user]
module.projects.aws_ssm_parameter.immoly_db_password: Refreshing state... [id=/immoly/db/password]
module.projects.aws_ssm_parameter.message_router_resend_api_key: Refreshing state... [id=/message-router/resend-api-key]
module.projects.aws_ssm_parameter.maas_bueromoebel_notifications_recipient_email_address: Refreshing state... [id=/maas-bueromoebel/notifications/recipient_email_address]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_api_url: Refreshing state... [id=/joy_alemazung/strapi/api_url]
module.projects.aws_ssm_parameter.message_router_resend_api_key_full: Refreshing state... [id=/message-router/resend-api-key-full]
hcloud_server.k8s_worker[0]: Refreshing state... [id=126420344]
aws_iam_role_policy.terraform_ci_policy: Refreshing state... [id=terraform-ci-role:terraform-ci-policy]
aws_iam_role_policy.ci-policy: Refreshing state... [id=ci-role:ci-policy]
hcloud_firewall_attachment.k8s_cluster: Refreshing state... [id=10471312]
local_file.ansible_inventory: Refreshing state... [id=bbe78095307aeaaedd0eb4fdc9488580dd9eaa2a]
aws_iam_user_policy.external_secrets_ssm: Refreshing state... [id=external-secrets-ssm:external-secrets-ssm-read]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place
  - destroy
-/+ destroy and then create replacement

Terraform will perform the following actions:

  # hcloud_firewall.bot_node will be destroyed
  # (because hcloud_firewall.bot_node is not in configuration)
  - resource "hcloud_firewall" "bot_node" {
      - id     = "11352564" -> null
      - labels = {} -> null
      - name   = "bot-node-firewall" -> null

      - apply_to {
          - server         = 154112110 -> null
            # (1 unchanged attribute hidden)
        }

      - rule {
          - destination_ips = [
              - "0.0.0.0/0",
              - "::/0",
            ] -> null
          - direction       = "out" -> null
          - protocol        = "icmp" -> null
          - source_ips      = [] -> null
            # (2 unchanged attributes hidden)
        }
      - rule {
          - destination_ips = [
              - "0.0.0.0/0",
              - "::/0",
            ] -> null
          - direction       = "out" -> null
          - port            = "any" -> null
          - protocol        = "tcp" -> null
          - source_ips      = [] -> null
            # (1 unchanged attribute hidden)
        }
      - rule {
          - destination_ips = [
              - "0.0.0.0/0",
              - "::/0",
            ] -> null
          - direction       = "out" -> null
          - port            = "any" -> null
          - protocol        = "udp" -> null
          - source_ips      = [] -> null
            # (1 unchanged attribute hidden)
        }
      - rule {
          - destination_ips = [] -> null
          - direction       = "in" -> null
          - port            = "22" -> null
          - protocol        = "tcp" -> null
          - source_ips      = [
              - "0.0.0.0/0",
              - "::/0",
            ] -> null
            # (1 unchanged attribute hidden)
        }
    }

  # hcloud_firewall_attachment.bot_node will be destroyed
  # (because hcloud_firewall_attachment.bot_node is not in configuration)
  - resource "hcloud_firewall_attachment" "bot_node" {
      - firewall_id     = 11352564 -> null
      - id              = "11352564" -> null
      - label_selectors = [] -> null
      - server_ids      = [
          - 154112110,
        ] -> null
    }

  # hcloud_firewall_attachment.k8s_cluster will be updated in-place
  ~ resource "hcloud_firewall_attachment" "k8s_cluster" {
        id              = "10471312"
      ~ server_ids      = [
          - 112652679,
          - 112652680,
          - 112652681,
          - 126420344,
        ] -> (known after apply)
        # (2 unchanged attributes hidden)
    }

  # hcloud_network.bot_private_net will be destroyed
  # (because hcloud_network.bot_private_net is not in configuration)
  - resource "hcloud_network" "bot_private_net" {
      - delete_protection        = false -> null
      - expose_routes_to_vswitch = false -> null
      - id                       = "12478431" -> null
      - ip_range                 = "10.1.0.0/16" -> null
      - labels                   = {} -> null
      - name                     = "bot-private-net" -> null
    }

  # hcloud_network_subnet.bot_private_subnet will be destroyed
  # (because hcloud_network_subnet.bot_private_subnet is not in configuration)
  - resource "hcloud_network_subnet" "bot_private_subnet" {
      - gateway      = "10.1.0.1" -> null
      - id           = "12478431-10.1.1.0/24" -> null
      - ip_range     = "10.1.1.0/24" -> null
      - network_id   = 12478431 -> null
      - network_zone = "eu-central" -> null
      - type         = "cloud" -> null
    }

