wip

Signed-off-by: ivan katliarchuk <[email protected]>

Author: ivankatliarchuk

playground/utils/tag_validation.rego

@@ -0,0 +1,24 @@
+package terraform.tag_validation
+
+# Tag checking functions
+# Read all tags from a resource
+readTags(resource) = tags if {
+    tags = resource.change.after.tags
+}
+
+# Check if tag is present for a given resource
+findTag(resource, tagName) if {
+    readTags(resource)[tagName]
+}
+
+# Check if tag has proper value for a given resource
+findValue(resource, tagName, tagValue) if {
+    readTags(resource)[tagName] == tagValue
+}
+
+# Check if all tags are present for a given resource
+missingTags(resource, tagList) if {
+    keys := { key | resource.change.after.tags[key] }
+    missing := tagList - keys
+    missing == set()
+}

playground/utils/terraform_functions.rego

@@ -0,0 +1,26 @@
+package terraform.plan_functions
+
+# Get resources by type
+get_resources_by_type(type, resources) = filtered_resources if {
+    filtered_resources := [resource | resource := resources[_]; resource.type = type]
+}
+
+# Get resources by action
+get_resources_by_action(action, resources) = filtered_resources if {
+    filtered_resources := [resource | resource := resources[_]; resource.change.actions[_] = action]
+}
+
+# Get resources by type and action
+get_resources_by_type_and_action(type, action, resources) = filtered_resources if {
+    filtered_resources := [resource | resource := resources[_]; resource.type = type; resource.change.actions[_] = action]
+}
+
+# Get resource by name
+get_resource_by_name(resource_name, resources) = filtered_resources if {
+    filtered_resources := [resource | resource := resources[_]; resource.name = resource_name]
+}
+
+# Get resource by type and name
+get_resource_by_type_and_name(type, resource_name, resources) = filtered_resources if {
+    filtered_resources := [resource | resource := resources[_]; resource.type = type; resource.name = resource_name]
+}