fix: var test

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30943230" -> "30944018"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30943229" -> "30944032"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30943231" -> "30943973"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 0 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 0 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

Ran Plan for dir: terraform/atlantis workspace: default
Plan Error
Show Output
running "/usr/local/bin/terraform init -input=false -no-color -upgrade" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis": exit status 1

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding latest version of hashicorp/helm...
- Finding latest version of hashicorp/kubernetes...
- Finding latest version of hashicorp/tls...
- Finding latest version of hashicorp/random...
- Finding latest version of hashicorp/template...
- Finding latest version of hashicorp/grafana...
- Finding digitalocean/digitalocean versions matching ">= 1.5.0, 2.17.1"...
- Using hashicorp/tls v3.4.0 from the shared cache directory
- Using hashicorp/random v3.3.1 from the shared cache directory
- Using hashicorp/template v2.2.0 from the shared cache directory
- Using digitalocean/digitalocean v2.17.1 from the shared cache directory
- Using hashicorp/helm v2.6.0 from the shared cache directory
- Using hashicorp/kubernetes v2.11.0 from the shared cache directory

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: Failed to query available provider packages

Could not retrieve the list of available versions for provider
hashicorp/grafana: provider registry registry.terraform.io does not have a
provider named registry.terraform.io/hashicorp/grafana

Did you intend to use grafana/grafana? If so, you must specify that source
address in each module which requires that provider. To see which modules are
currently depending on hashicorp/grafana, run the following command:
    terraform providers

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Plan Error
Show Output
running "/usr/local/bin/terraform init -input=false -no-color -upgrade" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis": exit status 1
There are some problems with the configuration, described below.

The Terraform configuration must be valid before initialization so that
Terraform can determine which modules and providers need to be installed.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: Invalid provider local name

  on providers.tf line 15:
  15: provider "grafana/grafana" {

grafana/grafana is an invalid provider local name: must contain only letters,
digits, and dashes, and may not use leading or trailing dashes

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30943230" -> "30944018"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30943229" -> "30944032"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30943231" -> "30943973"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 0 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 0 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Plan Error
Show Output
running "/usr/local/bin/terraform plan -input=false -refresh -no-color -out \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis": exit status 1
tls_private_key.ca-vpn: Refreshing state... [id=f5f9ae493ebee66b344d287ab028568ec589d49b]
tls_private_key.ca: Refreshing state... [id=1de4512aa1ef3fcedb1bf04b728af0ccbc04ccb0]
tls_private_key.key: Refreshing state... [id=3ddd19aec0513c0b8cd92587a9ffa5664e20e9d8]
tls_private_key.key-vpn: Refreshing state... [id=e798a3fd6780fc9da6ae8073c613480f98768d3a]
random_id.encryption-key: Refreshing state... [id=GgDTPO6Oi1yzhAfimiyk5iwBsDYjQHbPLDx7n8lYbns]
tls_self_signed_cert.ca: Refreshing state... [id=214559868745378656370816319241297031822]
tls_self_signed_cert.ca-vpn: Refreshing state... [id=208825983993061009896657100376755378115]
tls_cert_request.request-vpn: Refreshing state... [id=02cf5b2025035d190fd100c429f1022ee0e92f3d]
tls_cert_request.request: Refreshing state... [id=35dc57c82780e08a9b85a20333b116d49c9e2c50]
tls_locally_signed_cert.cert-vpn: Refreshing state... [id=169714141650947779387272310458159530852]
tls_locally_signed_cert.cert: Refreshing state... [id=61178398772900659640026066172511869617]
helm_release.mongodb: Refreshing state... [id=pritunl-mongodb]
kubernetes_secret.loki-tls: Refreshing state... [id=default/wayofthesys-com-loki-tls]
kubernetes_namespace.mongodb: Refreshing state... [id=mongodb]
kubernetes_namespace.pritunl: Refreshing state... [id=pritunl]
kubernetes_secret.docker_login_secret: Refreshing state... [id=pritunl/wayofthesys-com-docker-login]
kubernetes_namespace.loki: Refreshing state... [id=loki]
kubernetes_secret.mongodb_root_password: Refreshing state... [id=pritunl/mongodb-root-password]
kubernetes_secret.tls: Refreshing state... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Refreshing state... [id=pritunl/wayofthesys-com-vpn-tls]
helm_release.prometheus: Refreshing state... [id=prom-operator]
helm_release.loki: Refreshing state... [id=loki]
helm_release.pritunl: Refreshing state... [id=pritunl]
kubernetes_ingress.grafana_cluster_ingress["wayofthesys.com"]: Refreshing state... [id=default/wayofthesys.com-grafana-ingress]
kubernetes_ingress.loki_cluster_ingress["wayofthesys.com"]: Refreshing state... [id=default/wayofthesys.com-loki-ingress]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

