Terraform hotfix

[BellQeen]

mabulaev@Ubuntu2:~/ter-homeworks/04/src/vms$ tflint
mabulaev@Ubuntu2:~/ter-homeworks/04/src/vms$ ~/.local/bin/checkov -d .
2026-06-24 22:34:41,943 [MainThread  ] [WARNI]  Failed to download module git::https://github.com/udjin10/yandex_compute_instance.git?ref=4d05fab828b1fcae16556a4d167134efca2fccf2 (for external modules, the --download-external-modules flag is required)
[ kubernetes framework ]: 100%|████████████████████|[1/1], Current File Scanned=cloud-init.yml
[ terraform framework ]: 100%|████████████████████|[8/8], Current File Scanned=vpc/variables.tf       
[ secrets framework ]: 100%|████████████████████|[9/9], Current File Scanned=./vpc/providers.tf       
[ ansible framework ]: 100%|████████████████████|[1/1], Current File Scanned=cloud-init.yml


       _               _
   ___| |__   ___  ___| | _______   __
  / __| '_ \ / _ \/ __| |/ / _ \ \ / /
 | (__| | | |  __/ (__|   < (_) \ V /
  \___|_| |_|\___|\___|_|\_\___/ \_/

By Prisma Cloud | version: 3.3.1 
Update available 3.3.1 -> 3.3.2
Run pip3 install -U checkov to update 


terraform scan results:

Passed checks: 4, Failed checks: 0, Skipped checks: 0

Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	PASSED for resource: marketing_vm
	File: /main.tf:28-50
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-git-url-with-commit-hash-revision
Check: CKV_TF_2: "Ensure Terraform module sources use a tag with a version number"
	PASSED for resource: marketing_vm
	File: /main.tf:28-50
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-tag
Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
	PASSED for resource: analytics_vm
	File: /main.tf:52-74
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-git-url-with-commit-hash-revision
Check: CKV_TF_2: "Ensure Terraform module sources use a tag with a version number"
	PASSED for resource: analytics_vm
	File: /main.tf:52-74
	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-tag

mabulaev@Ubuntu2:~/ter-homeworks/04/src/vms$ terraform plan
module.analytics_vm.data.yandex_compute_image.my_image: Reading...
module.marketing_vm.data.yandex_compute_image.my_image: Reading...
module.vpc_dev.yandex_vpc_network.this: Refreshing state... [id=enp8nr9kmoif2rbj2pbr]
module.marketing_vm.data.yandex_compute_image.my_image: Read complete after 0s [id=fd8gj6e21rcdul81qsv6]
module.analytics_vm.data.yandex_compute_image.my_image: Read complete after 0s [id=fd8gj6e21rcdul81qsv6]
module.vpc_dev.yandex_vpc_subnet.this: Refreshing state... [id=e9beg8mvakca9jvvpg07]
module.analytics_vm.yandex_compute_instance.vm[0]: Refreshing state... [id=fhm2t95o78nd0njftobg]
module.marketing_vm.yandex_compute_instance.vm[0]: Refreshing state... [id=fhm0j52oafgqk7lk7i1f]

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.analytics_vm.yandex_compute_instance.vm[0] will be updated in-place
  ~ resource "yandex_compute_instance" "vm" {
      ~ description               = "TODO: description; {{terraform yyy managed}}" -> "TODO: description; {{terraform managed}}"
        id                        = "fhm2t95o78nd0njftobg"
        name                      = "analytics-analytics-0"
        # (15 unchanged attributes hidden)

        # (6 unchanged blocks hidden)
    }

  # module.marketing_vm.yandex_compute_instance.vm[0] will be updated in-place
  ~ resource "yandex_compute_instance" "vm" {
      ~ description               = "TODO: description; {{terraform yyy managed}}" -> "TODO: description; {{terraform managed}}"
        id                        = "fhm0j52oafgqk7lk7i1f"
        name                      = "marketing-marketing-0"
        # (15 unchanged attributes hidden)

        # (6 unchanged blocks hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now.

[Jiraiya106]

Отлично, но на будущее коммиты сквошить надо.