terraform-azurerm-set-diff-analyzer

作者： github

识别Terraform AzureRM计划中由Set类型属性排序导致的误报差异。分析terraform plan JSON输出，区分虚假差异（Set中元素重新排序）与实际资源变更。针对具有Set类型属性的AzureRM资源：应用程序网关、负载均衡器、网络安全组、防火墙、Front Door等。需要Python 3.8+，仅使用标准库；通过可配置的输出格式和退出码集成到CI/CD流水线中。帮助审查者...

npx skills add https://github.com/github/awesome-copilot --skill terraform-azurerm-set-diff-analyzer

下载 ZIP GitHub

35.8k

Terraform AzureRM Set Diff Analyzer

A skill to identify "false-positive diffs" in Terraform plans caused by AzureRM Provider's Set-type attributes and distinguish them from actual changes.

When to Use

terraform plan shows many changes, but you only added/removed a single element
Application Gateway, Load Balancer, NSG, etc. show "all elements changed"
You want to automatically filter false-positive diffs in CI/CD

Background

Terraform's Set type compares by position rather than by key, so when adding or removing elements, all elements appear as "changed". This is a general Terraform issue, but it's particularly noticeable with AzureRM resources that heavily use Set-type attributes like Application Gateway, Load Balancer, and NSG.

These "false-positive diffs" don't actually affect the resources, but they make reviewing terraform plan output difficult.

Prerequisites

Python 3.8+

If Python is unavailable, install via your package manager (e.g., apt install python3, brew install python3) or from python.org.

Basic Usage

# 1. Generate plan JSON output
terraform plan -out=plan.tfplan
terraform show -json plan.tfplan > plan.json

# 2. Analyze
python scripts/analyze_plan.py plan.json

Troubleshooting

python: command not found: Use python3 instead, or install Python
ModuleNotFoundError: Script uses only standard library; ensure Python 3.8+