Derive archs value directly from input#66
Open
jdolitsky wants to merge 1 commit intochainguard-dev:mainfrom
Open
Derive archs value directly from input#66jdolitsky wants to merge 1 commit intochainguard-dev:mainfrom
jdolitsky wants to merge 1 commit intochainguard-dev:mainfrom
Conversation
The current implementation is attempting to assign local.archs from the apko config output. This is leading to an error 'The "for_each" set includes values derived from resource attributes that cannot be determined until apply. This instead grabs the archs as provided in the input config Signed-off-by: Josh Dolitsky <josh@dolit.ski>
mattmoor
reviewed
Oct 15, 2025
| } | ||
|
|
||
| locals { archs = toset(concat(["index"], data.apko_config.this.config.archs)) } | ||
| locals { archs = toset(concat(["index"], try(jsondecode(var.config).archs, []))) } |
Member
There was a problem hiding this comment.
Does this mean that var.extra_packages or var.default_annotations are derived from resources not known at apply time because this wouldn't work if it were var.config 🤔
Author
There was a problem hiding this comment.
im not sure i completely follow, but the difference with those fields are they are used only as inputs into the apko provider. the archs however is used down below in a for_each statement causing the error on PR description. It's not clear how this was working previously
Author
There was a problem hiding this comment.
error is
for_each = var.skip_attest ? [] : local.archs
├────────────────
│ local.archs is a set of dynamic, known only after apply
│ var.skip_attest is false
The "for_each" set includes values derived from resource attributes that
cannot be determined until apply, and so Terraform cannot determine the full
set of keys that will identify the instances of this resource.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The current implementation is attempting to assign local.archs from the apko config output. This is leading to an error 'The "for_each" set includes values derived from resource attributes that cannot be determined until apply.
This instead grabs the archs as provided in the input config