mirror of
https://github.com/opentofu/opentofu.git
synced 2024-12-28 18:01:01 -06:00
d4b9362518
Most CBD-related cycles include destroy nodes, and destroy nodes were all being pruned from the graph before staring the Validate walk. In practice this meant that we had scenarios that would error out with graph cycles on Apply that _seemed_ fine during Plan. This introduces a Verbose option to the GraphBuilder that tells it to generate a "worst-case" graph. Validate sets this to true so that cycle errors will always trigger at this step if they're going to happen. (This Verbose option will be exposed as a CLI flag to `terraform graph` in a second incoming PR.) refs #1651
20 lines
397 B
HCL
20 lines
397 B
HCL
provider "aws" { }
|
|
|
|
/*
|
|
* When a CBD resource depends on a non-CBD resource,
|
|
* a cycle is formed that only shows up when Destroy
|
|
* nodes are included in the graph.
|
|
*/
|
|
resource "aws_security_group" "firewall" {
|
|
}
|
|
|
|
resource "aws_instance" "web" {
|
|
security_groups = [
|
|
"foo",
|
|
"${aws_security_group.firewall.foo}"
|
|
]
|
|
lifecycle {
|
|
create_before_destroy = true
|
|
}
|
|
}
|