  # hcloud_server.bot_node[0] will be destroyed
  # (because hcloud_server.bot_node is not in configuration)
  - resource "hcloud_server" "bot_node" {
      - allow_deprecated_images    = false -> null
      - backups                    = false -> null
      - delete_protection          = false -> null
      - firewall_ids               = [
          - 11352564,
        ] -> null
      - id                         = "154112110" -> null
      - ignore_remote_firewall_ids = false -> null
      - image                      = "ubuntu-24.04" -> null
      - ipv4_address               = "167.233.153.108" -> null
      - ipv6_address               = "2a01:4f8:c2c:f458::1" -> null
      - ipv6_network               = "2a01:4f8:c2c:f458::/64" -> null
      - keep_disk                  = false -> null
      - labels                     = {} -> null
      - location                   = "nbg1" -> null
      - name                       = "bot-node-1" -> null
      - placement_group_id         = 0 -> null
      - primary_disk_size          = 40 -> null
      - rebuild_protection         = false -> null
      - server_type                = "cx23" -> null
      - shutdown_before_deletion   = false -> null
      - ssh_keys                   = [
          - "29251013",
        ] -> null
      - status                     = "running" -> null
        # (2 unchanged attributes hidden)

      - network {
          - alias_ips   = [] -> null
          - ip          = "10.1.1.1" -> null
          - mac_address = "86:00:00:41:d2:89" -> null
          - network_id  = 12478431 -> null
            # (1 unchanged attribute hidden)
        }
    }

  # hcloud_server.k8s_node[0] must be replaced
-/+ resource "hcloud_server" "k8s_node" {
      + backup_window              = (known after apply)
      + datacenter                 = (known after apply)
      ~ firewall_ids               = [
          - 10471312,
        ] -> (known after apply)
      ~ id                         = "112652680" -> (known after apply)
      + ignore_remote_firewall_ids = false
      ~ ipv4_address               = "116.203.111.240" -> (known after apply)
      ~ ipv6_address               = "2a01:4f8:1c1a:6a35::1" -> (known after apply)
      ~ ipv6_network               = "2a01:4f8:1c1a:6a35::/64" -> (known after apply)
      + keep_disk                  = false
      - labels                     = {} -> null
        name                       = "k8s-node-1"
      - placement_group_id         = 0 -> null
      ~ primary_disk_size          = 40 -> (known after apply)
      + shutdown_before_deletion   = false
      + ssh_keys                   = [ # forces replacement
          + "29251013",
        ]
      ~ status                     = "running" -> (known after apply)
        # (6 unchanged attributes hidden)

      + network {
          + alias_ips   = (known after apply)
          + ip          = "10.0.1.1"
          + mac_address = (known after apply)
          + network_id  = 11620945
          + subnet_id   = (known after apply)
        }
    }

  # hcloud_server.k8s_node[1] must be replaced
-/+ resource "hcloud_server" "k8s_node" {
      + backup_window              = (known after apply)
      + datacenter                 = (known after apply)
      ~ firewall_ids               = [
          - 10471312,
        ] -> (known after apply)
      ~ id                         = "112652681" -> (known after apply)
      + ignore_remote_firewall_ids = false
      ~ ipv4_address               = "195.201.5.29" -> (known after apply)
      ~ ipv6_address               = "2a01:4f8:1c1b:f988::1" -> (known after apply)
      ~ ipv6_network               = "2a01:4f8:1c1b:f988::/64" -> (known after apply)
      + keep_disk                  = false
      - labels                     = {} -> null
        name                       = "k8s-node-2"
      - placement_group_id         = 0 -> null
      ~ primary_disk_size          = 40 -> (known after apply)
      + shutdown_before_deletion   = false
      + ssh_keys                   = [ # forces replacement
          + "29251013",
        ]
      ~ status                     = "running" -> (known after apply)
        # (6 unchanged attributes hidden)

      + network {
          + alias_ips   = (known after apply)
          + ip          = "10.0.1.2"
          + mac_address = (known after apply)
          + network_id  = 11620945
          + subnet_id   = (known after apply)
        }
    }