Error: expected "url" to have a host, got wayofthesys.com/grafana

  with provider["registry.terraform.io/grafana/grafana"],
  on providers.tf line 20, in provider "grafana":
  20:   url  = "${var.loki_domain[0]}/grafana"

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30943230" -> "30944018"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30943231" -> "30943973"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30943229" -> "30944032"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # grafana_data_source.influxdb will be created
+ resource "grafana_data_source" "influxdb" {
      + access_mode        = "proxy"
      + basic_auth_enabled = false
      + id                 = (known after apply)
      + is_default         = false
      + name               = "loki"
      + type               = "loki"
      + uid                = (known after apply)
      + url                = "http://loki:3100/"
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply

Ran Apply for dir: terraform/atlantis workspace: default
Apply Error
Show Output
running "/usr/local/bin/terraform apply -input=false -no-color \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis": exit status 1
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
grafana_data_source.influxdb: Creating...
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
grafana_data_source.influxdb: Still creating... [10s elapsed]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: Post "https://wayofthesys.com/grafana/api/datasources": x509: certificate is valid for ingress.local, not wayofthesys.com

  with grafana_data_source.influxdb,
  on grafana.tf line 1, in resource "grafana_data_source" "influxdb":
   1: resource "grafana_data_source" "influxdb" {

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "31234355" -> "31234963"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "31234356" -> "31234866"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "31234357" -> "31234918"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # grafana_data_source.influxdb will be created
+ resource "grafana_data_source" "influxdb" {
      + access_mode        = "proxy"
      + basic_auth_enabled = false
      + id                 = (known after apply)
      + is_default         = false
      + name               = "loki"
      + type               = "loki"
      + uid                = (known after apply)
      + url                = "http://loki:3100/"
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply

Ran Apply for dir: terraform/atlantis workspace: default
Apply Error
Show Output
running "/usr/local/bin/terraform apply -input=false -no-color \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis": exit status 1
grafana_data_source.influxdb: Creating...
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls-vpn: Modifications complete after 1s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.loki-tls: Modifications complete after 1s [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifications complete after 1s [id=pritunl/wayofthesys-com-pritunl-tls]
grafana_data_source.influxdb: Still creating... [10s elapsed]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: Post "https://wayofthesys.com/grafana/api/datasources": x509: certificate is valid for ingress.local, not wayofthesys.com

  with grafana_data_source.influxdb,
  on grafana.tf line 1, in resource "grafana_data_source" "influxdb":
   1: resource "grafana_data_source" "influxdb" {

