Skip to content

Technical Preview

Pre-release
Pre-release

Choose a tag to compare

View all tags
@andreimerlescu andreimerlescu released this 19 Jul 17:45
v0.0.1
539fa6a
This commit was signed with the committer’s verified signature.
andreimerlescu Andrei Merlescu
GPG key ID: 0F05A7169B0D2519
Verified
Learn about vigilant mode.

I AM ($IAM) excited to announce the first technical preview pre-release of reconcile-tfstate! This tool helps you detect and manage discrepancies between your Terraform state file and your live AWS infrastructure. Our goal is to provide a robust solution for identifying drift and assisting with state reconciliation.

As a technical preview, this release is intended for early adopters to test and provide feedback. Expect ongoing development, potential breaking changes in future pre-releases, and an evolving feature set. Your input is crucial for shaping the future of this tool!

What's Included

This initial preview focuses on core functionality:

  • Terraform State File Parsing: Reads and interprets Terraform state files (currently supporting Terraform state file version 4).
  • AWS Resource Verification: Connects to your AWS account to verify the existence and details of resources declared in your state.
  • S3 State Support:
    • Download: Automatically downloads Terraform state files from S3 buckets.
    • Upload Instructions: Provides clear AWS CLI commands to upload the modified state back to S3, ensuring versioning is maintained.
  • Drift Detection: Identifies resources that are:
    • DANGEROUS: In state but not found in AWS (e.g., manually deleted).
    • POTENTIAL_IMPORT: Found in AWS but with a different ID than in state, suggesting they exist but aren't correctly tracked.
    • REGION_MISMATCH: Resources whose ARNs indicate they are in a different AWS region than the one being checked.
  • Actionable Commands: Generates terraform import or terraform state rm commands where applicable, helping you resolve discrepancies.
  • Supported Resource Types: Initial support for verifying common AWS resources, including:
    • aws_s3_bucket
    • aws_cloudwatch_log_group
    • aws_key_pair
    • aws_security_group
    • aws_route53_zone
    • aws_lb
    • aws_lb_listener
    • aws_lb_target_group
    • aws_lb_listener_rule
    • Ignores local/data resources like aws_caller_identity, aws_iam_policy_document, archive_file, local_file, and random_password.
  • Concurrency Control: Allows you to specify the number of concurrent AWS API calls for faster checks.
  • Version Flag: Use --v to display the tool's version.

Known Limitations & Areas for Improvement

  • Limited Resource Type Coverage: The current version only supports a subset of AWS resource types. We plan to expand this significantly.
  • Read-Only Verification: This tool performs read-only checks against AWS. It does not modify your AWS resources directly. Any suggested terraform commands must be executed manually.
  • Error Handling Refinements: Ongoing work to improve error messaging and robustness.
  • Terraform State Version Support: Currently restricted to v4 state files.

We Need Your Feedback!

This is your chance to influence the development of reconcile-tfstate. Please report any issues, unexpected behaviors, or feature requests via the GitHub Issues page.

Thank you for being an early tester!

Assets 7
Loading