Ignore tags managed by external party

[kirek007]

What problem are you facing?

My AWS account are managed by organization that have automation in place that adds tags with known prefix to all resources create by me. These tags can not be created or changed by me.

How could Official AWS Provider help solve your problem?

Terraform-aws-provider provides an option to ignore tags by prefix, provider-wide. (Documentation)

My propose is to extend ProviderConfig with field that allows defining prefixes to ignore. This is later used in provided configuration here

apiVersion: aws.upbound.io/v1beta1
kind: ProviderConfig
metadata:
  name: default
spec:
  ignoreTags
    prefixes:
      - "platform_"
      - "managed_

What I've tried to mitigate issue:

1. Simply add tags and
2. Disable lateInit - Result:

    Message:               async update failed: failed to update the resource: [...] UnauthorizedOperation: You are not authorized to perform this operation.
    Reason:                AsyncUpdateFailure
    Status:                False
    Type:                  LastAsyncOperation

3. Use InitProvider to create tags in advance - Not possible to update tags later

Solution:

I'm happy to contribute code, I've working PoC, PR will be provided shortly

[haarchri]

xref: #1173

[github-actions]

This provider repo does not have enough maintainers to address every issue. Since there has been no activity in the last 90 days it is now marked as stale. It will be closed in 14 days if no further activity occurs. Leaving a comment starting with /fresh will mark this issue as not stale.

[haarchri]

/fresh

[github-actions]

This provider repo does not have enough maintainers to address every issue. Since there has been no activity in the last 90 days it is now marked as stale. It will be closed in 14 days if no further activity occurs. Leaving a comment starting with /fresh will mark this issue as not stale.

[github-actions]

This issue is being closed since there has been no activity for 14 days since marking it as stale. If you still need help, feel free to comment or reopen the issue!