guardicore / guardicore/monkey

Ignore certain terraform metadata when updating infrastructure

Open
#3,954 0 comments 0 reactions 0 assignees View on GitHub
Feature
Dominant language
Python
Stars
7.1k
Forks
830
PR merge metrics
No merged PRs in 30d

Description

If a user adds ssh keys to a deployed googlecompute resource, terraform will detect the change and want to overwrite it. However, we want to allow users to be able to add ssh keys without it tainting the infrastructure.

[This post](https://stackoverflow.com/questions/62765176/terraform-lifecycle-to-ignore-ssh-key-in-metadata) outlines a way to resolve the problem, by adding a lifecycle configuration to the resource.

We want to allow at least the "ssh-keys", and probably the "windows-keys" metadata to change. There may be more.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.