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "31235329" -> "31235858"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "31235328" -> "31235881"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "31235327" -> "31235899"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # grafana_data_source.influxdb will be created
+ resource "grafana_data_source" "influxdb" {
      + access_mode        = "proxy"
      + basic_auth_enabled = false
      + id                 = (known after apply)
      + is_default         = false
      + name               = "loki"
      + type               = "loki"
      + uid                = (known after apply)
      + url                = "http://loki:3100/"
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply -d terraform/atlantis

atlantis apply -d terraform/atlantis

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "31236560" -> "31237079"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "31236559" -> "31237111"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "31236561" -> "31237124"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # grafana_data_source.influxdb will be created
+ resource "grafana_data_source" "influxdb" {
      + access_mode        = "proxy"
      + basic_auth_enabled = false
      + id                 = (known after apply)
      + is_default         = false
      + name               = "loki"
      + type               = "loki"
      + uid                = (known after apply)
      + url                = "http://loki:3100/"
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

Ran Apply for dir: terraform/atlantis workspace: default
Show Output
grafana_data_source.influxdb: Creating...
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
grafana_data_source.influxdb: Creation complete after 0s [id=2]
kubernetes_secret.loki-tls: Modifications complete after 1s [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifications complete after 1s [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Modifications complete after 1s [id=pritunl/wayofthesys-com-vpn-tls]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Apply complete! Resources: 1 added, 3 changed, 0 destroyed.

Ran Plan for dir: terraform/atlantis workspace: default
Plan Error
Show Output
running "/usr/local/bin/terraform plan -input=false -refresh -no-color -out \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis": exit status 1

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 5 more similar warnings elsewhere)

Error: Missing required argument

  on grafana.tf line 8, in resource "grafana_dashboard" "loki-metrics":
   8: resource "grafana_dashboard" "loki-metrics" {

The argument "config_json" is required, but no definition was found.

Ran Plan for dir: terraform/atlantis workspace: default
Plan Error
Show Output
running "/usr/local/bin/terraform plan -input=false -refresh -no-color -out \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis": exit status 1

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 5 more similar warnings elsewhere)

Error: Invalid function argument

  on grafana.tf line 9, in resource "grafana_dashboard" "loki-metrics":
   9:   config_json = file("loki_dashboard.json")

Invalid value for "path" parameter: no file exists at loki_dashboard.json;
this function works only with files that are distributed as part of the
configuration source code, so if this file will be created by a resource in
this configuration you must instead obtain this result from an attribute of
that resource.

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "31253978" -> "31254496"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "31253980" -> "31254524"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "31253979" -> "31254541"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place
- destroy

Terraform will perform the following actions:

