Update OpenTofu

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
civo (source)	required_provider	minor	1.1.7 → 1.2.5
flux (source)	required_provider	patch	1.8.3 → 1.8.8

---

Release Notes

civo/terraform-provider-civo (civo)

v1.2.5

Compare Source

Merged

• #​393 - Chore/bump civogo v0.7.2

v1.2.4

Compare Source

Merged

• #​392 - fix(381): fix for node scaling count

v1.2.3

Compare Source

Merged

• #​391 - fix: make region comparison case-insensitive across all resources
• #​390 - Chore/upgrade dependencies

v1.2.2

Compare Source

fluxcd/terraform-provider-flux (flux)

v1.8.8

Compare Source

Release date: 2026-05-20

This release includes flux2 v2.8.8.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.8.7

Compare Source

Release date: 2026-05-12

This release includes flux2 v2.8.7.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.8.6

Compare Source

Release date: 2026-04-21

This release includes flux2 v2.8.6.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.8.5

Compare Source

Release date: 2026-04-07

This release includes flux2 v2.8.5.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

v1.8.4

Compare Source

Release date: 2026-04-07

This release includes flux2 v2.8.4.

Please follow the Upgrade Procedure for Flux v2.7+
for a smooth upgrade from Flux v2.6 to the latest version.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

OpenTofu Format and Style 🖌success

OpenTofu Initialization ⚙️success

OpenTofu Validation 🤖success

Validation Output

Success! The configuration is valid.

OpenTofu Plan 📖success

Show Plan

tofu
civo_object_store_credential.cloudnativenow-backup: Refreshing state... [id=2085a5d9-2c85-4412-9153-6592a6daa8c0]
civo_network.cloudnativenow: Refreshing state... [id=2307557a-b07f-4d7c-9c38-b5ebee2f59c7]
civo_object_store.cloudnativenow-backup: Refreshing state... [id=923e220e-cc49-4616-83ef-684682f621bd]
civo_firewall.cloudnativenow: Refreshing state... [id=5ba41838-5fc3-4da0-9dae-3b7d8d16ef09]
civo_database.cloudnativenow: Refreshing state... [id=5eee285c-486b-469c-8b79-3dc66dff0185]
civo_kubernetes_cluster.cloudnativenow: Refreshing state... [id=371c04de-235e-4fa2-bd53-8ba42bc460d3]
kubernetes_secret.ghost-database-password: Refreshing state... [id=ghost/ghost-database]
kubernetes_secret.ghost-backup-creds: Refreshing state... [id=ghost/ghost-backup-creds]
kubernetes_secret.cluster-autoscaler: Refreshing state... [id=kube-system/cluster-autoscaler-civo]
flux_bootstrap_git.cloudnativenow: Refreshing state... [id=flux-system]

Note: Objects have changed outside of OpenTofu

OpenTofu detected the following changes made outside of OpenTofu since the
last "tofu apply" which may have affected this plan:

  # civo_kubernetes_cluster.cloudnativenow has changed
  ~ resource "civo_kubernetes_cluster" "cloudnativenow" {
        id                     = "371c04de-235e-4fa2-bd53-8ba42bc460d3"
      ~ kubeconfig             = (sensitive value)
        name                   = "CloudNative.now"
        # (16 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # civo_firewall.cloudnativenow will be updated in-place
  ~ resource "civo_firewall" "cloudnativenow" {
        id                   = "5ba41838-5fc3-4da0-9dae-3b7d8d16ef09"
        name                 = "cloudnativenow-firewall"
        # (3 unchanged attributes hidden)

      - ingress_rule {
          - action   = "allow" -> null
          - cidr     = [
              - "0.0.0.0/0",
            ] -> null
          - id       = "8c6f464e-7e4b-4772-b901-b7c809df07eb" -> null
          - label    = "ping" -> null
          - protocol = "icmp" -> null
        }
      - ingress_rule {
          - action     = "allow" -> null
          - cidr       = [
              - "88.97.212.179/32",
            ] -> null
          - id         = "6e338ee3-41c3-4b8f-ab37-86f0ac291890" -> null
          - label      = "local" -> null
          - port_range = "3306" -> null
          - protocol   = "tcp" -> null
        }
      + ingress_rule {
          + action   = "allow"
          + cidr     = [
              + "0.0.0.0/0",
            ]
          + id       = "8c6f464e-7e4b-4772-b901-b7c809df07eb"
          + label    = "ping"
          + protocol = "icmp"
        }
      + ingress_rule {
          + action     = "allow"
          + cidr       = [
              + "88.97.210.216/32",
            ]
          + id         = (known after apply)
          + label      = "local"
          + port_range = "3306"
          + protocol   = "tcp"
        }

        # (11 unchanged blocks hidden)
    }

  # civo_kubernetes_cluster.cloudnativenow will be updated in-place
  ~ resource "civo_kubernetes_cluster" "cloudnativenow" {
        id                     = "371c04de-235e-4fa2-bd53-8ba42bc460d3"
      ~ kubernetes_version     = "1.35.0-k3s1" -> "1.30.5-k3s1"
        name                   = "CloudNative.now"
        # (16 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # flux_bootstrap_git.cloudnativenow will be updated in-place
  ~ resource "flux_bootstrap_git" "cloudnativenow" {
        id                   = "flux-system"
      ~ repository_files     = {
          ~ "flux/flux-system/gotk-sync.yaml"       = <<-EOT
              - 
              + # This manifest was generated by flux. DO NOT EDIT.
              + ---
              + apiVersion: source.toolkit.fluxcd.io/v1
              + kind: GitRepository
              + metadata:
              +   name: flux-system
              +   namespace: flux-system
              + spec:
              +   interval: 1m0s
              +   ref:
              +     branch: main
              +   secretRef:
              +     name: flux-system
              +   url: https://github.com/NamelessPlanet/CloudNativeNow-Gitops.git
              + ---
              + apiVersion: kustomize.toolkit.fluxcd.io/v1
              + kind: Kustomization
              + metadata:
              +   name: flux-system
              +   namespace: flux-system
              + spec:
              +   interval: 10m0s
              +   path: ./flux
              +   prune: true
              +   sourceRef:
              +     kind: GitRepository
              +     name: flux-system
            EOT
            # (2 unchanged elements hidden)
        }
      ~ version              = "v2.5.1" -> "v2.8.7"
        # (13 unchanged attributes hidden)
    }

Plan: 0 to add, 3 to change, 0 to destroy.

Changes to Outputs:
  ~ kubernetes_kubeconfig   = (sensitive value)

Warning: Flux resources GitRepository and Kustomization in flux-system namespace are not ready and Flux will be redeployed

  with flux_bootstrap_git.cloudnativenow,
  on main.tf line 168, in resource "flux_bootstrap_git" "cloudnativenow":
 168: resource "flux_bootstrap_git" "cloudnativenow" {

Kustomization/flux-system:
CustomResourceDefinition/ocirepositories.source.toolkit.fluxcd.io dry-run
failed (Invalid): CustomResourceDefinition.apiextensions.k8s.io
"ocirepositories.source.toolkit.fluxcd.io" is invalid:
status.storedVersions[0]: Invalid value: "v1beta2": missing from
spec.versions; v1beta2 was previously a storage version, and must remain in
spec.versions until a storage migration ensures no data remains persisted in
v1beta2 and removes v1beta2 from status.storedVersions


─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so OpenTofu can't
guarantee to take exactly these actions if you run "tofu apply" now.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: infra/.terraform.lock.hcl

external-host-error