feat: added prometheus

atlantis plan

atlantis plan

atlantis plan

atlantis plan

atlantis plan

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30700387" -> "30701063"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30700386" -> "30701009"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30700384" -> "30700969"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be created
+ resource "helm_release" "prometheus" {
      + atomic                     = false
      + chart                      = "prometheus"
      + cleanup_on_fail            = false
      + create_namespace           = false
      + dependency_update          = false
      + disable_crd_hooks          = false
      + disable_openapi_validation = false
      + disable_webhooks           = false
      + force_update               = false
      + id                         = (known after apply)
      + lint                       = false
      + manifest                   = (known after apply)
      + max_history                = 0
      + metadata                   = (known after apply)
      + name                       = "prometheus"
      + namespace                  = "default"
      + pass_credentials           = false
      + recreate_pods              = false
      + render_subchart_notes      = true
      + replace                    = false
      + repository                 = "https://prometheus-community.github.io/helm-charts"
      + reset_values               = false
      + reuse_values               = false
      + skip_crds                  = false
      + status                     = "deployed"
      + timeout                    = 300
      + verify                     = false
      + version                    = "15.10.1"
      + wait                       = true
      + wait_for_jobs              = false
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30700386" -> "30701009"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30700384" -> "30700969"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30700387" -> "30701063"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be created
+ resource "helm_release" "prometheus" {
      + atomic                     = false
      + chart                      = "prometheus"
      + cleanup_on_fail            = false
      + create_namespace           = false
      + dependency_update          = false
      + disable_crd_hooks          = false
      + disable_openapi_validation = false
      + disable_webhooks           = false
      + force_update               = false
      + id                         = (known after apply)
      + lint                       = false
      + manifest                   = (known after apply)
      + max_history                = 0
      + metadata                   = (known after apply)
      + name                       = "prometheus"
      + namespace                  = "default"
      + pass_credentials           = false
      + recreate_pods              = false
      + render_subchart_notes      = true
      + replace                    = false
      + repository                 = "https://prometheus-community.github.io/helm-charts"
      + reset_values               = false
      + reuse_values               = false
      + skip_crds                  = false
      + status                     = "deployed"
      + timeout                    = 300
      + verify                     = false
      + version                    = "15.10.1"
      + wait                       = true
      + wait_for_jobs              = false
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30700387" -> "30701063"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30700386" -> "30701009"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30700384" -> "30700969"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be created
+ resource "helm_release" "prometheus" {
      + atomic                     = false
      + chart                      = "prometheus"
      + cleanup_on_fail            = false
      + create_namespace           = false
      + dependency_update          = false
      + disable_crd_hooks          = false
      + disable_openapi_validation = false
      + disable_webhooks           = false
      + force_update               = false
      + id                         = (known after apply)
      + lint                       = false
      + manifest                   = (known after apply)
      + max_history                = 0
      + metadata                   = (known after apply)
      + name                       = "prometheus"
      + namespace                  = "default"
      + pass_credentials           = false
      + recreate_pods              = false
      + render_subchart_notes      = true
      + replace                    = false
      + repository                 = "https://prometheus-community.github.io/helm-charts"
      + reset_values               = false
      + reuse_values               = false
      + skip_crds                  = false
      + status                     = "deployed"
      + timeout                    = 300
      + verify                     = false
      + version                    = "15.10.1"
      + wait                       = true
      + wait_for_jobs              = false
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30700387" -> "30701063"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30700384" -> "30700969"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30700386" -> "30701009"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be created
+ resource "helm_release" "prometheus" {
      + atomic                     = false
      + chart                      = "prometheus"
      + cleanup_on_fail            = false
      + create_namespace           = false
      + dependency_update          = false
      + disable_crd_hooks          = false
      + disable_openapi_validation = false
      + disable_webhooks           = false
      + force_update               = false
      + id                         = (known after apply)
      + lint                       = false
      + manifest                   = (known after apply)
      + max_history                = 0
      + metadata                   = (known after apply)
      + name                       = "prometheus"
      + namespace                  = "default"
      + pass_credentials           = false
      + recreate_pods              = false
      + render_subchart_notes      = true
      + replace                    = false
      + repository                 = "https://prometheus-community.github.io/helm-charts"
      + reset_values               = false
      + reuse_values               = false
      + skip_crds                  = false
      + status                     = "deployed"
      + timeout                    = 300
      + verify                     = false
      + version                    = "15.10.1"
      + wait                       = true
      + wait_for_jobs              = false
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply -d terraform/atlantis

atlantis apply -d terraform/atlantis

Ran Apply for dir: terraform/atlantis workspace: default
Show Output
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
helm_release.prometheus: Creating...
helm_release.prometheus: Still creating... [10s elapsed]
helm_release.prometheus: Still creating... [20s elapsed]
helm_release.prometheus: Still creating... [30s elapsed]
helm_release.prometheus: Still creating... [40s elapsed]
helm_release.prometheus: Still creating... [50s elapsed]
helm_release.prometheus: Still creating... [1m0s elapsed]
helm_release.prometheus: Creation complete after 1m0s [id=prometheus]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Apply complete! Resources: 1 added, 3 changed, 0 destroyed.

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30885779" -> "30886429"
            # (4 unchanged attributes hidden)
        }
    }
  # helm_release.prometheus has been changed
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
      ~ metadata                   = [
          ~ {
              ~ values      = jsonencode(
                  ~ {} -> null
                )
                # (6 unchanged elements hidden)
            },
        ]
        name                       = "prometheus"
        # (26 unchanged attributes hidden)
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30885780" -> "30886445"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30885781" -> "30886516"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] will be created
+ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
      + id     = (known after apply)
      + status = (known after apply)

      + metadata {
          + annotations      = {
              + "cert-manager.io/cluster-issuer"          = "zerossl"
              + "ingress.kubernetes.io/rewrite-target"    = "/"
              + "kubernetes.io/ingress.class"             = "nginx"
              + "nginx.ingress.kubernetes.io/auth-signin" = "https://$host/oauth2/start?rd=https://$host$request_uri$is_args$args"
              + "nginx.ingress.kubernetes.io/auth-url"    = "https://$host/oauth2/auth"
            }
          + generation       = (known after apply)
          + name             = "wayofthesys.com-prometheus-ingress"
          + namespace        = "default"
          + resource_version = (known after apply)
          + uid              = (known after apply)
        }

      + spec {

          + rule {
              + host = "wayofthesys.com"

              + http {
                  + path {
                      + path = "/prometheus"

                      + backend {
                          + service_name = "prometheus-server"
                          + service_port = "80"
                        }
                    }
                }
            }

          + tls {
              + hosts       = [
                  + "wayofthesys.com",
                ]
              + secret_name = "wayofthesys-com-loki-tls"
            }
        }
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 1 to add, 3 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 1 to add, 3 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply

Ran Apply for dir: terraform/atlantis workspace: default
Show Output
kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"]: Creating...
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"]: Creation complete after 0s [id=default/wayofthesys.com-prometheus-ingress]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Apply complete! Resources: 1 added, 3 changed, 0 destroyed.

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30888505" -> "30888884"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] has been changed
~ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
        id     = "default/wayofthesys.com-prometheus-ingress"
      ~ status = [
          ~ {
              ~ load_balancer = [
                  ~ {
                      ~ ingress = [
                          + {
                              + hostname = ""
                              + ip       = "<IP_ADDRESS>"
                            },
                        ]
                    },
                ]
            },
        ]

      ~ metadata {
          ~ annotations      = {
              - "nginx.ingress.kubernetes.io/auth-signin" = "https://$host/oauth2/start?rd=https://$host$request_uri$is_args$args" -> null
              - "nginx.ingress.kubernetes.io/auth-url"    = "https://$host/oauth2/auth" -> null
                # (3 unchanged elements hidden)
            }
          ~ generation       = 1 -> 5
          + labels           = {}
            name             = "wayofthesys.com-prometheus-ingress"
          ~ resource_version = "30888508" -> "30893389"
            # (2 unchanged attributes hidden)
        }

      ~ spec {

          ~ rule {
              ~ host = "wayofthesys.com" -> "prometheus.wayofthesys.com"

              ~ http {
                  ~ path {
                      ~ path = "/prometheus" -> "/"

                      ~ backend {
                          ~ service_port = "80" -> "9090"
                            # (1 unchanged attribute hidden)
                        }
                    }
                }
            }

            # (1 unchanged block hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30888507" -> "30888942"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30888506" -> "30888866"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be updated in-place
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
        name                       = "prometheus"
        # (27 unchanged attributes hidden)

