chore(deps): update dependency aquaproj/aqua-registry to v4.542.0 (terraform/cloudflare/b0xp.io/k8s/aqua) - #11614
Merged
boxp-tfaction[bot] merged 2 commits intoJul 24, 2026
Conversation
…rraform/cloudflare/b0xp.io/k8s/aqua)
Contributor
Plan Result (terraform/cloudflare/b0xp.io/k8s)
Change Result (Click me) # cloudflare_record.codex_task_board has moved to cloudflare_dns_record.codex_task_board
resource "cloudflare_dns_record" "codex_task_board" {
id = "99ef01ea3e787846af7d40b9369d9638"
name = "codex-task-board.b0xp.io"
tags = []
# (10 unchanged attributes hidden)
}
# cloudflare_record.codex_workspace has moved to cloudflare_dns_record.codex_workspace
resource "cloudflare_dns_record" "codex_workspace" {
id = "66234e21bd027f2378fc5800fa1dfd85"
name = "codex-workspace.b0xp.io"
tags = []
# (10 unchanged attributes hidden)
}
# cloudflare_record.k8s has moved to cloudflare_dns_record.k8s
resource "cloudflare_dns_record" "k8s" {
id = "b6815d54d5527c2b250dcbc3e93b4580"
name = "k8s.b0xp.io"
tags = []
# (10 unchanged attributes hidden)
}
# cloudflare_access_application.codex_task_board has moved to cloudflare_zero_trust_access_application.codex_task_board
resource "cloudflare_zero_trust_access_application" "codex_task_board" {
id = "718cc218-4916-4bfe-813c-985053ff405f"
name = "Access application for codex-task-board.b0xp.io"
# (10 unchanged attributes hidden)
}
# cloudflare_zero_trust_access_policy.codex_task_board_policy will be created
+ resource "cloudflare_zero_trust_access_policy" "codex_task_board_policy" {
+ account_id = "1984a4314b3e75f3bedce97c7a8e0c81"
+ decision = "allow"
+ id = (known after apply)
+ include = [
+ {
+ login_method = {
+ id = "b9248b7d-c1fa-48ab-8a43-ebffe03fabac"
}
},
]
+ name = "policy for codex-task-board.b0xp.io"
+ session_duration = "24h"
}
# cloudflare_zero_trust_access_policy.github_actions_access will be updated in-place
~ resource "cloudflare_zero_trust_access_policy" "github_actions_access" {
id = "9f35eef0-f0ea-45b9-bedf-a8eb62e24bc9"
name = "GitHub Actions Access Policy"
+ session_duration = "24h"
# (3 unchanged attributes hidden)
}
# cloudflare_zero_trust_device_default_profile.warp_include will be updated in-place
# (imported from "1984a4314b3e75f3bedce97c7a8e0c81")
~ resource "cloudflare_zero_trust_device_default_profile" "warp_include" {
account_id = "1984a4314b3e75f3bedce97c7a8e0c81"
allow_mode_switch = false
allow_updates = false
allowed_to_leave = true
auto_connect = 0
captive_portal = 180
default = true
disable_auto_fallback = false
dns_search_suffixes = []
enabled = true
exclude_office_ips = false
fallback_domains = [
{
suffix = "home.arpa"
},
{
suffix = "intranet"
},
{
suffix = "internal"
},
{
suffix = "private"
},
{
suffix = "localdomain"
},
{
suffix = "domain"
},
{
suffix = "lan"
},
{
suffix = "home"
},
{
suffix = "host"
},
{
suffix = "corp"
},
{
suffix = "local"
},
{
suffix = "localhost"
},
{
suffix = "invalid"
},
{
suffix = "test"
},
]
gateway_unique_id = "1984a4314b3e75f3bedce97c7a8e0c81"
id = "1984a4314b3e75f3bedce97c7a8e0c81"
~ include = [
~ {
~ address = "192.168.10.96/32" -> "192.168.10.29/32"
~ description = "Kubernetes Dashboard" -> "ark asa"
},
~ {
~ address = "192.168.10.88/32" -> "192.168.10.30/32"
~ description = "Grafana" -> "minecraft"
},
~ {
~ address = "192.168.10.104/32" -> "192.168.10.31/32"
~ description = "shanghai-3" -> "starRupture"
},
~ {
~ address = "192.168.10.99/32" -> "192.168.10.88/32"
~ description = "lolice" -> "Grafana"
},
~ {
~ address = "192.168.10.98/32" -> "192.168.10.95/32"
~ description = "argocd" -> "llama-server"
},
~ {
~ address = "192.168.10.103/32" -> "192.168.10.96/32"
~ description = "shanghai-2" -> "Kubernetes Dashboard"
},
~ {
~ address = "192.168.10.108/32" -> "192.168.10.97/32"
~ description = "palserver-2" -> "palserver"
},
~ {
~ address = "192.168.10.95/32" -> "192.168.10.98/32"
~ description = "llama-server" -> "argocd"
},
~ {
~ address = "192.168.10.105/32" -> "192.168.10.99/32"
~ description = "golyat-2" -> "lolice"
},
{
address = "192.168.10.100/32"
description = "Ooedo"
},
~ {
~ address = "192.168.10.102/32" -> "192.168.10.101/32"
~ description = "shanghai-1" -> "golyat-1"
},
~ {
~ address = "192.168.10.107/32" -> "192.168.10.102/32"
~ description = "golyat-4" -> "shanghai-1"
},
~ {
~ address = "192.168.10.29/32" -> "192.168.10.103/32"
~ description = "ark asa" -> "shanghai-2"
},
~ {
~ address = "192.168.10.101/32" -> "192.168.10.104/32"
~ description = "golyat-1" -> "shanghai-3"
},
~ {
~ address = "192.168.10.30/32" -> "192.168.10.105/32"
~ description = "minecraft" -> "golyat-2"
},
~ {
~ address = "192.168.10.31/32" -> "192.168.10.107/32"
~ description = "starRupture" -> "golyat-4"
},
~ {
~ address = "192.168.10.97/32" -> "192.168.10.108/32"
~ description = "palserver" -> "palserver-2"
},
]
~ policy_id = "0197d1b3-fe50-7488-8b3d-55f27f26ea8b" -> (known after apply)
register_interface_ip_with_dns = true
sccm_vpn_boundary_support = false
service_mode_v2 = {
mode = "warp"
}
support_url = ""
switch_locked = false
tunnel_protocol = ""
}
# cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace will be created
+ resource "cloudflare_zero_trust_tunnel_cloudflared_route" "codex_workspace" {
+ account_id = "1984a4314b3e75f3bedce97c7a8e0c81"
+ comment = "lolice codex-workspace LoadBalancer for WARP access"
+ created_at = (known after apply)
+ deleted_at = (known after apply)
+ id = (known after apply)
+ network = "192.168.10.98/32"
+ tunnel_id = "0eb241e1-1295-4672-8285-f18241a38210"
+ virtual_network_id = (known after apply)
}
Plan: 1 to import, 2 to add, 2 to change, 0 to destroy.
