Update OpenTofu

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
civo (source)	required_provider	minor	1.1.7 → 1.3.3
flux (source)	required_provider	minor	1.8.3 → 1.9.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

civo/terraform-provider-civo (civo)

v1.3.3

Compare Source

Merged

• #​424 - fix(417): mark object store secret_access_key and database password sensitive
• #​394 - ci: pin goreleaser to 2.15.3 and fix deprecated config
• #​423 - fix(419): add civo_vpc_* examples, deprecate legacy docs, fix subnet import
• #​411 - fix(410): retry deletes blocked by an in-use reference
• #​422 - Bump google.golang.org/grpc from 1.83.1 to 1.83.2
• #​407 - docs(344): clarify write_kubeconfig is required to populate kubeconfig
• #​414 - Bump google.golang.org/grpc from 1.82.1 to 1.83.1

v1.3.2

Compare Source

Merged

• #​413 - Bump civogo to v0.7.3

v1.3.1

Compare Source

Merged

• #​412 - fix: make firewall create_default_rules updatable in-place (no longer ForceNew)

v1.3.0

Compare Source

Merged

• #​408 - fix: infer region from referenced resource (#​395)
• #​406 - fix: scope API client per-region to avoid shared-client data race
• #​405 - fix(384): lower minimum DNS record TTL to 60
• #​404 - Bump google.golang.org/grpc from 1.79.3 to 1.82.1
• #​399 - feat(397): expose cidr_v4 and nameservers_v4 in network data source
• #​400 - docs: add missing pages for civo_vpc_* aliases

v1.2.6

Compare Source

Merged

• #​403 - chore(deps): bump golang.org/x/crypto to v0.52.0 and x/net to v0.55.0
• #​402 - fix: prevent nil pointer panic in network/firewall data sources
• #​388 - fix(380): apply labels and taints to nodes in default node pool

v1.2.5

Compare Source

Merged

• #​393 - Chore/bump civogo v0.7.2

v1.2.4

Compare Source

Merged

• #​392 - fix(381): fix for node scaling count

v1.2.3

Compare Source

Merged

• #​391 - fix: make region comparison case-insensitive across all resources
• #​390 - Chore/upgrade dependencies

v1.2.2

Compare Source

fluxcd/terraform-provider-flux (flux)

v1.9.5

Compare Source

Release date: 2026-08-31

This release includes flux2 v2.9.5.

Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

v1.9.4

Compare Source

Release date: 2026-08-07

This release includes flux2 v2.9.4.

Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

v1.9.3

Compare Source

Release date: 2026-07-23

This release includes flux2 v2.9.3.

Please follow the Upgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.

v1.9.2

Compare Source

Release date: 2026-07-13

This release includes flux2 v2.9.2.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.9.1

Compare Source

Release date: 2026-07-07

This release includes flux2 v2.9.1.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.9.0

Compare Source

Release date: 2026-06-30

This release includes flux2 v2.9.0.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

In addition, the Kubernetes dependencies have been updated to v1.36.2
and CI acceptance tests now run with Terraform 1.15.

Improvements:

• Update to Kubernetes v1.36.2 and Terraform 1.15
  #​825
• Update Flux to v2.9.0 and fix the OpenPGP signer
  #​826

v1.8.8

Compare Source

Release date: 2026-05-20

This release includes flux2 v2.8.8.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.8.7

Compare Source

Release date: 2026-05-12

This release includes flux2 v2.8.7.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.8.6

Compare Source

Release date: 2026-04-21

This release includes flux2 v2.8.6.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.8.5

Compare Source

Release date: 2026-04-07

This release includes flux2 v2.8.5.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.8.4

Compare Source

Release date: 2026-04-07

This release includes flux2 v2.8.4.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

OpenTofu Format and Style 🖌success

OpenTofu Initialization ⚙️success

OpenTofu Validation 🤖success

Validation Output

Success! The configuration is valid.

OpenTofu Plan 📖success

Show Plan

tofu
civo_object_store_credential.cloudnativenow-backup: Refreshing state... [id=2085a5d9-2c85-4412-9153-6592a6daa8c0]
civo_network.cloudnativenow: Refreshing state... [id=2307557a-b07f-4d7c-9c38-b5ebee2f59c7]
civo_object_store.cloudnativenow-backup: Refreshing state... [id=923e220e-cc49-4616-83ef-684682f621bd]
civo_firewall.cloudnativenow: Refreshing state... [id=5ba41838-5fc3-4da0-9dae-3b7d8d16ef09]
civo_database.cloudnativenow: Refreshing state... [id=5eee285c-486b-469c-8b79-3dc66dff0185]
civo_kubernetes_cluster.cloudnativenow: Refreshing state... [id=371c04de-235e-4fa2-bd53-8ba42bc460d3]
kubernetes_secret.ghost-database-password: Refreshing state... [id=ghost/ghost-database]
kubernetes_secret.ghost-backup-creds: Refreshing state... [id=ghost/ghost-backup-creds]
kubernetes_secret.cluster-autoscaler: Refreshing state... [id=kube-system/cluster-autoscaler-civo]
flux_bootstrap_git.cloudnativenow: Refreshing state... [id=flux-system]

