{
  "createdAt": "2026-04-03T18:36:22.343Z",
  "planFile": "/home/uprootiny/damm/data/tracer-reconcile-plan.json",
  "results": [
    {
      "action": {
        "action": "scale_ingress_up",
        "region": "eu-central",
        "provider": "fly",
        "add": 2
      },
      "results": [
        {
          "mode": "plan",
          "skipped": true,
          "action": {
            "action": "scale_ingress_up",
            "region": "eu-central",
            "provider": "fly",
            "add": 2
          }
        }
      ]
    },
    {
      "action": {
        "action": "allocate_more_egress_ips",
        "region": "eu-central",
        "provider": "hetzner",
        "add": 8
      },
      "results": [
        {
          "mode": "plan",
          "provider": "hetzner",
          "kind": "egress-ip",
          "spec": {
            "region": "eu-central",
            "location": "fsn1",
            "labels": {
              "role": "egress-ip",
              "region": "eu-central"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "hetzner",
          "kind": "egress-ip",
          "spec": {
            "region": "eu-central",
            "location": "fsn1",
            "labels": {
              "role": "egress-ip",
              "region": "eu-central"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "hetzner",
          "kind": "egress-ip",
          "spec": {
            "region": "eu-central",
            "location": "fsn1",
            "labels": {
              "role": "egress-ip",
              "region": "eu-central"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "hetzner",
          "kind": "egress-ip",
          "spec": {
            "region": "eu-central",
            "location": "fsn1",
            "labels": {
              "role": "egress-ip",
              "region": "eu-central"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "hetzner",
          "kind": "egress-ip",
          "spec": {
            "region": "eu-central",
            "location": "fsn1",
            "labels": {
              "role": "egress-ip",
              "region": "eu-central"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "hetzner",
          "kind": "egress-ip",
          "spec": {
            "region": "eu-central",
            "location": "fsn1",
            "labels": {
              "role": "egress-ip",
              "region": "eu-central"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "hetzner",
          "kind": "egress-ip",
          "spec": {
            "region": "eu-central",
            "location": "fsn1",
            "labels": {
              "role": "egress-ip",
              "region": "eu-central"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "hetzner",
          "kind": "egress-ip",
          "spec": {
            "region": "eu-central",
            "location": "fsn1",
            "labels": {
              "role": "egress-ip",
              "region": "eu-central"
            }
          }
        }
      ]
    },
    {
      "action": {
        "action": "update_catalog_rotation",
        "region": "eu-central",
        "ingressTtlMinutes": 20
      },
      "results": [
        {
          "mode": "plan",
          "skipped": true,
          "action": {
            "action": "update_catalog_rotation",
            "region": "eu-central",
            "ingressTtlMinutes": 20
          }
        }
      ]
    },
    {
      "action": {
        "action": "create_ingress_nodes",
        "region": "me-west",
        "provider": "digitalocean",
        "count": 3,
        "requires": {
          "apiAccess": true,
          "privateNetworks": true
        }
      },
      "results": [
        {
          "mode": "plan",
          "provider": "digitalocean",
          "kind": "ingress",
          "spec": {
            "name": "me-west-ingress-1",
            "provider": "digitalocean",
            "role": "ingress",
            "region": "me-west",
            "location": "me-west",
            "image": "ubuntu-24-04-x64",
            "size": "s-1vcpu-1gb",
            "labels": {
              "role": "ingress",
              "region": "me-west"
            },
            "tags": [
              "role:ingress",
              "region:me-west"
            ],
            "userData": "#cloud-config\npackage_update: true\npackages:\n  - wireguard\n  - jq\nwrite_files:\n  - path: /etc/damm/bootstrap.env\n    permissions: '0600'\n    content: |\n      ROLE=ingress\n      REGION=me-west\n      PROVIDER=digitalocean\n      PUBLIC_CATALOG_URL=\nruncmd:\n  - systemctl enable wg-quick@wg0 || true\n  - echo ingress bootstrap complete"
          }
        },
        {
          "mode": "plan",
          "provider": "digitalocean",
          "kind": "ingress",
          "spec": {
            "name": "me-west-ingress-2",
            "provider": "digitalocean",
            "role": "ingress",
            "region": "me-west",
            "location": "me-west",
            "image": "ubuntu-24-04-x64",
            "size": "s-1vcpu-1gb",
            "labels": {
              "role": "ingress",
              "region": "me-west"
            },
            "tags": [
              "role:ingress",
              "region:me-west"
            ],
            "userData": "#cloud-config\npackage_update: true\npackages:\n  - wireguard\n  - jq\nwrite_files:\n  - path: /etc/damm/bootstrap.env\n    permissions: '0600'\n    content: |\n      ROLE=ingress\n      REGION=me-west\n      PROVIDER=digitalocean\n      PUBLIC_CATALOG_URL=\nruncmd:\n  - systemctl enable wg-quick@wg0 || true\n  - echo ingress bootstrap complete"
          }
        },
        {
          "mode": "plan",
          "provider": "digitalocean",
          "kind": "ingress",
          "spec": {
            "name": "me-west-ingress-3",
            "provider": "digitalocean",