  # hcloud_server.k8s_node[2] must be replaced
-/+ resource "hcloud_server" "k8s_node" {
      + backup_window              = (known after apply)
      + datacenter                 = (known after apply)
      ~ firewall_ids               = [
          - 10471312,
        ] -> (known after apply)
      ~ id                         = "112652679" -> (known after apply)
      + ignore_remote_firewall_ids = false
      ~ ipv4_address               = "91.98.235.232" -> (known after apply)
      ~ ipv6_address               = "2a01:4f8:1c1a:a056::1" -> (known after apply)
      ~ ipv6_network               = "2a01:4f8:1c1a:a056::/64" -> (known after apply)
      + keep_disk                  = false
      - labels                     = {} -> null
        name                       = "k8s-node-3"
      - placement_group_id         = 0 -> null
      ~ primary_disk_size          = 40 -> (known after apply)
      + shutdown_before_deletion   = false
      + ssh_keys                   = [ # forces replacement
          + "29251013",
        ]
      ~ status                     = "running" -> (known after apply)
        # (6 unchanged attributes hidden)

      + network {
          + alias_ips   = (known after apply)
          + ip          = "10.0.1.3"
          + mac_address = (known after apply)
          + network_id  = 11620945
          + subnet_id   = (known after apply)
        }
    }

  # hcloud_server.k8s_worker[0] must be replaced
-/+ resource "hcloud_server" "k8s_worker" {
      + backup_window              = (known after apply)
      + datacenter                 = (known after apply)
      ~ firewall_ids               = [
          - 10471312,
        ] -> (known after apply)
      ~ id                         = "126420344" -> (known after apply)
      + ignore_remote_firewall_ids = false
      ~ ipv4_address               = "178.104.133.8" -> (known after apply)
      ~ ipv6_address               = "2a01:4f8:1c19:883c::1" -> (known after apply)
      ~ ipv6_network               = "2a01:4f8:1c19:883c::/64" -> (known after apply)
      + keep_disk                  = false
      - labels                     = {} -> null
        name                       = "k8s-worker-1"
      - placement_group_id         = 0 -> null
      ~ primary_disk_size          = 40 -> (known after apply)
      + shutdown_before_deletion   = false
      + ssh_keys                   = [ # forces replacement
          + "29251013",
        ]
      ~ status                     = "running" -> (known after apply)
        # (6 unchanged attributes hidden)

      + network {
          + alias_ips   = (known after apply)
          + ip          = "10.0.1.10"
          + mac_address = (known after apply)
          + network_id  = 11620945
          + subnet_id   = (known after apply)
        }
    }

  # local_file.ansible_inventory will be created
  + resource "local_file" "ansible_inventory" {
      + content              = (sensitive value)
      + content_base64sha256 = (known after apply)
      + content_base64sha512 = (known after apply)
      + content_md5          = (known after apply)
      + content_sha1         = (known after apply)
      + content_sha256       = (known after apply)
      + content_sha512       = (known after apply)
      + directory_permission = "0777"
      + file_permission      = "0777"
      + filename             = ".././ansible/inventory/k8s_hosts.ini"
      + id                   = (known after apply)
    }

  # module.dns.digitalocean_record.jakob_lingel_dev_tango will be created
  + resource "digitalocean_record" "jakob_lingel_dev_tango" {
      + domain = "jakob-lingel.dev"
      + fqdn   = (known after apply)
      + id     = (known after apply)
      + name   = "tango"
      + ttl    = 1800
      + type   = "CNAME"
      + value  = "jakob-lingel.dev."
    }

Plan: 6 to add, 1 to change, 9 to destroy.

Changes to Outputs:
  ~ server_ids         = [
      ~ "112652680" -> (known after apply),
      ~ "112652681" -> (known after apply),
      ~ "112652679" -> (known after apply),
    ]
  ~ server_name_to_id  = {
      ~ k8s-node-1 = "112652680" -> (known after apply)
      ~ k8s-node-2 = "112652681" -> (known after apply)
      ~ k8s-node-3 = "112652679" -> (known after apply)
    }
  ~ server_private_ips = [
      ~ "116.203.111.240" -> (known after apply),
      ~ "195.201.5.29" -> (known after apply),
      ~ "91.98.235.232" -> (known after apply),
    ]
  ~ worker_ids         = [
      ~ "126420344" -> (known after apply),
    ]

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "tfplan"

