-
Notifications
You must be signed in to change notification settings - Fork 34
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[BUG] - Analysis fails even when the ARM template (JSON) file is following the guidance #353
Comments
@BernieWhite I haven't investigated this on the PSRule side, but this appears to be AZR-000222 not considering whether the reference to |
Thanks for reporting @shailendragusain @JohnathonMohr. |
@JohnathonMohr The issue is related to
PSRule is passed an expanded template with all expressions replaced. PSRule is going to assume that the location was hardcoded which is the point of rule AZR-000222. Since expanded resource are already passed via
I don't think we need to pass an expanded template and we can use I'll raise a PR. |
I see, interesting. This rule requires not evaluating expressions. However, I'm sure other rules would benefit from having them evaluated. The ideal case would be to run each rule against the desired template state. We might consider taking inventory of the rules and running PSRule twice (in parallel hopefully), once for each state, using the corresponding set of rules. Long term we could add metadata to each rule or something. |
Describe the bug
Here's the sample ARM template
When I run this template against the Template-Analyzer, I get the following error.
Expected behavior
It should not report AZR-000222: Use a location parameter for regional resources.
Reproduction Steps
Create an ARM template file with the following content,
Run the template Analyzer command pointing to this file.
dotnet TemplateAnalyzer.dll analyze-template <path-to-template>.json --report-format Console --include-non-security-rules -v
Environment
I have tried this with Ubuntu and Mac OSX (M1 - Apple Silicon).
NOTE: I am using dotnet-sdk-7.0 to run the TemplateAnalyzer on Unix machines.
The text was updated successfully, but these errors were encountered: