guardicore / guardicore/monkey
Ignore certain terraform metadata when updating infrastructure
Open
Feature
- Dominant language
- Python
- Stars
- 7.1k
- Forks
- 830
- PR merge metrics
- No merged PRs in 30d
Description
If a user adds ssh keys to a deployed googlecompute resource, terraform will detect the change and want to overwrite it. However, we want to allow users to be able to add ssh keys without it tainting the infrastructure.
[This post](https://stackoverflow.com/questions/62765176/terraform-lifecycle-to-ignore-ssh-key-in-metadata) outlines a way to resolve the problem, by adding a lifecycle configuration to the resource.
We want to allow at least the "ssh-keys", and probably the "windows-keys" metadata to change. There may be more.
Contributor guide
Assessment
This issue has not been assessed yet.