Pushed by: @Davidcode2, Action: pull_request

@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

Terraform Format and Style 🖌failure

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan
module.dns.digitalocean_domain.alemazung_de: Refreshing state... [id=alemazung.de]
module.dns.digitalocean_domain.jakob-lingel-dev: Refreshing state... [id=jakob-lingel.dev]
module.dns.digitalocean_domain.mimis_kreativstudio_de: Refreshing state... [id=mimis-kreativstudio.de]
module.dns.digitalocean_domain.gmymf_com: Refreshing state... [id=gmymf.com]
module.dns.digitalocean_domain.schluesselmomente_freiburg_de: Refreshing state... [id=schluesselmomente-freiburg.de]
hcloud_ssh_key.hetzner_ssh_key: Refreshing state... [id=29251013]
module.dns.digitalocean_domain.immoly-io: Refreshing state... [id=immoly.io]
hcloud_firewall.legacy_vm: Refreshing state... [id=10471313]
hcloud_firewall.k8s_cluster: Refreshing state... [id=10471312]
hcloud_network.k8s_private_net: Refreshing state... [id=11620945]
hcloud_network.bot_private_net: Refreshing state... [id=12478431]
hcloud_firewall.bot_node: Refreshing state... [id=11352564]
tls_private_key.hetzner_private_key: Refreshing state... [id=976e6cb73e196f15de378de25cb856d93156d17a]
module.dns.digitalocean_record.gmymf_com_A: Refreshing state... [id=1815888852]
module.dns.digitalocean_record.gmymf_com_ns3: Refreshing state... [id=1815888853]
module.dns.digitalocean_record.gmymf_com_www_A: Refreshing state... [id=1815888859]
module.dns.digitalocean_record.gmymf_com_ns1: Refreshing state... [id=1815888856]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_app_A: Refreshing state... [id=1817217990]
module.dns.digitalocean_record.jakob_lingel_dev_gmymf_storefront: Refreshing state... [id=1815605874]
module.dns.digitalocean_record.gmymf_com_ns2: Refreshing state... [id=1815888858]
module.dns.digitalocean_record.jakob_lingel_dev_bueromoebel: Refreshing state... [id=1815502540]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_netlify_challenge_TXT: Refreshing state... [id=1817217994]
module.dns.digitalocean_record.jakob_lingel_dev_www_auth_CNAME: Refreshing state... [id=1817217992]
module.dns.digitalocean_record.jakob_lingel_dev_www_argocd: Refreshing state... [id=1798224423]
module.dns.digitalocean_record.jakob_lingel_dev_immoly_CNAME: Refreshing state... [id=1782036502]
module.dns.digitalocean_record.jakob_lingel_dev_portfolio_A: Refreshing state... [id=1812143504]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_blog_CNAME: Refreshing state... [id=1817217996]
module.dns.digitalocean_record.jakob_lingel_dev_api_homeatsea_CNAME: Refreshing state... [id=1807741899]
module.dns.digitalocean_record.jakob_lingel_dev_alemazung: Refreshing state... [id=1790821024]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_api_A: Refreshing state... [id=1817217997]
module.dns.digitalocean_record.jakob_lingel_dev_ns3: Refreshing state... [id=1776334975]
module.dns.digitalocean_record.jakob_lingel_dev_A: Refreshing state... [id=1776336745]
module.dns.digitalocean_record.jakob_lingel_dev_schreinerei_app: Refreshing state... [id=1819978660]
module.dns.digitalocean_record.jakob_lingel_dev_www_schreinerei_app: Refreshing state... [id=1825241913]
module.dns.digitalocean_record.jakob_lingel_dev_gmymf_medusa: Refreshing state... [id=1815601486]
module.dns.digitalocean_record.jakob_lingel_dev_immoly_google_verification: Refreshing state... [id=1793041158]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_A: Refreshing state... [id=1817217993]
module.dns.digitalocean_record.jakob_lingel_dev_ns2: Refreshing state... [id=1776334974]
module.dns.digitalocean_record.mimis_kreativstudio_de_A: Refreshing state... [id=1789898809]
module.dns.digitalocean_record.mimis_kreativstudio_de_www_A: Refreshing state... [id=1789898806]
module.dns.digitalocean_record.jakob_lingel_dev_immo: Refreshing state... [id=1825241914]
module.dns.digitalocean_record.mimis_kreativstudio_de_ns1: Refreshing state... [id=1789898807]
module.dns.digitalocean_record.mimis_kreativstudio_de_ns2: Refreshing state... [id=1789898808]
module.dns.digitalocean_record.jakob_lingel_dev_telemetry: Refreshing state... [id=1811080612]
module.dns.digitalocean_record.jakob_lingel_dev_www_uptime: Refreshing state... [id=1803544468]
module.dns.digitalocean_record.jakob_lingel_dev_analytics: Refreshing state... [id=1793025268]