  # grafana_dashboard.loki-metrics will be created
+ resource "grafana_dashboard" "loki-metrics" {
      + config_json  = jsonencode(
            {
              + __inputs      = [
                  + {
                      + description = ""
                      + label       = "Loki"
                      + name        = "DS_LOKI"
                      + pluginId    = "loki"
                      + pluginName  = "Loki"
                      + type        = "datasource"
                    },
                  + {
                      + description = ""
                      + label       = "Prometheus"
                      + name        = "DS_PROMETHEUS"
                      + pluginId    = "prometheus"
                      + pluginName  = "Prometheus"
                      + type        = "datasource"
                    },
                ]
              + __requires    = [
                  + {
                      + id      = "grafana"
                      + name    = "Grafana"
                      + type    = "grafana"
                      + version = "6.7.0"
                    },
                  + {
                      + id      = "graph"
                      + name    = "Graph"
                      + type    = "panel"
                      + version = ""
                    },
                  + {
                      + id      = "logs"
                      + name    = "Logs"
                      + type    = "panel"
                      + version = ""
                    },
                  + {
                      + id      = "loki"
                      + name    = "Loki"
                      + type    = "datasource"
                      + version = "1.0.0"
                    },
                  + {
                      + id      = "prometheus"
                      + name    = "Prometheus"
                      + type    = "datasource"
                      + version = "1.0.0"
                    },
                  + {
                      + id      = "text"
                      + name    = "Text"
                      + type    = "panel"
                      + version = ""
                    },
                ]
              + annotations   = {
                  + list = [
                      + {
                          + $$hashKey  = "object:75"
                          + builtIn    = 1
                          + datasource = "-- Grafana --"
                          + enable     = true
                          + hide       = true
                          + iconColor  = "rgba(0, 211, 255, 1)"
                          + name       = "Annotations & Alerts"
                          + type       = "dashboard"
                        },
                    ]
                }
              + description   = "Loki logs panel with prometheus variables "
              + editable      = true
              + gnetId        = 12019
              + graphTooltip  = 0
              + iteration     =<PHONE_NUMBER>167
              + links         = []
              + panels        = [
                  + {
                      + aliasColors     = {}
                      + bars            = true
                      + dashLength      = 10
                      + dashes          = false
                      + datasource      = "${DS_LOKI}"
                      + fill            = 1
                      + fillGradient    = 0
                      + gridPos         = {
                          + h = 3
                          + w = 24
                          + x = 0
                          + y = 0
                        }
                      + hiddenSeries    = false
                      + legend          = {
                          + avg     = false
                          + current = false
                          + max     = false
                          + min     = false
                          + show    = false
                          + total   = false
                          + values  = false
                        }
                      + lines           = false
                      + linewidth       = 1
                      + nullPointMode   = "null"
                      + options         = {
                          + dataLinks = []
                        }
                      + percentage      = false
                      + pointradius     = 2
                      + points          = false
                      + renderer        = "flot"
                      + seriesOverrides = []
                      + spaceLength     = 10
                      + stack           = false
                      + steppedLine     = false
                      + targets         = [
                          + {
                              + expr  = "sum(count_over_time({namespace=\"$namespace\", instance=~\"$pod\"} |~ \"$search\"[$__interval]))"
                              + refId = "A"
                            },
                        ]
                      + thresholds      = []
                      + timeFrom        = null
                      + timeRegions     = []
                      + timeShift       = null
                      + title           = ""
                      + tooltip         = {
                          + shared     = true
                          + sort       = 0
                          + value_type = "individual"
                        }
                      + type            = "graph"
                      + xaxis           = {
                          + buckets = null
                          + mode    = "time"
                          + name    = null
                          + show    = true
                          + values  = []
                        }
                      + yaxes           = [
                          + {
                              + $$hashKey = "object:168"
                              + format    = "short"
                              + label     = null
                              + logBase   = 1
                              + max       = null
                              + min       = null
                              + show      = false
                            },
                          + {
                              + $$hashKey = "object:169"
                              + format    = "short"
                              + label     = null
                              + logBase   = 1
                              + max       = null
                              + min       = null
                              + show      = false
                            },
                        ]
                      + yaxis           = {
                          + align      = false
                          + alignLevel = null
                        }
                    },
                  + {
                      + datasource    = "${DS_LOKI}"
                      + gridPos       = {
                          + h = 25
                          + w = 24
                          + x = 0
                          + y = 3
                        }
                      + maxDataPoints = ""
                      + options       = {
                          + showLabels     = false
                          + showTime       = true
                          + sortOrder      = "Descending"
                          + wrapLogMessage = true
                        }
                      + targets       = [
                          + {
                              + expr  = "{namespace=\"$namespace\", instance=~\"$pod\"} |~ \"$search\""
                              + refId = "A"
                            },
                        ]
                      + timeFrom      = null
                      + timeShift     = null
                      + title         = "Logs Panel"
                      + type          = "logs"
                    },
                  + {
                      + content     = <<-EOT
                            <div style="text-align:center"> For Grafana Loki blog example </div>

