search

bridgecrewio / yor

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.
https://www.yor.io
Apache License 2.0
795 stars 121 forks source link

Showstopper due to `aws_launch_template` tags triggering rebuilds #489

Closed nikolay closed 1 month ago

nikolay commented 4 months ago

I am using the most popular AWS EKS module and just started using yor, but it turned to be a showstopper as it indirectly changes the tags of aws_launch_template, which leads to the rebuilding of the node groups every single time.

What is the recommended solution to avoid tags to resources, which source code you don't control?

Also, how can the tags be removed as I have a lot of instances?

ChanochShayner commented 4 months ago

Hey @nikolay :) You can use the --skip-resources flag, an example in the readme.

nikolay commented 4 months ago

@ChanochShayner Well, honestly, the documentation is pretty light. As I found it, it doesn't really say, for example, that these are names, not fully qualified names with the resource type, that the names are comma-delimited, etc. Also, there are parameters in the CLI. If I want to have one place for the CLI and the GitHub Actions for these ignores, I need to keep both places in sync. Please allow annotations (via comments, for example) to skip tagging or skip modules by source.

stale[bot] commented 2 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.