Fix: remove tailscale_device_subnet_routes (403 permission error) #28

Merged

AlexCaswen merged 1 commit from fix-remove-subnet-routes-resource into main

2026-05-07 06:20:06 +00:00

AlexCaswen commented

2026-05-07 06:18:16 +00:00

(Migrated from gitlab.com)

What

Removes tailscale_device_subnet_routes and data.tailscale_device from incus.tf.

The CI Tailscale token lacks devices:write scope, causing a 403 on every apply. Route approval is already handled by autoApprovers in acl.hujson, making this resource redundant.

Remaining issue

The Grafana local deployment still times out (CI can't reach 10.121.25.50:3000). This is a separate IP forwarding/firewall issue on IncusOS that needs debugging independently. Cloud dashboards deployed successfully.

## What Removes `tailscale_device_subnet_routes` and `data.tailscale_device` from incus.tf. The CI Tailscale token lacks `devices:write` scope, causing a 403 on every apply. Route approval is already handled by `autoApprovers` in acl.hujson, making this resource redundant. ## Remaining issue The Grafana local deployment still times out (CI can't reach `10.121.25.50:3000`). This is a separate IP forwarding/firewall issue on IncusOS that needs debugging independently. Cloud dashboards deployed successfully.