                        EOT
                      + datasource  = null
                      + gridPos     = {
                          + h = 3
                          + w = 24
                          + x = 0
                          + y = 28
                        }
                      + mode        = "html"
                      + timeFrom    = null
                      + timeShift   = null
                      + title       = ""
                      + transparent = true
                      + type        = "text"
                    },
                ]
              + schemaVersion = 22
              + style         = "dark"
              + tags          = []
              + templating    = {
                  + list = [
                      + {
                          + allValue       = null
                          + current        = {}
                          + datasource     = "${DS_PROMETHEUS}"
                          + definition     = "label_values(kube_pod_info, namespace)"
                          + hide           = 0
                          + includeAll     = false
                          + index          = -1
                          + label          = null
                          + multi          = false
                          + name           = "namespace"
                          + options        = []
                          + query          = "label_values(kube_pod_info, namespace)"
                          + refresh        = 1
                          + regex          = ""
                          + skipUrlSync    = false
                          + sort           = 0
                          + tagValuesQuery = ""
                          + tags           = []
                          + tagsQuery      = ""
                          + type           = "query"
                          + useTags        = false
                        },
                      + {
                          + allValue       = ".*"
                          + current        = {}
                          + datasource     = "${DS_PROMETHEUS}"
                          + definition     = "label_values(container_network_receive_bytes_total{namespace=~\"$namespace\"},pod)"
                          + hide           = 0
                          + includeAll     = true
                          + index          = -1
                          + label          = null
                          + multi          = true
                          + name           = "pod"
                          + options        = []
                          + query          = "label_values(container_network_receive_bytes_total{namespace=~\"$namespace\"},pod)"
                          + refresh        = 1
                          + regex          = ""
                          + skipUrlSync    = false
                          + sort           = 0
                          + tagValuesQuery = ""
                          + tags           = []
                          + tagsQuery      = ""
                          + type           = "query"
                          + useTags        = false
                        },
                      + {
                          + current     = {
                              + selected = false
                              + text     = "level=warn"
                              + value    = "level=warn"
                            }
                          + hide        = 0
                          + label       = null
                          + name        = "search"
                          + options     = [
                              + {
                                  + selected = true
                                  + text     = "level=warn"
                                  + value    = "level=warn"
                                },
                            ]
                          + query       = "level=warn"
                          + skipUrlSync = false
                          + type        = "textbox"
                        },
                    ]
                }
              + time          = {
                  + from = "now-30m"
                  + to   = "now"
                }
              + timepicker    = {
                  + refresh_intervals = [
                      + "5s",
                      + "10s",
                      + "30s",
                      + "1m",
                      + "5m",
                      + "15m",
                      + "30m",
                      + "1h",
                      + "2h",
                      + "1d",
                    ]
                }
              + timezone      = ""
              + title         = "Loki Dashboard quick search"
              + uid           = "liz0yRCZz"
              + variables     = {
                  + list = []
                }
            }
        )
      + dashboard_id = (known after apply)
      + id           = (known after apply)
      + slug         = (known after apply)
      + uid          = (known after apply)
      + url          = (known after apply)
      + version      = (known after apply)
    }

  # grafana_data_source.influxdb will be destroyed
- resource "grafana_data_source" "influxdb" {
      - access_mode        = "proxy" -> null
      - basic_auth_enabled = false -> null
      - id                 = "2" -> null
      - is_default         = false -> null
      - name               = "loki" -> null
      - type               = "loki" -> null
      - uid                = "fpTBgNqnk" -> null
      - url                = "http://loki:3100/" -> null
    }

  # grafana_data_source.loki will be created
+ resource "grafana_data_source" "loki" {
      + access_mode        = "proxy"
      + basic_auth_enabled = false
      + id                 = (known after apply)
      + is_default         = false
      + name               = "loki"
      + type               = "loki"
      + uid                = (known after apply)
      + url                = "http://loki:3100/"
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 2 to add, 3 to change, 1 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 2 to add, 3 to change, 1 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply

Ran Apply for dir: terraform/atlantis workspace: default
Apply Error
Show Output
running "/usr/local/bin/terraform apply -input=false -no-color \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis": exit status 1
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
grafana_data_source.influxdb: Destroying... [id=2]
grafana_dashboard.loki-metrics: Creating...
grafana_data_source.loki: Creating...
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
grafana_data_source.influxdb: Destruction complete after 0s
grafana_dashboard.loki-metrics: Creation complete after 0s [id=liz0yRCZz]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: status: 409, body: {"message":"data source with the same name already exists","traceID":"00000000000000000000000000000000"}

  with grafana_data_source.loki,
  on grafana.tf line 1, in resource "grafana_data_source" "loki":
   1: resource "grafana_data_source" "loki" {

