From dd0173d1ec5e60bf2ffc4a4e0d4d7e13c14f1cd4 Mon Sep 17 00:00:00 2001 From: Rob Lazzurs Date: Sat, 4 Jul 2026 15:27:47 +0000 Subject: [PATCH] fix(cloudflare): forget zone settings override from state without destroy The override landed in state on the first apply; destroying it writes read-only settings back to the API and fails. A removed block with destroy = false drops it from state cleanly. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01Gv4g5QrwxvAe1BcQF7PdvY --- .../unicornops/zones/familychat-dev/terragrunt.hcl | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/cloudflare/unicornops/zones/familychat-dev/terragrunt.hcl b/cloudflare/unicornops/zones/familychat-dev/terragrunt.hcl index c3c9274..cc2471d 100644 --- a/cloudflare/unicornops/zones/familychat-dev/terragrunt.hcl +++ b/cloudflare/unicornops/zones/familychat-dev/terragrunt.hcl @@ -57,6 +57,17 @@ resource "cloudflare_zone" "this" { # reads every setting including entitlement-gated ones (origin_max_http_version -> # "Access denied (999)"). New zones default to Automatic SSL/TLS; always_use_https # is enabled at deploy time by family-chat's scripts/cloudflare-enable-always-https.sh. +# +# The override briefly existed in state (first apply); destroying it writes +# read-only settings back and fails, so forget it from state instead. This +# block can be deleted once the removal has applied. +removed { + from = cloudflare_zone_settings_override.this + + lifecycle { + destroy = false + } +} output "zone_id" { value = cloudflare_zone.this.id