Warning: Redundant ignore_changes element
on tunnel.tf line 12, in resource "cloudflare_zero_trust_tunnel_cloudflared_config" "k8s_tunnel":
12: resource "cloudflare_zero_trust_tunnel_cloudflared_config" "k8s_tunnel" {
Adding an attribute name to ignore_changes tells Terraform to ignore future
changes to the argument in configuration after the object has been created,
retaining the value originally configured.
The attribute created_at is decided by the provider alone and therefore there
can be no configured value to compare with. Including this attribute in
ignore_changes has no effect. Remove the attribute from ignore_changes to
quiet this warning.
(and one more similar warning elsewhere)
|
Contributor
|
boxp-tfaction
Bot
deleted the
renovate/terraform/cloudflare/b0xp.io/k8s/aqua-aquaproj-aqua-registry-4.x
branch
July 24, 2026 11:07
Contributor
❌ Apply Failed (terraform/cloudflare/b0xp.io/k8s)Details (Click me)Jul 24 11:08:33.169 WRN The policy file is ignored unless it is allowed by "aqua policy allow" command.
$ aqua policy allow "/home/runner/work/arch/arch/aqua/aqua-policy.yaml"
If you want to keep ignoring the policy file without the warning, please run "aqua policy deny" command.
$ aqua policy deny "/home/runner/work/arch/arch/aqua/aqua-policy.yaml"
program=aqua version=2.62.1 env=linux/amd64 exe_name=terraform package_name=hashicorp/terraform package_version=v1.15.8 registry=standard policy_file=/home/runner/work/arch/arch/aqua/aqua-policy.yaml doc=https://aquaproj.github.io/docs/reference/codes/003
cloudflare_zero_trust_device_default_profile.warp_include: Importing... [id=1984a4314b3e75f3bedce97c7a8e0c81]
cloudflare_zero_trust_device_default_profile.warp_include: Import complete [id=1984a4314b3e75f3bedce97c7a8e0c81]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Creating...
cloudflare_zero_trust_device_default_profile.warp_include: Modifying... [id=1984a4314b3e75f3bedce97c7a8e0c81]
cloudflare_zero_trust_access_policy.codex_task_board_policy: Creating...
cloudflare_zero_trust_access_policy.github_actions_access: Modifying... [id=9f35eef0-f0ea-45b9-bedf-a8eb62e24bc9]
cloudflare_zero_trust_access_policy.codex_task_board_policy: Creation complete after 0s [id=1a0acac8-4bd5-4d96-823d-814a97b7f64c]
cloudflare_zero_trust_device_default_profile.warp_include: Modifications complete after 0s [id=1984a4314b3e75f3bedce97c7a8e0c81]
cloudflare_zero_trust_access_policy.github_actions_access: Modifications complete after 0s [id=9f35eef0-f0ea-45b9-bedf-a8eb62e24bc9]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [00m10s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [00m20s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [00m30s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [00m40s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [00m50s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [01m00s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [01m10s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [01m20s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [01m30s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [01m40s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [01m50s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [02m00s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [02m10s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [02m20s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [02m30s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [02m40s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [02m50s elapsed]
cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace: Still creating... [03m00s elapsed]
Error: failed to make http request
with cloudflare_zero_trust_tunnel_cloudflared_route.codex_workspace,
on tunnel.tf line 37, in resource "cloudflare_zero_trust_tunnel_cloudflared_route" "codex_workspace":
37: resource "cloudflare_zero_trust_tunnel_cloudflared_route" "codex_workspace" {
POST
"https://api.cloudflare.com/client/v4/accounts/1984a4314b3e75f3bedce97c7a8e0c81/teamnet/routes":
409 Conflict {"success":false,"errors":[{"code":1014,"message":"You already
have a route defined for this exact IP subnet"}],"messages":[],"result":null}
|
1 task
Contributor
terraform/cloudflare/b0xp.io/k8s: Follow up PR was createdApply failed. Please handle the problem.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.541.0→v4.542.0Release Notes
aquaproj/aqua-registry (aquaproj/aqua-registry)
v4.542.0Compare Source
Issues | Pull Requests | aquaproj/aqua-registry@v4.541.0...v4.542.0
🎉 New Packages
#57502 dyoshikawa/rulesync - A Utility CLI for AI Coding Agents @saitota
Fixes
#57592 suzuki-shunsuke/pinact: Support v4.1.1-0 or later
Security
#57469 colbymchenry/codegraph: GitHub artifact attestations config @scop
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.