fix

[tomaevmax]

checkov -d .
2023-06-20 07:12:32,436 [MainThread ] [WARNI] Failed to download module git::https://github.com/udjin10/yandex_compute_instance.git?ref=test:None (for external modules, the --download-external-modules flag is required)
[ kubernetes framework ]: 100%|████████████████████|[1/1], Current File Scanned=cloud-init.yml
[ secrets framework ]: 38%|███████▌ |[3/8], Current File Scanned=./cloud-init.ymlrk ]: 100%|████████████████████|[6/6], Current File Scanned=variables.tf
[ secrets framework ]: 100%|████████████████████|[8/8], Current File Scanned=./modules/vpc_dev/variables.tf

src git:(terraform-hotfix) ✗ tflint

➜ src git:(terraform-hotfix) ✗ terraform plan -lock=false
╷
│ Error: Module source has changed
│
│ on main.tf line 2, in module "test-vm":
│ 2: source = "git::https://github.com/udjin10/yandex_compute_instance.git?ref=test"
│
│ The source address was changed since this module was installed. Run "terraform init" to install all modules required by this configuration.

➜ src git:(terraform-hotfix) ✗ terraform plan -lock=false
data.template_file.cloudinit: Reading...
data.template_file.cloudinit: Read complete after 0s [id=6348d2354e86fb497ae4e7b8a01af63b881f5778d84339c20688b431718400c3]
module.test-vm.data.yandex_compute_image.my_image: Reading...
module.test-vm.data.yandex_compute_image.my_image: Read complete after 1s [id=fd84n8eontaojc77hp0u]

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:

• create

Terraform will perform the following actions:

module.test-vm.null_resource.example will be created

• resource "null_resource" "example" {
  • id = (known after apply)
    }

module.test-vm.yandex_compute_instance.vm[0] will be created

• resource "yandex_compute_instance" "vm" {

  • allow_stopping_for_update = true

  • created_at = (known after apply)

  • description = "TODO: description; {{terraform managed}}"

  • folder_id = (known after apply)

  • fqdn = (known after apply)

  • gpu_cluster_id = (known after apply)

  • hostname = "develop-web-0"

  • id = (known after apply)

  • labels = {

    • "env" = "develop"
    • "project" = "undefined"
      }

  • metadata = {

    • "serial-port-enable" = "1"
    • "user-data" = <<-EOT
      #cloud-config
      users:
      - name: ubuntu
      groups: sudo
      shell: /bin/bash
      sudo: ['ALL=(ALL) NOPASSWD:ALL']
      ssh_authorized_keys:
      - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILzsVjG95NO8uNUlNLhJBXzg75lhffQcZpaqRpchSglS
      package_update: true
      package_upgrade: false
      packages:
      - vim
      ansible.builtin.apt:
      name: "nginx"
      state: "latest"
      update_cache: true
      EOT
      }

  • name = "develop-web-0"

  • network_acceleration_type = "standard"

  • platform_id = "standard-v1"

  • service_account_id = (known after apply)

  • status = (known after apply)

  • zone = "ru-central1-a"

  • boot_disk {

    • auto_delete = true

    • device_name = (known after apply)

    • disk_id = (known after apply)

    • mode = (known after apply)

    • initialize_params {

      • block_size = (known after apply)
      • description = (known after apply)
      • image_id = "fd84n8eontaojc77hp0u"
      • name = (known after apply)
      • size = 10
      • snapshot_id = (known after apply)
      • type = "network-hdd"
        }
        }

  • network_interface {

    • index = (known after apply)
    • ip_address = (known after apply)
    • ipv4 = true
    • ipv6 = (known after apply)
    • ipv6_address = (known after apply)
    • mac_address = (known after apply)
    • nat = true
    • nat_ip_address = (known after apply)
    • nat_ip_version = (known after apply)
    • security_group_ids = (known after apply)
    • subnet_id = (known after apply)
      }

  • resources {

    • core_fraction = 5
    • cores = 2
    • memory = 1
      }

  • scheduling_policy {

    • preemptible = true
      }
      }

module.test-vm.yandex_compute_instance.vm[1] will be created

• resource "yandex_compute_instance" "vm" {

  • allow_stopping_for_update = true

  • created_at = (known after apply)

  • description = "TODO: description; {{terraform managed}}"

  • folder_id = (known after apply)

  • fqdn = (known after apply)

  • gpu_cluster_id = (known after apply)

  • hostname = "develop-web-1"

  • id = (known after apply)

  • labels = {

    • "env" = "develop"
    • "project" = "undefined"
      }

  • metadata = {

    • "serial-port-enable" = "1"
    • "user-data" = <<-EOT
      #cloud-config
      users:
      - name: ubuntu
      groups: sudo
      shell: /bin/bash
      sudo: ['ALL=(ALL) NOPASSWD:ALL']
      ssh_authorized_keys:
      - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILzsVjG95NO8uNUlNLhJBXzg75lhffQcZpaqRpchSglS
      package_update: true
      package_upgrade: false
      packages:
      - vim
      ansible.builtin.apt:
      name: "nginx"
      state: "latest"
      update_cache: true
      EOT
      }

  • name = "develop-web-1"

  • network_acceleration_type = "standard"

  • platform_id = "standard-v1"

  • service_account_id = (known after apply)

  • status = (known after apply)

  • zone = "ru-central1-a"

  • boot_disk {

    • auto_delete = true

    • device_name = (known after apply)

    • disk_id = (known after apply)

    • mode = (known after apply)

    • initialize_params {

      • block_size = (known after apply)
      • description = (known after apply)
      • image_id = "fd84n8eontaojc77hp0u"
      • name = (known after apply)
      • size = 10
      • snapshot_id = (known after apply)
      • type = "network-hdd"
        }
        }

  • network_interface {

    • index = (known after apply)
    • ip_address = (known after apply)
    • ipv4 = true
    • ipv6 = (known after apply)
    • ipv6_address = (known after apply)
    • mac_address = (known after apply)
    • nat = true
    • nat_ip_address = (known after apply)
    • nat_ip_version = (known after apply)
    • security_group_ids = (known after apply)
    • subnet_id = (known after apply)
      }

  • resources {

    • core_fraction = 5
    • cores = 2
    • memory = 1
      }

  • scheduling_policy {

    • preemptible = true
      }
      }

module.vpc_dev.yandex_vpc_network.develop will be created

• resource "yandex_vpc_network" "develop" {
  • created_at = (known after apply)
  • default_security_group_id = (known after apply)
  • folder_id = (known after apply)
  • id = (known after apply)
  • labels = (known after apply)
  • name = "develop"
  • subnet_ids = (known after apply)
    }

module.vpc_dev.yandex_vpc_subnet.develop will be created

• resource "yandex_vpc_subnet" "develop" {
  • created_at = (known after apply)
  • folder_id = (known after apply)
  • id = (known after apply)
  • labels = (known after apply)
  • name = "develop"
  • network_id = (known after apply)
  • v4_cidr_blocks = [
    • "10.0.1.0/24",
      ]
  • v6_cidr_blocks = (known after apply)
  • zone = "ru-central1-a"
    }

Plan: 5 to add, 0 to change, 0 to destroy.

───────────────────────────────────────────────────────────────────────────────────────