Taiki130/ecsexec

Terraform Drift (terraform)

Opened this issue · 132 comments

This issus was created by tfaction.

About this issue, please see the document.

✅ Apply Succeeded (terraform)

Pull Request | CI link

Apply complete! Resources: 2 added, 0 changed, 2 destroyed.
Details (Click me)
time="2024-05-25T04:14:47Z" level=info msg="download and unarchive the package" aqua_version=2.28.1 env=linux/amd64 exe_name=tfcmt package_name=suzuki-shunsuke/tfcmt package_version=v4.9.1 program=aqua registry=standard
time="2024-05-25T04:14:47Z" level=info msg="verify a package with slsa-verifier" aqua_version=2.28.1 env=linux/amd64 exe_name=tfcmt package_name=suzuki-shunsuke/tfcmt package_version=v4.9.1 program=aqua registry=standard
Verified signature against tlog entry index 92479342 at URL: https://rekor.sigstore.dev/api/v1/log/entries/24296fb24b8ad77ac5b35f06084caae89e229277914c967758681406f3e11d575119fba0c8b83361
Verified build using builder "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@refs/tags/v2.0.0" at commit 7a2e3a22abd25e095dac93e2834b87f9b9d84320
Verifying artifact /tmp/966326046: PASSED

PASSED: Verified SLSA provenance
github_actions_secret.secrets["APP_PRIVATE_KEY"]: Destroying... [id=ecsexec:APP_PRIVATE_KEY]
github_actions_variable.main["APP_ID"]: Destroying... [id=ecsexec:APP_ID]
github_actions_secret.secrets["GORELEASER_APP_ID"]: Creating...
github_actions_secret.secrets["GORELEASER_APP_PRIVATE_KEY"]: Creating...
github_actions_variable.main["APP_ID"]: Destruction complete after 1s
github_actions_secret.secrets["APP_PRIVATE_KEY"]: Destruction complete after 2s
github_actions_secret.secrets["GORELEASER_APP_ID"]: Creation complete after 5s [id=ecsexec:GORELEASER_APP_ID]
github_actions_secret.secrets["GORELEASER_APP_PRIVATE_KEY"]: Creation complete after 5s [id=ecsexec:GORELEASER_APP_PRIVATE_KEY]

Apply complete! Resources: 2 added, 0 changed, 2 destroyed.
`

✅ Apply Succeeded (terraform)

Pull Request | CI link

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.
Details (Click me)
time="2024-05-25T04:34:11Z" level=info msg="download and unarchive the package" aqua_version=2.28.1 env=linux/amd64 exe_name=tfcmt package_name=suzuki-shunsuke/tfcmt package_version=v4.9.1 program=aqua registry=standard
time="2024-05-25T04:34:11Z" level=info msg="verify a package with slsa-verifier" aqua_version=2.28.1 env=linux/amd64 exe_name=tfcmt package_name=suzuki-shunsuke/tfcmt package_version=v4.9.1 program=aqua registry=standard
Verified signature against tlog entry index 92479342 at URL: https://rekor.sigstore.dev/api/v1/log/entries/24296fb24b8ad77ac5b35f06084caae89e229277914c967758681406f3e11d575119fba0c8b83361
Verified build using builder "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@refs/tags/v2.0.0" at commit 7a2e3a22abd25e095dac93e2834b87f9b9d84320
Verifying artifact /tmp/743399012: PASSED

PASSED: Verified SLSA provenance

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.
`

❌ Failed to run terraform plan

CI link

Error: Failed to get the data key required to decrypt the SOPS file.

Group 0: FAILED
  02CD2DEFD3E49529DF7136DDB6B1A17F2B853ADB: FAILED
    - | could not decrypt data key with PGP key:
      | github.com/ProtonMail/go-crypto/openpgp error: could not
      | load secring: open /home/runner/.gnupg/pubring.gpg: no such
      | file or directory; GnuPG binary error: failed to decrypt
      | sops data key with pgp: gpg: directory '/home/runner/.gnupg'
      | created
      | gpg: encrypted with ECDH key, ID 70409289B7C937B0
      | gpg: decryption failed: No secret key
      | gpg: [don't know]: invalid packet (ctb=63)
  
  age14f3p6lva7tjjvlplqquacmnwu8m3zaz844cuel87nl2vdc6x65fsue5gtd: FAILED
    - | failed to load age identities: failed to open file: open
      | /home/runner/.config/sops/age/keys.txt: no such file or
      | directory

Recovery failed because no master key was able to decrypt the file. In
order for SOPS to recover the file, at least one key has to be successful,
but none were.

  with data.sops_file.secrets,
  on github.tf line 9, in data "sops_file" "secrets":
   9: data "sops_file" "secrets" {


Error: Failed to get the data key required to decrypt the SOPS file.