      + set {
          + name  = "server.baseURL"
          + value = "wayofthesys.com/prometheus"
        }
    }

  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] will be updated in-place
~ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
        id     = "default/wayofthesys.com-prometheus-ingress"
        # (1 unchanged attribute hidden)

      ~ metadata {
          ~ annotations      = {
              + "nginx.ingress.kubernetes.io/auth-signin" = "https://$host/oauth2/start?rd=https://$host$request_uri$is_args$args"
              + "nginx.ingress.kubernetes.io/auth-url"    = "https://$host/oauth2/auth"
                # (3 unchanged elements hidden)
            }
            name             = "wayofthesys.com-prometheus-ingress"
            # (5 unchanged attributes hidden)
        }

      ~ spec {

          ~ rule {
              ~ host = "prometheus.wayofthesys.com" -> "wayofthesys.com"

              ~ http {
                  ~ path {
                      ~ path = "/" -> "/prometheus"

                      ~ backend {
                          ~ service_port = "9090" -> "80"
                            # (1 unchanged attribute hidden)
                        }
                    }
                }
            }

            # (1 unchanged block hidden)
        }
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 0 to add, 5 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 0 to add, 5 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply

Ran Apply for dir: terraform/atlantis workspace: default
Apply Error
Show Output
running "/usr/local/bin/terraform apply -input=false -no-color \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis": exit status 1
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
helm_release.prometheus: Modifying... [id=prometheus]
helm_release.prometheus: Still modifying... [id=prometheus, 10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 5m0s elapsed]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: timed out waiting for the condition

  with helm_release.prometheus,
  on prometheus.tf line 1, in resource "helm_release" "prometheus":
   1: resource "helm_release" "prometheus" {

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30895404" -> "30896008"
            # (4 unchanged attributes hidden)
        }
    }
  # helm_release.prometheus has been changed
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
      ~ metadata                   = [
          ~ {
              ~ revision    = 1 -> 2
              ~ values      = jsonencode(
                  ~ null -> {
                      + server = {
                          + baseURL = "wayofthesys.com/prometheus"
                        }
                    }
                )
                # (5 unchanged elements hidden)
            },
        ]
        name                       = "prometheus"
      ~ status                     = "deployed" -> "failed"
        # (25 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30895402" -> "30895976"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30895403" -> "30895893"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be updated in-place
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
        name                       = "prometheus"
      ~ status                     = "failed" -> "deployed"
        # (26 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] will be updated in-place
~ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
        id     = "default/wayofthesys.com-prometheus-ingress"
        # (1 unchanged attribute hidden)

      ~ metadata {
          ~ annotations      = {
              + "nginx.ingress.kubernetes.io/auth-signin" = "https://$host/oauth2/start?rd=https://$host$request_uri$is_args$args"
              + "nginx.ingress.kubernetes.io/auth-url"    = "https://$host/oauth2/auth"
                # (3 unchanged elements hidden)
            }
            name             = "wayofthesys.com-prometheus-ingress"
            # (5 unchanged attributes hidden)
        }

      ~ spec {

          ~ rule {
              ~ host = "prometheus.wayofthesys.com" -> "wayofthesys.com"

              ~ http {
                  ~ path {
                      ~ path = "/" -> "/prometheus"

                      ~ backend {
                          ~ service_port = "9090" -> "80"
                            # (1 unchanged attribute hidden)
                        }
                    }
                }
            }

            # (1 unchanged block hidden)
        }
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 0 to add, 5 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 0 to add, 5 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply

atlantis apply

Ran Apply for dir: terraform/atlantis workspace: default
Apply Error
Show Output
running "/usr/local/bin/terraform apply -input=false -no-color \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis": exit status 1
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
helm_release.prometheus: Modifying... [id=prometheus]
helm_release.prometheus: Still modifying... [id=prometheus, 10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 5m0s elapsed]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: timed out waiting for the condition

  with helm_release.prometheus,
  on prometheus.tf line 1, in resource "helm_release" "prometheus":
   1: resource "helm_release" "prometheus" {

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30897087" -> "30897778"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30897088" -> "30897816"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] has been changed
~ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
        id     = "default/wayofthesys.com-prometheus-ingress"
        # (1 unchanged attribute hidden)