module.dns.digitalocean_record.jakob_lingel_dev_schreinerei: Refreshing state... [id=1817713954]
module.dns.digitalocean_record.jakob_lingel_dev_argocd: Refreshing state... [id=1798180103]
module.dns.digitalocean_record.jakob_lingel_dev_vogthof: Refreshing state... [id=1814524296]
module.dns.digitalocean_record.jakob_lingel_dev_www_telemetry: Refreshing state... [id=1811080611]
module.dns.digitalocean_record.jakob_lingel_dev_www_homeatsea_CNAME: Refreshing state... [id=1807741897]
module.dns.digitalocean_record.jakob_lingel_dev_www_analytics: Refreshing state... [id=1798224424]
module.dns.digitalocean_record.jakob_lingel_dev_blog_CNAME: Refreshing state... [id=1793047348]
module.dns.digitalocean_record.jakob_lingel_dev_ns1: Refreshing state... [id=1776334973]
module.dns.digitalocean_record.jakob_lingel_dev_notifications: Refreshing state... [id=1812601340]
module.dns.digitalocean_record.jakob_lingel_dev_www_A: Refreshing state... [id=1776336757]
module.dns.digitalocean_record.jakob_lingel_dev_www_immo: Refreshing state... [id=1825241915]
module.dns.digitalocean_record.jakob_lingel_dev_www_blog_CNAME: Refreshing state... [id=1798224425]
module.dns.digitalocean_record.jakob_lingel_dev_paperless: Refreshing state... [id=1813871415]
module.dns.digitalocean_record.jakob_lingel_dev_auth_A: Refreshing state... [id=1817217999]
module.dns.digitalocean_record.immoly_io_blog_CNAME: Refreshing state... [id=1793981660]
module.dns.digitalocean_record.immoly_io_ns3: Refreshing state... [id=1793981664]
module.dns.digitalocean_record.immoly_io_ns1: Refreshing state... [id=1793981659]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_www_blog_CNAME: Refreshing state... [id=1817217991]
module.dns.digitalocean_record.immoly_io_api_alemazung_CNAME: Refreshing state... [id=1798672742]
module.dns.digitalocean_record.immoly_io_alemazung_CNAME: Refreshing state... [id=1798672744]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_portfolio_CNAME: Refreshing state... [id=1817217998]
module.dns.digitalocean_record.immoly_io_www_api_alemazung_CNAME: Refreshing state... [id=1798672740]
module.dns.digitalocean_record.immoly_io_www_alemazung_CNAME: Refreshing state... [id=1798672741]
module.dns.digitalocean_record.immoly_io_ns2: Refreshing state... [id=1793981663]
module.dns.digitalocean_record.immoly_io_www_A: Refreshing state... [id=1793981662]
module.dns.digitalocean_record.mimis_kreativstudio_de_ns3: Refreshing state... [id=1789898810]
module.dns.digitalocean_record.immoly_io_google_verification: Refreshing state... [id=1793982154]
module.dns.digitalocean_record.immoly_io_A: Refreshing state... [id=1793981658]
module.dns.digitalocean_record.teachly_jakob_lingel_dev_www_A: Refreshing state... [id=1817217995]
module.dns.digitalocean_record.jakob_lingel_dev_homeatsea_CNAME: Refreshing state... [id=1807741898]
module.dns.digitalocean_record.jakob_lingel_dev_uptime: Refreshing state... [id=1803544466]
hcloud_ssh_key.deployment_key: Refreshing state... [id=29750012]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_www_admin_a: Refreshing state... [id=1781147690]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_api_a: Refreshing state... [id=1780508291]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_root_a: Refreshing state... [id=1776723817]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_zmail_dkim_txt: Refreshing state... [id=1777264856]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_mx1: Refreshing state... [id=1777264684]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_spf_txt: Refreshing state... [id=1777264988]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_www_a: Refreshing state... [id=1776724211]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_ns1: Refreshing state... [id=1776723512]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_mx3: Refreshing state... [id=1777264751]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_s1_dkim_txt: Refreshing state... [id=1777773174]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_ns2: Refreshing state... [id=1776723514]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_mx2: Refreshing state... [id=1777264705]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_admin_a: Refreshing state... [id=1781139199]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_zoho_verification_txt: Refreshing state... [id=1777263731]