Group 0: FAILED
  02CD2DEFD3E49529DF7136DDB6B1A17F2B853ADB: FAILED
    - | could not decrypt data key with PGP key:
      | github.com/ProtonMail/go-crypto/openpgp error: could not
      | load secring: open /home/runner/.gnupg/pubring.gpg: no such
      | file or directory; GnuPG binary error: failed to decrypt
      | sops data key with pgp: gpg: keybox
      | '/home/runner/.gnupg/pubring.kbx' created
      | gpg: encrypted with ECDH key, ID 70409289B7C937B0
      | gpg: decryption failed: No secret key
      | gpg: [don't know]: invalid packet (ctb=5e)
  
  age14f3p6lva7tjjvlplqquacmnwu8m3zaz844cuel87nl2vdc6x65fsue5gtd: FAILED
    - | failed to load age identities: failed to open file: open
      | /home/runner/.config/sops/age/keys.txt: no such file or
      | directory

Recovery failed because no master key was able to decrypt the file. In
order for SOPS to recover the file, at least one key has to be successful,
but none were.

  with data.sops_file.tf_secrets,
  on main.tf line 43, in data "sops_file" "tf_secrets":
  43: data "sops_file" "tf_secrets" {

❌ Failed to run terraform plan

CI link

Error: Failed to get the data key required to decrypt the SOPS file.

Group 0: FAILED
  02CD2DEFD3E49529DF7136DDB6B1A17F2B853ADB: FAILED
    - | could not decrypt data key with PGP key:
      | github.com/ProtonMail/go-crypto/openpgp error: could not
      | load secring: open /home/runner/.gnupg/pubring.gpg: no such
      | file or directory; GnuPG binary error: failed to decrypt
      | sops data key with pgp: gpg: directory '/home/runner/.gnupg'
      | created
      | gpg: keybox '/home/runner/.gnupg/pubring.kbx' created
      | gpg: encrypted with ECDH key, ID 70409289B7C937B0
      | gpg: decryption failed: No secret key
      | gpg: [don't know]: invalid packet (ctb=63)
  
  age14f3p6lva7tjjvlplqquacmnwu8m3zaz844cuel87nl2vdc6x65fsue5gtd: FAILED
    - | failed to load age identities: failed to open file: open
      | /home/runner/.config/sops/age/keys.txt: no such file or
      | directory

Recovery failed because no master key was able to decrypt the file. In
order for SOPS to recover the file, at least one key has to be successful,
but none were.

  with data.sops_file.secrets,
  on github.tf line 9, in data "sops_file" "secrets":
   9: data "sops_file" "secrets" {


Error: Failed to get the data key required to decrypt the SOPS file.

Group 0: FAILED
  02CD2DEFD3E49529DF7136DDB6B1A17F2B853ADB: FAILED
    - | could not decrypt data key with PGP key:
      | github.com/ProtonMail/go-crypto/openpgp error: could not
      | load secring: open /home/runner/.gnupg/pubring.gpg: no such
      | file or directory; GnuPG binary error: failed to decrypt
      | sops data key with pgp: gpg: Fatal: can't create directory
      | '/home/runner/.gnupg': File exists
  
  age14f3p6lva7tjjvlplqquacmnwu8m3zaz844cuel87nl2vdc6x65fsue5gtd: FAILED
    - | failed to load age identities: failed to open file: open
      | /home/runner/.config/sops/age/keys.txt: no such file or
      | directory

Recovery failed because no master key was able to decrypt the file. In
order for SOPS to recover the file, at least one key has to be successful,
but none were.

  with data.sops_file.tf_secrets,
  on main.tf line 43, in data "sops_file" "tf_secrets":
  43: data "sops_file" "tf_secrets" {

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ Apply Succeeded (terraform)