            "role": "ingress",
            "region": "me-west",
            "location": "me-west",
            "image": "ubuntu-24-04-x64",
            "size": "s-1vcpu-1gb",
            "labels": {
              "role": "ingress",
              "region": "me-west"
            },
            "tags": [
              "role:ingress",
              "region:me-west"
            ],
            "userData": "#cloud-config\npackage_update: true\npackages:\n  - wireguard\n  - jq\nwrite_files:\n  - path: /etc/damm/bootstrap.env\n    permissions: '0600'\n    content: |\n      ROLE=ingress\n      REGION=me-west\n      PROVIDER=digitalocean\n      PUBLIC_CATALOG_URL=\nruncmd:\n  - systemctl enable wg-quick@wg0 || true\n  - echo ingress bootstrap complete"
          }
        }
      ]
    },
    {
      "action": {
        "action": "allocate_ingress_frontdoors",
        "region": "me-west",
        "provider": "digitalocean",
        "count": 6
      },
      "results": [
        {
          "mode": "plan",
          "provider": "digitalocean",
          "kind": "ingress-frontdoor",
          "spec": {
            "region": "me-west",
            "labels": {
              "role": "ingress-frontdoor",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "digitalocean",
          "kind": "ingress-frontdoor",
          "spec": {
            "region": "me-west",
            "labels": {
              "role": "ingress-frontdoor",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "digitalocean",
          "kind": "ingress-frontdoor",
          "spec": {
            "region": "me-west",
            "labels": {
              "role": "ingress-frontdoor",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "digitalocean",
          "kind": "ingress-frontdoor",
          "spec": {
            "region": "me-west",
            "labels": {
              "role": "ingress-frontdoor",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "digitalocean",
          "kind": "ingress-frontdoor",
          "spec": {
            "region": "me-west",
            "labels": {
              "role": "ingress-frontdoor",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "digitalocean",
          "kind": "ingress-frontdoor",
          "spec": {
            "region": "me-west",
            "labels": {
              "role": "ingress-frontdoor",
              "region": "me-west"
            }
          }
        }
      ]
    },
    {
      "action": {
        "action": "create_egress_nodes",
        "region": "me-west",
        "provider": "vultr",
        "count": 2,
        "requires": {
          "apiAccess": true,
          "privateNetworks": true
        }
      },
      "results": [
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress",
          "spec": {
            "name": "me-west-egress-1",
            "provider": "vultr",
            "role": "egress",
            "region": "me-west",
            "location": "me-west",
            "image": "ubuntu-24.04",
            "size": "small",
            "labels": {
              "role": "egress",
              "region": "me-west"
            },
            "tags": [
              "role:egress",
              "region:me-west"
            ],
            "userData": "#cloud-config\npackage_update: true\npackages:\n  - wireguard\n  - jq\nwrite_files:\n  - path: /etc/damm/bootstrap.env\n    permissions: '0600'\n    content: |\n      ROLE=egress\n      REGION=me-west\n      PROVIDER=vultr\n      PUBLIC_CATALOG_URL=\nruncmd:\n  - systemctl enable wg-quick@wg0 || true\n  - echo egress bootstrap complete"
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress",
          "spec": {
            "name": "me-west-egress-2",
            "provider": "vultr",
            "role": "egress",
            "region": "me-west",
            "location": "me-west",
            "image": "ubuntu-24.04",
            "size": "small",
            "labels": {
              "role": "egress",
              "region": "me-west"
            },
            "tags": [
              "role:egress",
              "region:me-west"
            ],
            "userData": "#cloud-config\npackage_update: true\npackages:\n  - wireguard\n  - jq\nwrite_files:\n  - path: /etc/damm/bootstrap.env\n    permissions: '0600'\n    content: |\n      ROLE=egress\n      REGION=me-west\n      PROVIDER=vultr\n      PUBLIC_CATALOG_URL=\nruncmd:\n  - systemctl enable wg-quick@wg0 || true\n  - echo egress bootstrap complete"
          }
        }
      ]
    },
    {
      "action": {
        "action": "allocate_egress_ips",
        "region": "me-west",
        "provider": "vultr",
        "count": 12
      },
      "results": [
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        },
        {
          "mode": "plan",
          "provider": "vultr",
          "kind": "egress-ip",
          "spec": {
            "region": "me-west",
            "location": "me-west",
            "labels": {
              "role": "egress-ip",
              "region": "me-west"
            }
          }
        }
      ]
    },
    {
      "action": {
        "action": "publish_endpoint_catalog",
        "region": "me-west",
        "provider": "digitalocean",
        "rotation": {
          "ingressTtlMinutes": 15,
          "egressTtlMinutes": 120,
          "rebalancePolicy": "session-stickiness-with-drain"
        }
      },
      "results": [
        {
          "mode": "plan",
          "skipped": true,
          "action": {
            "action": "publish_endpoint_catalog",
            "region": "me-west",
            "provider": "digitalocean",
            "rotation": {
              "ingressTtlMinutes": 15,
              "egressTtlMinutes": 120,
              "rebalancePolicy": "session-stickiness-with-drain"
            }
          }
        }
      ]
    }
  ]
}