module.dns.digitalocean_record.schluesselmomente_freiburg_de_ns3: Refreshing state... [id=1776723516]
hcloud_network_subnet.bot_private_subnet: Refreshing state... [id=12478431-10.1.1.0/24]
hcloud_network_subnet.k8s_private_subnet: Refreshing state... [id=11620945-10.0.1.0/24]
hcloud_server.k8s_node[0]: Refreshing state... [id=112652680]
hcloud_server.k8s_node[1]: Refreshing state... [id=112652681]
hcloud_server.k8s_node[2]: Refreshing state... [id=112652679]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/schluesselmomente_dkim"]: Refreshing state... [id=/infra/terraform/dns/schluesselmomente_dkim]
module.projects.aws_ssm_parameter.schreinerei_db_name: Refreshing state... [id=/schreinerei/db/name]
aws_iam_role.terraform_ci_role: Refreshing state... [id=terraform-ci-role]
module.projects.aws_ssm_parameter.hetzner_cloud_server_1_ipv4: Refreshing state... [id=/compute/hetzner-cloud-server-1/host]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/portfolio_netlify_challenge"]: Refreshing state... [id=/infra/terraform/dns/portfolio_netlify_challenge]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/schluesselmomente_zoho_verification"]: Refreshing state... [id=/infra/terraform/dns/schluesselmomente_zoho_verification]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/servers/hcloud_ssh_key"]: Refreshing state... [id=/infra/terraform/servers/hcloud_ssh_key]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/aws/account_id"]: Refreshing state... [id=/infra/terraform/aws/account_id]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/schluesselmomente_zmail_dkim"]: Refreshing state... [id=/infra/terraform/dns/schluesselmomente_zmail_dkim]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/providers/digitalocean_token"]: Refreshing state... [id=/infra/terraform/providers/digitalocean_token]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/providers/hcloud_token"]: Refreshing state... [id=/infra/terraform/providers/hcloud_token]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/servers/hetzner_server_1_ipv4"]: Refreshing state... [id=/infra/terraform/servers/hetzner_server_1_ipv4]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/dns/schluesselmomente_spf"]: Refreshing state... [id=/infra/terraform/dns/schluesselmomente_spf]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/servers/digitalocean_droplet_1_ipv4"]: Refreshing state... [id=/infra/terraform/servers/digitalocean_droplet_1_ipv4]
module.projects.aws_ssm_parameter.terraform_secrets["/infra/terraform/ssh_private_key_path"]: Refreshing state... [id=/infra/terraform/ssh_private_key_path]
module.projects.aws_ssm_parameter.gmymf_medusa_cookie_secret: Refreshing state... [id=/gmymf-medusa/cookie/secret]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_admin_jwt_secret: Refreshing state... [id=/joy_alemazung/strapi/admin_jwt_secret]
module.projects.aws_ssm_parameter.teachme_backend_jwt_secret: Refreshing state... [id=/teachme/backend/jwt_secret]
module.projects.aws_ssm_parameter.gmymf_storefront_medusa_publishable_key: Refreshing state... [id=/gmymf-storefront/medusa/publishable_key]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_jwt_secret: Refreshing state... [id=/joy_alemazung/strapi/jwt_secret]
module.projects.aws_ssm_parameter.teachme_keycloak_db_postgres_password: Refreshing state... [id=/teachme/keycloak-db/postgres_password]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_api_token_salt: Refreshing state... [id=/joy_alemazung/strapi/api_token_salt]
module.projects.aws_ssm_parameter.paperless_db_password: Refreshing state... [id=/paperless/db/password]
module.projects.aws_ssm_parameter.schluesselmomente_be_mail: Refreshing state... [id=/schluesselmomente/be/mail]
module.projects.aws_ssm_parameter.teachme_keycloak_db_username: Refreshing state... [id=/teachme/keycloak/db_username]
module.projects.aws_ssm_parameter.umami_app_secret: Refreshing state... [id=/umami/app_secret]
module.projects.aws_ssm_parameter.mimis_kreativstudio_notifications_recipient_email_address: Refreshing state... [id=/mimis-kreativstudio/notifications/recipient_email_address]
module.projects.aws_ssm_parameter.teachme_backend_gcloud_api_key: Refreshing state... [id=/teachme/backend/gcloud_api_key]
module.projects.aws_ssm_parameter.immoly_db_password: Refreshing state... [id=/immoly/db/password]
module.projects.aws_ssm_parameter.teachme_keycloak_admin_password: Refreshing state... [id=/teachme/keycloak/admin_password]