Note: Objects have changed outside of OpenTofu

OpenTofu detected the following changes made outside of OpenTofu since the
last "tofu apply" which may have affected this plan:

  # civo_kubernetes_cluster.cloudnativenow has changed
  ~ resource "civo_kubernetes_cluster" "cloudnativenow" {
        id                     = "371c04de-235e-4fa2-bd53-8ba42bc460d3"
      ~ kubeconfig             = (sensitive value)
        name                   = "CloudNative.now"
        # (16 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # civo_firewall.cloudnativenow will be updated in-place
  ~ resource "civo_firewall" "cloudnativenow" {
        id                   = "5ba41838-5fc3-4da0-9dae-3b7d8d16ef09"
        name                 = "cloudnativenow-firewall"
        # (3 unchanged attributes hidden)

      - ingress_rule {
          - action   = "allow" -> null
          - cidr     = [
              - "0.0.0.0/0",
            ] -> null
          - id       = "8c6f464e-7e4b-4772-b901-b7c809df07eb" -> null
          - label    = "ping" -> null
          - protocol = "icmp" -> null
        }
      - ingress_rule {
          - action     = "allow" -> null
          - cidr       = [
              - "88.97.214.159/32",
            ] -> null
          - id         = "df88ccbf-0a8b-4781-88d9-a22d54cecfa5" -> null
          - label      = "Local" -> null
          - port_range = "3306" -> null
          - protocol   = "tcp" -> null
        }
      + ingress_rule {
          + action   = "allow"
          + cidr     = [
              + "0.0.0.0/0",
            ]
          + id       = "8c6f464e-7e4b-4772-b901-b7c809df07eb"
          + label    = "ping"
          + protocol = "icmp"
        }
      + ingress_rule {
          + action     = "allow"
          + cidr       = [
              + "88.97.210.216/32",
            ]
          + id         = (known after apply)
          + label      = "local"
          + port_range = "3306"
          + protocol   = "tcp"
        }

        # (11 unchanged blocks hidden)
    }

  # civo_kubernetes_cluster.cloudnativenow will be updated in-place
  ~ resource "civo_kubernetes_cluster" "cloudnativenow" {
        id                     = "371c04de-235e-4fa2-bd53-8ba42bc460d3"
      ~ kubernetes_version     = "1.36.0-k3s1" -> "1.30.5-k3s1"
        name                   = "CloudNative.now"
        # (16 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # flux_bootstrap_git.cloudnativenow will be updated in-place
  ~ resource "flux_bootstrap_git" "cloudnativenow" {
        id                   = "flux-system"
      ~ repository_files     = {
          ~ "flux/flux-system/gotk-sync.yaml"       = <<-EOT
              - 
              + # This manifest was generated by flux. DO NOT EDIT.
              + ---
              + apiVersion: source.toolkit.fluxcd.io/v1
              + kind: GitRepository
              + metadata:
              +   name: flux-system
              +   namespace: flux-system
              + spec:
              +   interval: 1m0s
              +   ref:
              +     branch: main
              +   secretRef:
              +     name: flux-system
              +   url: https://github.com/NamelessPlanet/CloudNativeNow-Gitops.git
              + ---
              + apiVersion: kustomize.toolkit.fluxcd.io/v1
              + kind: Kustomization
              + metadata:
              +   name: flux-system
              +   namespace: flux-system
              + spec:
              +   interval: 10m0s
              +   path: ./flux
              +   prune: true
              +   sourceRef:
              +     kind: GitRepository
              +     name: flux-system
            EOT
            # (2 unchanged elements hidden)
        }
      ~ version              = "v2.5.1" -> "v2.9.5"
        # (13 unchanged attributes hidden)
    }

  # kubernetes_secret.ghost-backup-creds will be updated in-place
  ~ resource "kubernetes_secret" "ghost-backup-creds" {
        id                             = "ghost/ghost-backup-creds"
        # (6 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # kubernetes_secret.ghost-database-password will be updated in-place
  ~ resource "kubernetes_secret" "ghost-database-password" {
        id                             = "ghost/ghost-database"
        # (6 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 5 to change, 0 to destroy.

Changes to Outputs:
  ~ kubernetes_kubeconfig   = (sensitive value)

Warning: Flux resources GitRepository and Kustomization in flux-system namespace are not ready and Flux will be redeployed

  with flux_bootstrap_git.cloudnativenow,
  on main.tf line 168, in resource "flux_bootstrap_git" "cloudnativenow":
 168: resource "flux_bootstrap_git" "cloudnativenow" {

Kustomization/flux-system:
CustomResourceDefinition/ocirepositories.source.toolkit.fluxcd.io dry-run
failed (Invalid): CustomResourceDefinition.apiextensions.k8s.io
"ocirepositories.source.toolkit.fluxcd.io" is invalid:
status.storedVersions[0]: Invalid value: "v1beta2": missing from
spec.versions; v1beta2 was previously a storage version, and must remain in
spec.versions until a storage migration ensures no data remains persisted in
v1beta2 and removes v1beta2 from status.storedVersions


─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so OpenTofu can't
guarantee to take exactly these actions if you run "tofu apply" now.