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "31704420" -> "31705033"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "31704419" -> "31704974"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "31704421" -> "31704939"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # grafana_data_source.loki will be created
+ resource "grafana_data_source" "loki" {
      + access_mode        = "proxy"
      + basic_auth_enabled = false
      + id                 = (known after apply)
      + is_default         = false
      + name               = "loki"
      + type               = "loki"
      + uid                = (known after apply)
      + url                = "http://loki:3100/"
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply -d terraform/atlantis

Ran Apply for dir: terraform/atlantis workspace: default
Show Output
grafana_data_source.loki: Creating...
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
grafana_data_source.loki: Creation complete after 0s [id=3]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Apply complete! Resources: 1 added, 3 changed, 0 destroyed.

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "31705317" -> "31705738"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "31705318" -> "31705768"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "31705316" -> "31705749"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # grafana_dashboard.loki-metrics will be updated in-place
~ resource "grafana_dashboard" "loki-metrics" {
      ~ config_json  = jsonencode(
          ~ {
              ~ __inputs      = [
                  ~ {
                      ~ name        = "DS_LOKI" -> "loki"
                        # (5 unchanged elements hidden)
                    },
                  ~ {
                      ~ name        = "DS_PROMETHEUS" -> "prometheus"
                        # (5 unchanged elements hidden)
                    },
                ]
                # (19 unchanged elements hidden)
            }
        )
        id           = "liz0yRCZz"
        # (5 unchanged attributes hidden)
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 0 to add, 4 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 0 to add, 4 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply

atlantis apply

Ran Apply for dir: terraform/atlantis workspace: default
Show Output
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
grafana_dashboard.loki-metrics: Modifying... [id=liz0yRCZz]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
grafana_dashboard.loki-metrics: Modifications complete after 0s [id=liz0yRCZz]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Apply complete! Resources: 0 added, 4 changed, 0 destroyed.

Ran Plan for dir: terraform/atlantis workspace: default
Plan Error
Show Output
running "/usr/local/bin/terraform plan -input=false -refresh -no-color -out \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/22/default/terraform/atlantis": exit status 1

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 16, in provider "digitalocean":
  16:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 5 more similar warnings elsewhere)

Error: Unsupported argument

  on grafana.tf line 6, in resource "grafana_data_source" "loki":
   6:   query_timeout = 300

An argument named "query_timeout" is not expected here.