module.projects.aws_ssm_parameter.maas_bueromoebel_notifications_recipient_email_address: Refreshing state... [id=/maas-bueromoebel/notifications/recipient_email_address]
module.projects.aws_ssm_parameter.schreinerei_db_user: Refreshing state... [id=/schreinerei/db/user]
module.projects.aws_ssm_parameter.immoly_db_user: Refreshing state... [id=/immoly/db/user]
module.projects.aws_ssm_parameter.teachme_keycloak_db_postgres_user: Refreshing state... [id=/teachme/keycloak-db/postgres_user]
module.projects.aws_ssm_parameter.message_router_api_key: Refreshing state... [id=/message-router/api-key]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_api_token: Refreshing state... [id=/joy_alemazung/strapi/api_token]
module.projects.aws_ssm_parameter.schreinerei_keycloak_admin_client_id: Refreshing state... [id=/schreinerei/keycloak/admin_client_id]
module.projects.aws_ssm_parameter.teachme_keycloak_keystore_password: Refreshing state... [id=/teachme/keycloak/keystore_password]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_app_keys: Refreshing state... [id=/joy_alemazung/strapi/app_keys]
module.projects.aws_ssm_parameter.message_router_resend_api_key: Refreshing state... [id=/message-router/resend-api-key]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_transfer_token_salt: Refreshing state... [id=/joy_alemazung/strapi/transfer_token_salt]
module.projects.aws_ssm_parameter.message_router_resend_api_key_full: Refreshing state... [id=/message-router/resend-api-key-full]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_api_url: Refreshing state... [id=/joy_alemazung/strapi/api_url]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_db_password: Refreshing state... [id=/joy_alemazung/strapi/db/password]
module.projects.aws_ssm_parameter.message_router_from_email: Refreshing state... [id=/message-router/from-email]
module.projects.aws_ssm_parameter.business_website_notifications_recipient_email_address: Refreshing state... [id=/business-website/notifications/recipient_email_address]
module.projects.aws_ssm_parameter.joy_alemazung_notifications_recipient_email_address: Refreshing state... [id=/joy_alemazung/notifications/recipient_email_address]
module.projects.aws_ssm_parameter.joy_alemazung_strapi_db_encryption_key: Refreshing state... [id=/joy_alemazung/strapi/db/encryption_key]
module.projects.aws_ssm_parameter.paperless_secret_key: Refreshing state... [id=/paperless/secret-key]
module.projects.aws_ssm_parameter.teachme_backend_jwt_refresh_secret: Refreshing state... [id=/teachme/backend/jwt_refresh_secret]
module.projects.aws_ssm_parameter.teachme_backend_stripe_webhook_secret: Refreshing state... [id=/teachme/backend/stripe_webhook_secret]
module.projects.aws_ssm_parameter.teachme_backend_recaptcha_secret: Refreshing state... [id=/teachme/backend/recaptcha_secret]
aws_iam_user.external_secrets: Refreshing state... [id=external-secrets-ssm]
module.projects.aws_ssm_parameter.umami_db_password: Refreshing state... [id=/umami/db/password]
module.projects.aws_ssm_parameter.teachme_backend_db_password: Refreshing state... [id=/teachme/backend/db_password]
module.projects.aws_ssm_parameter.schluesselmomente_be_mailgun_api_key: Refreshing state... [id=/schluesselmomente/be/mailgun_api_key]
module.projects.aws_ssm_parameter.vogthof_recipient_email: Refreshing state... [id=/vogthof/notifications/recipient_email_address]
module.projects.aws_ssm_parameter.teachme_keycloak_db_password: Refreshing state... [id=/teachme/keycloak/db_password]
module.projects.aws_ssm_parameter.schluesselmomente_be_schluesselmomente_sendkey: Refreshing state... [id=/schluesselmomente/be/schluesselmomente_sendkey]
module.projects.aws_ssm_parameter.immoly_db_name: Refreshing state... [id=/immoly/db/name]
aws_iam_openid_connect_provider.github: Refreshing state... [id=arn:aws:iam::787858641164:oidc-provider/token.actions.githubusercontent.com]
module.projects.aws_ssm_parameter.schreinerei_keycloak_admin_realm: Refreshing state... [id=/schreinerei/keycloak/admin_realm]
module.projects.aws_ssm_parameter.teachme_backend_session_secret: Refreshing state... [id=/teachme/backend/session_secret]
module.projects.aws_ssm_parameter.teachme_backend_stripe_test_key: Refreshing state... [id=/teachme/backend/stripe_test_key]
module.projects.aws_ssm_parameter.gmymf_medusa_jwt_secret: Refreshing state... [id=/gmymf-medusa/jwt/secret]