      ~ metadata {
          ~ generation       = 5 -> 12
            name             = "wayofthesys.com-prometheus-ingress"
          ~ resource_version = "30893389" -> "30900383"
            # (4 unchanged attributes hidden)
        }

      ~ spec {

          ~ rule {
              ~ host = "prometheus.wayofthesys.com" -> "wayofthesys.com"

              ~ http {
                  ~ path {
                      ~ path = "/" -> "/prometheus"

                      ~ backend {
                          ~ service_port = "9090" -> "80"
                            # (1 unchanged attribute hidden)
                        }
                    }
                }
            }

            # (1 unchanged block hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30897086" -> "30897762"
            # (4 unchanged attributes hidden)
        }
    }
  # helm_release.prometheus has been changed
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
      ~ metadata                   = [
          ~ {
              ~ revision    = 2 -> 3
                # (6 unchanged elements hidden)
            },
        ]
        name                       = "prometheus"
        # (26 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be updated in-place
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
        name                       = "prometheus"
      ~ status                     = "failed" -> "deployed"
        # (26 unchanged attributes hidden)

      + set {
          + name  = "server.baseURL"
          + value = "/prometheus"
        }
      - set {
          - name  = "server.baseURL" -> null
          - value = "wayofthesys.com/prometheus" -> null
        }
    }

  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] will be updated in-place
~ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
        id     = "default/wayofthesys.com-prometheus-ingress"
        # (1 unchanged attribute hidden)

      ~ metadata {
          ~ annotations      = {
              + "nginx.ingress.kubernetes.io/auth-signin" = "https://$host/oauth2/start?rd=https://$host$request_uri$is_args$args"
              + "nginx.ingress.kubernetes.io/auth-url"    = "https://$host/oauth2/auth"
                # (3 unchanged elements hidden)
            }
            name             = "wayofthesys.com-prometheus-ingress"
            # (5 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 0 to add, 5 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 0 to add, 5 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply

Ran Apply for dir: terraform/atlantis workspace: default
Apply Error
Show Output
running "/usr/local/bin/terraform apply -input=false -no-color \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis": exit status 1
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
helm_release.prometheus: Modifying... [id=prometheus]
helm_release.prometheus: Still modifying... [id=prometheus, 10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m20s elapsed]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: deployments.apps "prometheus-server" not found

  with helm_release.prometheus,
  on prometheus.tf line 1, in resource "helm_release" "prometheus":
   1: resource "helm_release" "prometheus" {

atlantis apply

atlantis apply

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30900677" -> "30901224"
            # (4 unchanged attributes hidden)
        }
    }
  # helm_release.prometheus has been changed
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
      ~ metadata                   = [
          ~ {
              ~ revision    = 3 -> 4
              ~ values      = jsonencode(
                  ~ {
                      ~ server = {
                          ~ baseURL = "wayofthesys.com/prometheus" -> "/prometheus"
                        }
                    }
                )
                # (5 unchanged elements hidden)
            },
        ]
        name                       = "prometheus"
        # (26 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30900676" -> "30901120"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30900678" -> "30901154"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be updated in-place
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
        name                       = "prometheus"
      ~ status                     = "failed" -> "deployed"
        # (26 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] will be updated in-place
~ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
        id     = "default/wayofthesys.com-prometheus-ingress"
        # (1 unchanged attribute hidden)

      ~ metadata {
          ~ annotations      = {
              + "nginx.ingress.kubernetes.io/auth-signin" = "https://$host/oauth2/start?rd=https://$host$request_uri$is_args$args"
              + "nginx.ingress.kubernetes.io/auth-url"    = "https://$host/oauth2/auth"
                # (3 unchanged elements hidden)
            }
            name             = "wayofthesys.com-prometheus-ingress"
            # (5 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 0 to add, 5 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 0 to add, 5 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply

Ran Apply for dir: terraform/atlantis workspace: default
Apply Error
Show Output
running "/usr/local/bin/terraform apply -input=false -no-color \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis": exit status 1
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
helm_release.prometheus: Modifying... [id=prometheus]
helm_release.prometheus: Still modifying... [id=prometheus, 10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 5m0s elapsed]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: timed out waiting for the condition

  with helm_release.prometheus,
  on prometheus.tf line 1, in resource "helm_release" "prometheus":
   1: resource "helm_release" "prometheus" {

atlantis apply

atlantis apply

atlantis apply

atlantis plan

atlantis plan

atlantis plan

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # helm_release.prometheus has been changed
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
      ~ metadata                   = [
          ~ {
              ~ revision    = 6 -> 7
                # (6 unchanged elements hidden)
            },
        ]
        name                       = "prometheus"
        # (26 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30917391" -> "30917856"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30917393" -> "30917942"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] has been changed
~ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
        id     = "default/wayofthesys.com-prometheus-ingress"
        # (1 unchanged attribute hidden)

      ~ metadata {
            name             = "wayofthesys.com-prometheus-ingress"
          ~ resource_version = "30915560" -> "30922127"
            # (5 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30917392" -> "30917895"
            # (4 unchanged attributes hidden)
        }
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be updated in-place
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
        name                       = "prometheus"
      ~ status                     = "failed" -> "deployed"
        # (26 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] will be updated in-place
~ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
        id     = "default/wayofthesys.com-prometheus-ingress"
        # (1 unchanged attribute hidden)

      ~ metadata {
          ~ annotations      = {
              + "nginx.ingress.kubernetes.io/auth-signin" = "https://$host/oauth2/start?rd=https://$host$request_uri$is_args$args"
              + "nginx.ingress.kubernetes.io/auth-url"    = "https://$host/oauth2/auth"
                # (3 unchanged elements hidden)
            }
            name             = "wayofthesys.com-prometheus-ingress"
            # (5 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls" -> null
              - "cert-manager.io/common-name"      = "wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-loki-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls will be updated in-place
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls" -> null
              - "cert-manager.io/common-name"      = "pritunl.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-pritunl-tls"
            # (5 unchanged attributes hidden)
        }
    }

  # kubernetes_secret.tls-vpn will be updated in-place
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              - "cert-manager.io/alt-names"        = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls" -> null
              - "cert-manager.io/common-name"      = "vpn.wayofthesys.com" -> null
              - "cert-manager.io/ip-sans"          = "" -> null
              - "cert-manager.io/issuer-group"     = "cert-manager.io" -> null
              - "cert-manager.io/issuer-kind"      = "ClusterIssuer" -> null
              - "cert-manager.io/issuer-name"      = "zerossl" -> null
              - "cert-manager.io/uri-sans"         = "" -> null
            }
            name             = "wayofthesys-com-vpn-tls"
            # (5 unchanged attributes hidden)
        }
    }

Plan: 0 to add, 5 to change, 0 to destroy.

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Warning: Argument is deprecated

  with tls_self_signed_cert.ca-vpn,
  on tls-vpn.tf line 20, in resource "tls_self_signed_cert" "ca-vpn":
  20:   key_algorithm   = tls_private_key.ca-vpn.algorithm

This is now ignored, as the key algorithm is inferred from the
`private_key_pem`.

(and 11 more similar warnings elsewhere)

:arrow_forward: To apply this plan, comment:

atlantis apply -d terraform/atlantis

:put_litter_in_its_place: To delete this plan click here
:repeat: To plan this project again, comment:

atlantis plan -d terraform/atlantis

Plan: 0 to add, 5 to change, 0 to destroy.

:fast_forward: To apply all unapplied plans from this pull request, comment:

atlantis apply

:put_litter_in_its_place: To delete all plans and locks for the PR, comment:

atlantis unlock

atlantis apply -d terraform/atlantis

Ran Apply for dir: terraform/atlantis workspace: default
Apply Error
Show Output
running "/usr/local/bin/terraform apply -input=false -no-color \"/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis/default.tfplan\"" in "/root/.atlantis/repos/autotune/pritunl-k8s-tf-do/19/default/terraform/atlantis": exit status 1
kubernetes_secret.tls-vpn: Modifying... [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.loki-tls: Modifying... [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifying... [id=pritunl/wayofthesys-com-pritunl-tls]
kubernetes_secret.tls-vpn: Modifications complete after 0s [id=pritunl/wayofthesys-com-vpn-tls]
kubernetes_secret.loki-tls: Modifications complete after 0s [id=default/wayofthesys-com-loki-tls]
kubernetes_secret.tls: Modifications complete after 0s [id=pritunl/wayofthesys-com-pritunl-tls]
helm_release.prometheus: Modifying... [id=prometheus]
helm_release.prometheus: Still modifying... [id=prometheus, 10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 1m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 2m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 3m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m0s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m10s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m20s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m30s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m40s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 4m50s elapsed]
helm_release.prometheus: Still modifying... [id=prometheus, 5m0s elapsed]

Warning: Version constraints inside provider configuration blocks are deprecated

  on providers.tf line 12, in provider "digitalocean":
  12:   version = ">=1.5.0"

Terraform 0.13 and earlier allowed provider version constraints inside the
provider configuration block, but that is now deprecated and will be removed
in a future version of Terraform. To silence this warning, move the provider
version constraint into the required_providers block.

Error: timed out waiting for the condition

  with helm_release.prometheus,
  on prometheus.tf line 1, in resource "helm_release" "prometheus":
   1: resource "helm_release" "prometheus" {

Ran Plan for dir: terraform/atlantis workspace: default
Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

  # kubernetes_secret.tls has been changed
~ resource "kubernetes_secret" "tls" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-pritunl-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "pritunl.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-pritunl-tls"
              + "cert-manager.io/common-name"      = "pritunl.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-pritunl-tls"
          ~ resource_version = "30923431" -> "30923944"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.tls-vpn has been changed
~ resource "kubernetes_secret" "tls-vpn" {
      ~ data      = (sensitive value)
        id        = "pritunl/wayofthesys-com-vpn-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "vpn.wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-vpn-tls"
              + "cert-manager.io/common-name"      = "vpn.wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-vpn-tls"
          ~ resource_version = "30923429" -> "30923922"
            # (4 unchanged attributes hidden)
        }
    }
  # kubernetes_secret.loki-tls has been changed
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {
              + "cert-manager.io/alt-names"        = "wayofthesys.com"
              + "cert-manager.io/certificate-name" = "wayofthesys-com-loki-tls"
              + "cert-manager.io/common-name"      = "wayofthesys.com"
              + "cert-manager.io/ip-sans"          = ""
              + "cert-manager.io/issuer-group"     = "cert-manager.io"
              + "cert-manager.io/issuer-kind"      = "ClusterIssuer"
              + "cert-manager.io/issuer-name"      = "zerossl"
              + "cert-manager.io/uri-sans"         = ""
            }
            name             = "wayofthesys-com-loki-tls"
          ~ resource_version = "30923430" -> "30923895"
            # (4 unchanged attributes hidden)
        }
    }
  # helm_release.prometheus has been changed
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
      ~ metadata                   = [
          ~ {
              ~ revision    = 7 -> 8
                # (6 unchanged elements hidden)
            },
        ]
        name                       = "prometheus"
        # (26 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
~ update in-place

Terraform will perform the following actions:

  # helm_release.prometheus will be updated in-place
~ resource "helm_release" "prometheus" {
        id                         = "prometheus"
        name                       = "prometheus"
      ~ status                     = "failed" -> "deployed"
        # (26 unchanged attributes hidden)

      - set {
          - name  = "server.baseURL" -> null
          - value = "wayofthesys.com/prometheus" -> null
        }
      + set {
          + name  = "server.baseURL"
          + value = "wayofthesys.com/prometheus"
        }
      + set {
          + name  = "server.prefixURL"
          + value = "/"
        }
    }

  # kubernetes_ingress.prometheus_cluster_ingress["wayofthesys.com"] will be updated in-place
~ resource "kubernetes_ingress" "prometheus_cluster_ingress" {
        id     = "default/wayofthesys.com-prometheus-ingress"
        # (1 unchanged attribute hidden)

      ~ metadata {
          ~ annotations      = {
              + "nginx.ingress.kubernetes.io/auth-signin" = "https://$host/oauth2/start?rd=https://$host$request_uri$is_args$args"
              + "nginx.ingress.kubernetes.io/auth-url"    = "https://$host/oauth2/auth"
                # (3 unchanged elements hidden)
            }
            name             = "wayofthesys.com-prometheus-ingress"
            # (5 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # kubernetes_secret.loki-tls will be updated in-place
~ resource "kubernetes_secret" "loki-tls" {
      ~ data      = (sensitive value)
        id        = "default/wayofthesys-com-loki-tls"
        # (2 unchanged attributes hidden)

      ~ metadata {
          ~ annotations      = {