feat: Support lifecycle ignoreChanges with module

[Hi-Fi]

Check for previous/existing GitHub issues

• I have checked for previous/existing GitHub issues

Issue Type?

Feature Request

(Optional) Module Version

0.5.3

(Optional) Correlation Id

No response

Description

As Terraform doesn't support lifecycle meta-argument with modules (see hashicorp/terraform#27360) it would be nice that module would allow ignoring some things that are (at least in our environment) handled with policies. Of course the ignore can be more generic if possible, but at least for use tags and private_dns_zone_group.

[matt-FFFFFF]

Hi - we cannot support this due to limitations in Terraform - will keep open to track

[rick-pb]

are you able to provide an explanation of why this isn't supported? ignore changes should be able to be able to be added to the resource in the module.

[matt-FFFFFF]

Entries in ignore_changes must be static and cannot be passed in as variables.

Also they cannot be passed in through a call to a module.

Hence we are not able to provide a configurable list

[matt-FFFFFF]

However we have solved private dns zone group as we have a variable to control whether we manage this or not

[oocx]

Another use case for ignore_changes: I'm currently trying to create a secret, where the value is updated outside of terraform. Because I can't ignore changes to the secrets value, terraform tries to reset it to it's initial value that is specified in my terraform configuration.