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # grafana_dashboard.loki-metrics has been changed
~ resource "grafana_dashboard" "loki-metrics" {
      ~ config_json  = jsonencode(
          ~ {
              - __inputs             = [
                  - {
                      - description = ""
                      - label       = "Loki"
                      - name        = "loki"
                      - pluginId    = "loki"
                      - pluginName  = "Loki"
                      - type        = "datasource"
                    },
                  - {
                      - description = ""
                      - label       = "Prometheus"
                      - name        = "prometheus"
                      - pluginId    = "prometheus"
                      - pluginName  = "Prometheus"
                      - type        = "datasource"
                    },
                ] -> null
              - __requires           = [
                  - {
                      - id      = "grafana"
                      - name    = "Grafana"
                      - type    = "grafana"
                      - version = "6.7.0"
                    },
                  - {
                      - id      = "graph"
                      - name    = "Graph"
                      - type    = "panel"
                      - version = ""
                    },
                  - {
                      - id      = "logs"
                      - name    = "Logs"
                      - type    = "panel"
                      - version = ""
                    },
                  - {
                      - id      = "loki"
                      - name    = "Loki"
                      - type    = "datasource"
                      - version = "1.0.0"
                    },
                  - {
                      - id      = "prometheus"
                      - name    = "Prometheus"
                      - type    = "datasource"
                      - version = "1.0.0"
                    },
                  - {
                      - id      = "text"
                      - name    = "Text"
                      - type    = "panel"
                      - version = ""
                    },
                ] -> null
              ~ annotations          = {
                  ~ list = [
                      ~ {
                          ~ datasource = "-- Grafana --" -> {
                              + type = "datasource"
                              + uid  = "grafana"
                            }
                          + target     = {
                              + limit    = 100
                              + matchAny = false
                              + tags     = []
                              + type     = "dashboard"
                            }
                            # (7 unchanged elements hidden)
                        },
                    ]
                }
              + fiscalYearStartMonth = 0
              ~ iteration            =<PHONE_NUMBER>167 -><PHONE_NUMBER>342
              + liveNow              = false
              ~ panels               = [
                  ~ {
                      ~ datasource      = "${DS_LOKI}" -> {
                          + uid = "loki"
                        }
                      + fieldConfig     = {
                          + defaults  = {
                              + links = []
                            }
                          + overrides = []
                        }
                      ~ options         = {
                          + alertThreshold = true
                          - dataLinks      = [] -> null
                        }
                      + pluginVersion   = "8.5.3"
                      - timeFrom        = null -> null
                      - timeShift       = null -> null
                      - title           = "" -> null
                      ~ xaxis           = {
                          - buckets = null -> null
                          - name    = null -> null
                            # (3 unchanged elements hidden)
                        }
                      ~ yaxes           = [
                          ~ {
                              - label     = null -> null
                              - max       = null -> null
                              - min       = null -> null
                                # (4 unchanged elements hidden)
                            },
                          ~ {
                              - label     = null -> null
                              - max       = null -> null
                              - min       = null -> null
                                # (4 unchanged elements hidden)
                            },
                        ]
                      ~ yaxis           = {
                          - alignLevel = null -> null
                            # (1 unchanged element hidden)
                        }
                        # (25 unchanged elements hidden)
                    },
                  ~ {
                      ~ datasource    = "${DS_LOKI}" -> {
                          + uid = "loki"
                        }
                      ~ options       = {
                          + dedupStrategy      = "none"
                          + enableLogDetails   = true
                          + prettifyLogMessage = false
                          + showCommonLabels   = false
                            # (4 unchanged elements hidden)
                        }
                      - timeFrom      = null -> null
                      - timeShift     = null -> null
                        # (5 unchanged elements hidden)
                    },
                  ~ {
                      ~ datasource  = null -> {
                          + type = "prometheus"
                          + uid  = "prometheus"
                        }
                      - timeFrom    = null -> null
                      - timeShift   = null -> null
                      - title       = "" -> null
                        # (5 unchanged elements hidden)
                    },
                ]
              ~ schemaVersion        = 22 -> 36
              ~ templating           = {
                  ~ list = [
                      ~ {
                          - allValue       = null -> null
                          ~ datasource     = "${DS_PROMETHEUS}" -> {
                              + uid = "prometheus"
                            }
                          + error          = {
                              + message = "Datasource ${DS_PROMETHEUS} was not found"
                            }
                          - index          = -1 -> null
                          - label          = null -> null
                          - tags           = [] -> null
                            # (16 unchanged elements hidden)
                        },
