From ad6161c22679c71db0bc9fa2fcba52ab7571d537 Mon Sep 17 00:00:00 2001 From: Claude Bot Date: Thu, 16 Jul 2026 21:07:29 +0200 Subject: [PATCH] =?UTF-8?q?chore(decommission):=20drop=20rustfs=20import?= =?UTF-8?q?=20shims=20=E2=80=94=20apply=20destroys=20LXC=20800/801/802=20(?= =?UTF-8?q?stage=202/2)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Stage 1 (#268) adopted the never-tofu-managed rustfs containers into state (import run 1173: all three imported, plan 'No changes'). Removing the shims makes the next apply destroy the containers — guest lifecycle fully through tofu, per owner rule. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01NV7bZzZLeoFUEdAeCSLEei --- opentofu/lxc_800_rustfs_decommission.tf | 41 ------------------------- 1 file changed, 41 deletions(-) delete mode 100644 opentofu/lxc_800_rustfs_decommission.tf diff --git a/opentofu/lxc_800_rustfs_decommission.tf b/opentofu/lxc_800_rustfs_decommission.tf deleted file mode 100644 index 83f15c11..00000000 --- a/opentofu/lxc_800_rustfs_decommission.tf +++ /dev/null @@ -1,41 +0,0 @@ -# TEMPORARY import shims — rustfs LXCs 800/801/802, decommission in progress. -# -# These containers were never tofu-managed, so the #259/#265 decommission -# sweep could not destroy them (no state entry, nothing to plan). Owner rule: -# ALL guest lifecycle goes through tofu — no manual pct/qm destroy, ever. -# The tofu-clean path for unmanaged leftovers is import-then-destroy: -# -# 1. Merge this file, then adopt the containers into state via the -# pipeline's import hook: -# woodpecker pipeline create --branch master \ -# --var PIPELINE=deploy-infrastructure \ -# --var 'TOFU_IMPORT=proxmox_virtual_environment_container.rustfs_decommission["800"] saturn/800 -# proxmox_virtual_environment_container.rustfs_decommission["801"] jupiter/801 -# proxmox_virtual_environment_container.rustfs_decommission["802"] neptune/802' -# 2. Follow-up PR deletes this file; the next apply (TOFU_APPLY=true) -# destroys the containers. Then this comment is history. -# -# Attributes are the bare minimum for a clean import + no-op plan: the -# containers are stopped and stay stopped until destroyed. - -locals { - rustfs_decommission = { - "800" = "saturn" - "801" = "jupiter" - "802" = "neptune" - } -} - -resource "proxmox_virtual_environment_container" "rustfs_decommission" { - for_each = local.rustfs_decommission - - node_name = each.value - vm_id = tonumber(each.key) - started = false - - # Never try to reconcile the leftover config — this resource exists only - # so the destroy goes through tofu. - lifecycle { - ignore_changes = all - } -} -- 2.54.0