Skip to content

terraform-search-import: more tidying before import #65

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
bbasata wants to merge 2 commits into from
Closed

terraform-search-import: more tidying before import #65

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
762046a
terraform-search-import: more tidying before import
bbasata Apr 16, 2026
43e8613
Merge branch 'main' into terraform-tidy-for-import
bbasata Apr 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 25 additions & 4 deletions terraform/code-generation/skills/terraform-search-import/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ name: terraform-search-import
description: Discover existing cloud resources using Terraform Search queries and bulk import them into Terraform management. Use when bringing unmanaged infrastructure under Terraform control, auditing cloud resources, or migrating to IaC.
metadata:
copyright: Copyright IBM Corp. 2026
version: "0.1.0"
version: "0.2.0"
compatibility: Requires Terraform >= 1.14 and providers with list resource support (always use latest provider version)
---

Expand Down Expand Up @@ -259,9 +259,13 @@ import {
Generated configuration includes all attributes. Clean up by:

1. Remove computed/read-only attributes
2. Replace hardcoded values with variables
3. Add proper resource naming
4. Organize into appropriate files
1. Replace hardcoded values with variables
1. Remove computed sensitive values
1. Remove non-computed sensitive values. If the provider still requires one of the removed arguments, use an ignored write-only placeholder instead.
1. Remove top-level `timeout` blocks from all resources.
1. Run `terraform validate` and resolve conflicting generated arguments.
1. Add proper resource naming
1. Organize into appropriate files

```hcl
# Before: generated
Expand All @@ -273,6 +277,12 @@ resource "aws_instance" "all_0" {
# ... many more attributes
}

resource "aws_ssm_parameter" "all_0" {
type = "SecureString"
name = "AccessCode"
value = "secret" # Remove - sensitive
}

# After: cleaned
resource "aws_instance" "web_server" {
ami = var.ami_id
Expand All @@ -284,6 +294,17 @@ resource "aws_instance" "web_server" {
Environment = var.environment
}
}

resource "aws_ssm_parameter" "access_code" {
type = "SecureString"
name = "AccessCode"
value_wo = "__imported__"
value_wo_version = 1

lifecycle {
ignore_changes = [value, value_wo, value_wo_version]
}
}
```

## Import by Identity
Expand Down