                      ~ {
                          ~ current        = {
                              + text  = [
                                  + null,
                                ]
                              + value = [
                                  + null,
                                ]
                            }
                          ~ datasource     = "${DS_PROMETHEUS}" -> {
                              + uid = "prometheus"
                            }
                          + error          = {
                              + message = "Datasource ${DS_PROMETHEUS} was not found"
                            }
                          - index          = -1 -> null
                          - label          = null -> null
                          - tags           = [] -> null
                            # (16 unchanged elements hidden)
                        },
                      ~ {
                          - label       = null -> null
                            # (7 unchanged elements hidden)
                        },
                    ]
                }
              - variables            = {
                  - list = []
                } -> null
              + weekStart            = ""
                # (12 unchanged elements hidden)
            }
        )
        id           = "liz0yRCZz"
      ~ version      = 2 -> 3
        # (4 unchanged attributes hidden)
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "31706579" -> "31707050"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "31706581" -> "31707066"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "31706580" -> "31706990"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # grafana_dashboard.loki-metrics will be updated in-place
~ resource "grafana_dashboard" "loki-metrics" {
      ~ config_json  = jsonencode(
          ~ {
              + __inputs             = [
                  + {
                      + description = ""
                      + label       = "Loki"
                      + name        = "loki"
                      + pluginId    = "loki"
                      + pluginName  = "Loki"
                      + type        = "datasource"
                    },
                  + {
                      + description = ""
                      + label       = "Prometheus"
                      + name        = "prometheus"
                      + pluginId    = "prometheus"
                      + pluginName  = "Prometheus"
                      + type        = "datasource"
                    },
                ]
              + __requires           = [
                  + {
                      + id      = "grafana"
                      + name    = "Grafana"
                      + type    = "grafana"
                      + version = "6.7.0"
                    },
                  + {
                      + id      = "graph"
                      + name    = "Graph"
                      + type    = "panel"
                      + version = ""
                    },
                  + {
                      + id      = "logs"
                      + name    = "Logs"
                      + type    = "panel"
                      + version = ""
                    },
                  + {
                      + id      = "loki"
                      + name    = "Loki"
                      + type    = "datasource"
                      + version = "1.0.0"
                    },
                  + {
                      + id      = "prometheus"
                      + name    = "Prometheus"
                      + type    = "datasource"
                      + version = "1.0.0"
                    },
                  + {
                      + id      = "text"
                      + name    = "Text"
                      + type    = "panel"
                      + version = ""
                    },
                ]
              ~ annotations          = {
                  ~ list = [
                      ~ {
                          ~ datasource = {
                              - type = "datasource"
                              - uid  = "grafana"
                            } -> "-- Grafana --"
                          - target     = {
                              - limit    = 100
                              - matchAny = false
                              - tags     = []
                              - type     = "dashboard"
                            } -> null
                            # (7 unchanged elements hidden)
                        },
                    ]
                }
              - fiscalYearStartMonth = 0 -> null
              ~ iteration            =<PHONE_NUMBER>342 -><PHONE_NUMBER>167
              - liveNow              = false -> null
              ~ panels               = [
                  ~ {
                      ~ datasource      = {
                          - uid = "loki"
                        } -> "loki"
                      - fieldConfig     = {
                          - defaults  = {
                              - links = []
                            }
                          - overrides = []
                        } -> null
                      ~ options         = {
                          - alertThreshold = true -> null
                          + dataLinks      = []
                        }
                      - pluginVersion   = "8.5.3" -> null
                      + timeFrom        = null
                      + timeShift       = null
                      + title           = ""
                      ~ xaxis           = {
                          + buckets = null
                          + name    = null
                            # (3 unchanged elements hidden)
                        }
                      ~ yaxes           = [
                          ~ {
                              + label     = null
                              + max       = null
                              + min       = null
                                # (4 unchanged elements hidden)
                            },
                          ~ {
                              + label     = null
                              + max       = null
                              + min       = null
                                # (4 unchanged elements hidden)
                            },
                        ]
                      ~ yaxis           = {
                          + alignLevel = null
                            # (1 unchanged element hidden)
                        }
                        # (25 unchanged elements hidden)
                    },
                  ~ {
                      ~ datasource    = {
                          - uid = "loki"
                        } -> "loki"
                      ~ options       = {
                          - dedupStrategy      = "none" -> null
                          - enableLogDetails   = true -> null