Pull Request | CI link

Apply complete! Resources: 0 added, 9 changed, 0 destroyed.
Details (Click me)
time="2024-05-26T09:27:02Z" level=info msg="download and unarchive the package" aqua_version=2.28.1 env=linux/amd64 exe_name=tfcmt package_name=suzuki-shunsuke/tfcmt package_version=v4.9.1 program=aqua registry=standard
time="2024-05-26T09:27:02Z" level=info msg="verify a package with slsa-verifier" aqua_version=2.28.1 env=linux/amd64 exe_name=tfcmt package_name=suzuki-shunsuke/tfcmt package_version=v4.9.1 program=aqua registry=standard
Verified signature against tlog entry index 92479342 at URL: https://rekor.sigstore.dev/api/v1/log/entries/24296fb24b8ad77ac5b35f06084caae89e229277914c967758681406f3e11d575119fba0c8b83361
Verified build using builder "https://github.com/slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@refs/tags/v2.0.0" at commit 7a2e3a22abd25e095dac93e2834b87f9b9d84320
Verifying artifact /tmp/393178493: PASSED

PASSED: Verified SLSA provenance
module.aws.aws_iam_policy.read_terraform_state[0]: Modifying... [id=arn:aws:iam::221749090623:policy/GitHubActions_Terraform_ecsexec_read_terraform_state]
module.aws.aws_iam_role.terraform_apply: Modifying... [id=GitHubActions_Terraform_ecsexec_terraform_apply]
module.aws.aws_iam_policy.put_tfmigrate_history: Modifying... [id=arn:aws:iam::221749090623:policy/GitHubActions_Terraform_ecsexec_write_tfmigrate_history]
aws_iam_openid_connect_provider.github: Modifying... [id=arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com]
module.aws.aws_iam_policy.read_tfmigrate_history: Modifying... [id=arn:aws:iam::221749090623:policy/GitHubActions_Terraform_ecsexec_read_tfmigrate_history]
module.aws.aws_iam_role.tfmigrate_apply: Modifying... [id=GitHubActions_Terraform_ecsexec_tfmigrate_apply]
module.aws.aws_iam_policy.put_terraform_state[0]: Modifying... [id=arn:aws:iam::221749090623:policy/GitHubActions_Terraform_ecsexec_write_terraform_state]
module.aws.aws_iam_role.terraform_plan: Modifying... [id=GitHubActions_Terraform_ecsexec_terraform_plan]
module.aws.aws_iam_role.tfmigrate_plan: Modifying... [id=GitHubActions_Terraform_ecsexec_tfmigrate_plan]
aws_iam_openid_connect_provider.github: Modifications complete after 0s [id=arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com]
module.aws.aws_iam_policy.put_terraform_state[0]: Modifications complete after 1s [id=arn:aws:iam::221749090623:policy/GitHubActions_Terraform_ecsexec_write_terraform_state]
module.aws.aws_iam_policy.read_tfmigrate_history: Modifications complete after 1s [id=arn:aws:iam::221749090623:policy/GitHubActions_Terraform_ecsexec_read_tfmigrate_history]
module.aws.aws_iam_policy.read_terraform_state[0]: Modifications complete after 1s [id=arn:aws:iam::221749090623:policy/GitHubActions_Terraform_ecsexec_read_terraform_state]
module.aws.aws_iam_policy.put_tfmigrate_history: Modifications complete after 1s [id=arn:aws:iam::221749090623:policy/GitHubActions_Terraform_ecsexec_write_tfmigrate_history]
module.aws.aws_iam_role.tfmigrate_apply: Modifications complete after 1s [id=GitHubActions_Terraform_ecsexec_tfmigrate_apply]
module.aws.aws_iam_role.terraform_plan: Modifications complete after 1s [id=GitHubActions_Terraform_ecsexec_terraform_plan]
module.aws.aws_iam_role.terraform_apply: Modifications complete after 1s [id=GitHubActions_Terraform_ecsexec_terraform_apply]
module.aws.aws_iam_role.tfmigrate_plan: Modifications complete after 1s [id=GitHubActions_Terraform_ecsexec_tfmigrate_plan]

Apply complete! Resources: 0 added, 9 changed, 0 destroyed.
`

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

❌ Drift is detected

CI link

Plan: 0 to add, 1 to change, 0 to destroy.
  • Update
    • aws_iam_openid_connect_provider.github
Change Result (Click me)
  # aws_iam_openid_connect_provider.github will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "github" {
        id              = "arn:aws:iam::221749090623:oidc-provider/token.actions.githubusercontent.com"
        tags            = {}
      ~ thumbprint_list = [
          ~ "1b511abead59c6ce207077c0bf0e0043b1382612" -> "d89e3bd43d5d909b47a18977aa9d5ce36cee184c",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.

✅ No drift is found

CI link

No changes. Your infrastructure matches the configuration.