Resources are missing ignore_changes = [tags] leading to churn when tags are applied using policy

[marrobi]

Resources are missing ignore_changes = [tags] leading to churn when tags are applied using policy.

lifecycle { ignore_changes = [tags] }

Needs adding to all resources that have tags applied by the Azure TRE.

[marrobi]

Using this script to resolve:

import os
import re

# Find all Terraform files in the repository skipping any directories named .terraform
files = []
for root, dirs, filenames in os.walk('.'):
    if '.terraform' in dirs:
        dirs.remove('.terraform')
    for filename in filenames:
        if filename.endswith('.tf'):
            files.append(os.path.join(root, filename))


# Loop through each file
for file in files:
    print(f'Processing {file}')
    with open(file, 'r') as f:
        content = f.readlines()
        # Loop through each line in the file
        i = 0
        while i < len(content):
            line = content[i]
            # Check if the line defines a resource
            if re.match(r'resource "[^"]+" "[^"]+" \{', line):
                # Find the position of the closing curly brace of the resource
                brace_count = 0
                j = i
                while (j == i or brace_count > 0) and j < len(content):
                    if '{' in content[j]:
                        brace_count += content[j].count('{')
                    if '}' in content[j]:
                        brace_count -= content[j].count('}')
                    j += 1
                end = j
                # Define the resource variable
                resource = ''.join(content[i:end])
                # Check if the resource has a "tags" attribute but no "lifecycle" attribute
                if re.search(r'tags\s*=', resource) and not re.search(r'lifecycle\s*{', resource):
                    # Add the "lifecycle" block to the resource
                    content[i:end] = content[i:end - 1] + [f'\n  lifecycle {{ ignore_changes = [tags] }}\n'] + content[end - 1:end]
                    # output the resource and file name
                    print(f'Added lifecycle block to resource in {file}')
                # Move the index to the end of the resource
                i = end
            else:
                i += 1
        with open(file, 'w') as f:
            f.writelines(content)