module.projects.aws_ssm_parameter.schreinerei_mollie_api_key: Refreshing state... [id=/schreinerei/mollie/api_key]
module.projects.aws_ssm_parameter.hetzner_cloud_server_1_openssl_private_ssh_key: Refreshing state... [id=/ssh/hetzner-cloud-server-1/openssl_deployment_private_ssh_key]
module.projects.aws_ssm_parameter.teachme_keycloak_admin_username: Refreshing state... [id=/teachme/keycloak/admin_username]
module.projects.aws_ssm_parameter.teachme_backend_db_username: Refreshing state... [id=/teachme/backend/db_username]
module.projects.aws_ssm_parameter.schreinerei_db_password: Refreshing state... [id=/schreinerei/db/password]
module.projects.aws_ssm_parameter.schluesselmomente_be_password: Refreshing state... [id=/schluesselmomente/be/password]
data.aws_caller_identity.current: Reading...
data.aws_caller_identity.current: Read complete after 0s [id=787858641164]
module.projects.aws_ssm_parameter.schreinerei_keycloak_admin_client_secret: Refreshing state... [id=/schreinerei/keycloak/admin_client_secret]
module.projects.aws_ssm_parameter.teachme_backend_keycloak_client_secret: Refreshing state... [id=/teachme/backend/keycloak_client_secret]
module.projects.aws_ssm_parameter.gmymf_medusa_db_password: Refreshing state... [id=/gmymf-medusa/db/password]
aws_iam_role.ci-role: Refreshing state... [id=ci-role]
module.dns.digitalocean_record.alemazung_de_api_A: Refreshing state... [id=1825319355]
module.dns.digitalocean_record.alemazung_de_ns1: Refreshing state... [id=1813504225]
module.dns.digitalocean_record.alemazung_de_A: Refreshing state... [id=1813504226]
module.dns.digitalocean_record.alemazung_de_ns3: Refreshing state... [id=1813504229]
module.dns.digitalocean_record.alemazung_de_www_api_A: Refreshing state... [id=1825319353]
module.dns.digitalocean_record.alemazung_de_www_A: Refreshing state... [id=1813504228]
module.dns.digitalocean_record.alemazung_de_ns2: Refreshing state... [id=1813504227]
module.projects.aws_ssm_parameter.hetzner_cloud_server_1_private_ssh_key: Refreshing state... [id=/ssh/hetzner-cloud-server-1/deployment_private_ssh_key]
hcloud_server.bot_node[0]: Refreshing state... [id=154112110]
hcloud_server.k8s_worker[0]: Refreshing state... [id=126420344]
aws_iam_role_policy.terraform_ci_policy: Refreshing state... [id=terraform-ci-role:terraform-ci-policy]
aws_iam_role_policy.ci-policy: Refreshing state... [id=ci-role:ci-policy]
hcloud_firewall_attachment.bot_node: Refreshing state... [id=11352564]
hcloud_firewall_attachment.k8s_cluster: Refreshing state... [id=10471312]
local_file.ansible_inventory: Refreshing state... [id=bbe78095307aeaaedd0eb4fdc9488580dd9eaa2a]
aws_iam_user_policy.external_secrets_ssm: Refreshing state... [id=external-secrets-ssm:external-secrets-ssm-read]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # local_file.ansible_inventory will be created
  + resource "local_file" "ansible_inventory" {
      + content              = (sensitive value)
      + content_base64sha256 = (known after apply)
      + content_base64sha512 = (known after apply)
      + content_md5          = (known after apply)
      + content_sha1         = (known after apply)
      + content_sha256       = (known after apply)
      + content_sha512       = (known after apply)
      + directory_permission = "0777"
      + file_permission      = "0777"
      + filename             = ".././ansible/inventory/k8s_hosts.ini"
      + id                   = (known after apply)
    }

  # module.dns.digitalocean_record.jakob_lingel_dev_tango will be created
  + resource "digitalocean_record" "jakob_lingel_dev_tango" {
      + domain = "jakob-lingel.dev"
      + fqdn   = (known after apply)
      + id     = (known after apply)
      + name   = "tango"
      + ttl    = 1800
      + type   = "CNAME"
      + value  = "jakob-lingel.dev."
    }

Plan: 2 to add, 0 to change, 0 to destroy.

Warning: Deprecated attribute

  on main.tf line 142, in resource "hcloud_server" "k8s_node":
 142:       datacenter,

The attribute "datacenter" is deprecated. Refer to the provider documentation
for details.

(and 3 more similar warnings elsewhere)

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "tfplan"

Pushed by: @Davidcode2, Action: pull_request

@Davidcode2
Davidcode2 merged commit 7dc8d3e into main Aug 5, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant