tgwrap 0.8.12__py3-none-any.whl → 0.11.2__py3-none-any.whl

tgwrap/analyze.py

@@ -9,7 +9,7 @@ import re
 
 from .printer import Printer
 
-def run_analyze(config, data, verbose=False):
+def run_analyze(config, data, ignore_attributes, verbose=False):
     """ Run the terrasafe validation and return the unauthorized deletions """
 
     printer = Printer(verbose)
@@ -44,11 +44,29 @@ def run_analyze(config, data, verbose=False):
         for criticallity, ts_level in ts_default_levels.items():
             ts_config[ts_level] = [f"*{key}*" for key, value in config[criticallity].items() if value.get('terrasafe_level', ts_level) == ts_level]
 
+        ignorable_updates = []
+        for resource in detected_changes['updates']:
+            before = resource['change']['before']
+            after = resource['change']['after']
+
+            for i in ignore_attributes:
+                try:
+                    before.pop(i)
+                except KeyError:
+                    pass
+                try:
+                    after.pop(i)
+                except KeyError:
+                    pass
+
+            if before == after:
+                ignorable_updates.append(resource['address'])
+
         for resource in detected_changes['deletions']:
             resource_address = resource["address"]
             # Deny has precendence over Allow!
             if is_resource_match_any(resource_address, ts_config["unauthorized_deletion"]):
-                printer.verbose(f'Resource {resource_address} can not be destroyed for any reason')
+                printer.verbose(f'Resource {resource_address} cannot be destroyed for any reason')
             elif is_resource_match_any(resource_address, ts_config["ignore_deletion"]):
                 continue
             elif is_resource_recreate(resource) and is_resource_match_any(
@@ -69,8 +87,8 @@ def run_analyze(config, data, verbose=False):
 
         if changes['unauthorized']:
             printer.verbose("Unauthorized deletion detected for those resources:")
-            for deletion in changes['unauthorized']:
-                printer.verbose(f" - {deletion}")
+            for resource in changes['unauthorized']:
+                printer.verbose(f" - {resource}")
             printer.verbose("If you really want to delete those resources: comment it or export this environment variable:")
             printer.verbose(f"export TERRASAFE_ALLOW_DELETION=\"{';'.join(changes['unauthorized'])}\"")
 
@@ -114,20 +132,26 @@ def run_analyze(config, data, verbose=False):
 
         # now we have the proper lists, calculate the drifts
         for key, value in {'deletions': 'delete', 'creations': 'create', 'updates': 'update'}.items():
-            for resource in detected_changes[key]:
+
+            for index, resource in enumerate(detected_changes[key]):
                 resource_address = resource["address"]
-    
-                has_match, resource_config = get_matching_dd_config(resource_address, dd_config)
-                if has_match:
-                    # so what drift classification do we have?
-                    dd_class = resource_config[value]
-                    changes['drifts'][dd_class] += 1
+
+                # updates might need to be ignored
+                if key == 'updates' and resource_address in ignorable_updates:
+                    detected_changes[key].pop(index)
                 else:
-                    changes['drifts']['unknown'] += 1
-                    if resource_address not in changes['unknowns']:
-                        changes['unknowns'].append(resource_address)
+                    has_match, resource_config = get_matching_dd_config(resource_address, dd_config)
+
+                    if has_match:
+                        # so what drift classification do we have?
+                        dd_class = resource_config[value]
+                        changes['drifts'][dd_class] += 1
+                    else:
+                        changes['drifts']['unknown'] += 1
+                        if resource_address not in changes['unknowns']:
+                            changes['unknowns'].append(resource_address)
 
-                changes['drifts']['total'] += 1
+                    changes['drifts']['total'] += 1
 
     # remove ballast from the following lists
     changes['all'] = [ # ignore read and no-ops
@@ -140,9 +164,17 @@ def run_analyze(config, data, verbose=False):
         ]
     changes['creations'] = [resource["address"] for resource in detected_changes['creations']]
     changes['updates'] = [resource["address"] for resource in detected_changes['updates']]
+    changes['ignorable_updates'] = ignorable_updates
 
-    return changes, (not changes['unauthorized'])
+    # see if there are output changes
+    output_changes = get_output_changes(data)
+    changes['outputs'] = []
+    relevant_changes = set(['create', 'update', 'delete'])
+    for k,v in output_changes.items():
+        if relevant_changes.intersection(v['actions']):
+            changes['outputs'].append(k)
 
+    return changes, (not changes['unauthorized'])
 
 def parse_ignored_from_env_var():
     ignored = os.environ.get("TERRASAFE_ALLOW_DELETION")
@@ -170,6 +202,18 @@ def get_resource_actions(data):
 
     return changes
 
+def get_output_changes(data):
+    # check format version
+    if data["format_version"].split(".")[0] != "0" and data["format_version"].split(".")[0] != "1":
+        raise Exception("Only format major version 0 or 1 is supported")
+
+    if "output_changes" in data:
+        output_changes = data["output_changes"]
+    else:
+        output_changes = {}
+
+    return output_changes
+
 
 def has_delete_action(resource):
     return "delete" in resource["change"]["actions"]
@@ -185,7 +229,7 @@ def has_update_action(resource):
 
 def is_resource_match_any(resource_address, pattern_list):
     for pattern in pattern_list:
-        pattern = re.sub(r"\[(.+?)\]", "[[]\g<1>[]]", pattern)
+        pattern = re.sub(r"\[(.+?)\]", "[[]\\g<1>[]]", pattern)
         if fnmatch.fnmatch(resource_address, pattern):
             return True
     return False
@@ -193,7 +237,7 @@ def is_resource_match_any(resource_address, pattern_list):
 
 def get_matching_dd_config(resource_address, dd_config):
     for pattern, config in dd_config.items():
-        pattern = re.sub(r"\[(.+?)\]", "[[]\g<1>[]]", pattern)
+        pattern = re.sub(r"\[(.+?)\]", "[[]\\g<1>[]]", pattern)
         if fnmatch.fnmatch(resource_address, pattern):
             return True, config
     return False, None

tgwrap/cli.py

@@ -42,7 +42,7 @@ def check_latest_version(verbose=False):
         # this happens when your local version is ahead of the pypi version,
         # which happens only in development
         pass
-    except KeyError:
+    except :
         echo('Could not determine package version, continue nevertheless.')
         pass
 
@@ -50,7 +50,7 @@ CLICK_CONTEXT_SETTINGS = dict(help_option_names=['-h', '--help'])
 
 TG_COMMANDS=[
     'init', 'validate', 'validate-inputs', 'plan', 'apply',
-    'destroy', 'info', 'output', 'show',
+    'destroy', 'info', 'output', 'show', 'state', 'force-unlock'
     ]
 STAGES=['global', 'sbx', 'dev', 'qas', 'run', 'tst', 'acc', 'prd']
 class DefaultGroup(click.Group):
@@ -107,7 +107,7 @@ def main():
         ignore_unknown_options=True,
     ),
 )
-@click.argument('command', type=click.Choice(TG_COMMANDS + ['state', 'render-json']))
+@click.argument('command', type=click.Choice(TG_COMMANDS + ['render-json']))
 @click.option('--verbose', '-v', is_flag=True, default=False,
     help='Verbose printing',
     show_default=True
@@ -120,7 +120,7 @@ def main():
     help='dry-run mode, no real actions are executed (only in combination with step-by-step mode)',
     show_default=True
     )
-@click.option('--no-lock', '-n', is_flag=True, default=False,
+@click.option('--no-lock', '-n', is_flag=True, default=True,
     help='Do not apply a lock while executing the command (or set the TGWRAP_NO_LOCK environment variable, only applicable with plan)',
     envvar='TGWRAP_NO_LOCK', show_default=True,
     )
@@ -189,7 +189,7 @@ def run(command, verbose, debug, dry_run, no_lock, update, upgrade,
     help='dry-run mode, no real actions are executed (only in combination with step-by-step mode)',
     show_default=True
     )
-@click.option('--no-lock', '-n', is_flag=True, default=False,
+@click.option('--no-lock', '-n', is_flag=True, default=True,
     help='Do not apply a lock while executing the command (or set the TGWRAP_NO_LOCK environment variable, only applicable with plan)',
     envvar='TGWRAP_NO_LOCK', show_default=True,
     )
@@ -210,6 +210,10 @@ def run(command, verbose, debug, dry_run, no_lock, update, upgrade,
     help='Run the command step by step and stop when an error occurs (where applicable)',
     show_default=True
     )
+@click.option('--continue-on-error', '-C', is_flag=True, default=False,
+    help='When running in step by step, continue when an error occurs',
+    show_default=True
+    )
 @click.option('--planfile', '-p', is_flag=True, default=False,
     help='Use the generated planfile when applying the changes',
     show_default=True
@@ -233,18 +237,18 @@ def run(command, verbose, debug, dry_run, no_lock, update, upgrade,
     )
 @click.option('--include-dir', '-I',
     multiple=True, default=[],
-    help='A glob of a directory that needs to be included, this option can be used multiple times. For example: -I "integrations/\*/\*"',
+    help=r'A glob of a directory that needs to be included, this option can be used multiple times. For example: -I "integrations/\*/\*"',
     show_default=True
     )
 @click.option('--exclude-dir', '-E',
     multiple=True, default=[],
-    help='A glob of a directory that needs to be excluded, this option can be used multiple times. For example: -E "integrations/\*/\*"',
+    help=r'A glob of a directory that needs to be excluded, this option can be used multiple times. For example: -E "integrations/\*/\*"',
     show_default=True,
     )
 @click.argument('terragrunt-args', nargs=-1, type=click.UNPROCESSED)
 @click.version_option(version=__version__)
 def run_all(command, verbose, debug, dry_run, no_lock, update, upgrade, exclude_external_dependencies,
-    step_by_step, planfile, auto_approve, clean, working_dir, start_at_step,
+    step_by_step, continue_on_error, planfile, auto_approve, clean, working_dir, start_at_step,
     limit_parallelism, include_dir, exclude_dir, terragrunt_args):
     """ Executes a terragrunt command across multiple projects """
 
@@ -260,6 +264,7 @@ def run_all(command, verbose, debug, dry_run, no_lock, update, upgrade, exclude_
         upgrade=upgrade,
         exclude_external_dependencies=exclude_external_dependencies,
         step_by_step=step_by_step,
+        continue_on_error=continue_on_error,
         planfile=planfile,
         auto_approve=auto_approve,
         clean=clean,
@@ -287,9 +292,10 @@ def run_all(command, verbose, debug, dry_run, no_lock, update, upgrade, exclude_
 @click.option('--json', '-j', is_flag=True, default=False,
     help='Show output in json format',
     )
-@click.option('--planfile-dir', '-P', default=None,
+@click.option('--planfile-dir', '-P', default='.terragrunt-cache/current',
     help='Relative path to directory with plan file (or set TGWRAP_PLANFILE_DIR environment variable), see README for more details',
     envvar='TGWRAP_PLANFILE_DIR', type=click.Path(),
+    show_default=True,
     )
 @click.argument('terragrunt-args', nargs=-1, type=click.UNPROCESSED)
 @click.version_option(version=__version__)
@@ -329,7 +335,7 @@ def show(verbose, json, working_dir, planfile_dir, terragrunt_args):
 @click.option('--working-dir', '-w', default=None,
     help='Working directory, when omitted the current directory is used',
     )
-@click.option('--no-lock', '-n', is_flag=True, default=False,
+@click.option('--no-lock', '-n', is_flag=True, default=True,
     help='Do not apply a lock while executing the command (or set the TGWRAP_NO_LOCK environment variable, only applicable with plan)',
     envvar='TGWRAP_NO_LOCK', show_default=True,
     )
@@ -360,7 +366,7 @@ def run_import(address, id, verbose, dry_run, working_dir, no_lock, terragrunt_a
     help='Verbose printing',
     show_default=True
     )
-@click.option('--exclude-external-dependencies/--include-external-dependencies', '-x/-i',
+@click.option('--exclude-external-dependencies', '-x',
     is_flag=True, default=True,
     help='Whether or not external dependencies must be ignored',
     show_default=True
@@ -382,25 +388,37 @@ def run_import(address, id, verbose, dry_run, working_dir, no_lock, terragrunt_a
 @click.option('--parallel-execution', '-p', is_flag=True, default=False,
     help='Whether or not to use parallel execution',
     )
+@click.option('--ignore-attributes', '-i',
+    multiple=True, default=[],
+    help=r'A glob of attributes for which updates can be ignored, this option can be used multiple times (or set TGWRAP_ANALYZE_IGNORE environment variable)',
+    envvar='TGWRAP_ANALYZE_IGNORE',
+    show_default=True
+    )
 @click.option('--include-dir', '-I',
     multiple=True, default=[],
-    help='A glob of a directory that needs to be included, this option can be used multiple times. For example: -I "integrations/\*/\*"',
+    help=r'A glob of a directory that needs to be included, this option can be used multiple times. For example: -I "integrations/\*/\*"',
     show_default=True
     )
 @click.option('--exclude-dir', '-E',
     multiple=True, default=[],
-    help='A glob of a directory that needs to be excluded, this option can be used multiple times. For example: -E "integrations/\*/\*"',
+    help=r'A glob of a directory that needs to be excluded, this option can be used multiple times. For example: -E "integrations/\*/\*"',
     show_default=True,
     )
-@click.option('--planfile-dir', '-P', default=None,
+@click.option('--planfile-dir', '-P', default='.terragrunt-cache/current',
     help='Relative path to directory with plan file (or set TGWRAP_PLANFILE_DIR environment variable), see README for more details',
     envvar='TGWRAP_PLANFILE_DIR', type=click.Path(),
+    show_default=True,
+    )
+@click.option('--data-collection-endpoint', '-D', default=None,
+    help='Optional URI of an (Azure) data collection endpoint, to which the analyse results will be sent',
+    envvar='TGWRAP_ANALYZE_DATA_COLLECTION_ENDPOINT',
+    show_default=True,
     )
 @click.argument('terragrunt-args', nargs=-1, type=click.UNPROCESSED)
 @click.version_option(version=__version__)
 def run_analyze(verbose, exclude_external_dependencies, working_dir, start_at_step,
-            out, analyze_config, parallel_execution,
-            include_dir, exclude_dir, planfile_dir, terragrunt_args):
+            out, analyze_config, parallel_execution, ignore_attributes, include_dir, exclude_dir,
+            planfile_dir, data_collection_endpoint, terragrunt_args):
     """ Analyzes the plan files """
 
     check_latest_version(verbose)
@@ -413,9 +431,11 @@ def run_analyze(verbose, exclude_external_dependencies, working_dir, start_at_st
         out=out,
         analyze_config=analyze_config,
         parallel_execution=parallel_execution,
+        ignore_attributes=ignore_attributes,
         include_dirs=include_dir,
         exclude_dirs=exclude_dir,
         planfile_dir=planfile_dir,
+        data_collection_endpoint=data_collection_endpoint,
         terragrunt_args=terragrunt_args,
     )
 
@@ -688,10 +708,15 @@ def deploy(
         ignore_unknown_options=True,
     ),
 )
-@click.option('--manifest-file', '-m',
-    help='Manifest file describing the deployment options',
-    required=True, default="manifest.yaml", show_default=True,
-    type=click.Path(),
+@click.option('--platform-repo-url', '-p',
+    help='URL of the platform git repository',
+    required=True,
+    envvar='TGWRAP_PLATFORM_REPO_URL'
+    )
+@click.option('--levels-deep', '-l',
+    help='For how many (directory) levels deep must be searched for deployments',
+    required=True, default=5, show_default=True,
+    type=int,
     )
 @click.option('--verbose', '-v',
     help='Verbose printing',
@@ -705,14 +730,15 @@ def deploy(
     show_default=True
     )
 @click.version_option(version=__version__)
-def check_deployments(manifest_file, verbose, working_dir, out):
+def check_deployments(platform_repo_url, levels_deep, verbose, working_dir, out):
     """ Check the freshness of deployed configuration versions against the platform repository """
 
     check_latest_version(verbose)
 
     tgwrap = TgWrap(verbose=verbose)
     tgwrap.check_deployments(
-        manifest_file=manifest_file,
+        repo_url=platform_repo_url,
+        levels_deep=levels_deep,
         working_dir=working_dir,
         out=out,
     )
@@ -737,14 +763,19 @@ def check_deployments(manifest_file, verbose, working_dir, out):
     help='Whether or not external dependencies must be ignored',
     show_default=True
     )
+@click.option('--analyze', '-a',
+    is_flag=True, default=False,
+    help='Show analysis of the graph',
+    show_default=True
+    )
 @click.option('--include-dir', '-I',
     multiple=True, default=[],
-    help='A glob of a directory that needs to be included, this option can be used multiple times. For example: -I "integrations/\*/\*"',
+    help=r'A glob of a directory that needs to be included, this option can be used multiple times. For example: -I "integrations/\*/\*"',
     show_default=True
     )
 @click.option('--exclude-dir', '-E',
     multiple=True, default=[],
-    help='A glob of a directory that needs to be excluded, this option can be used multiple times. For example: -E "integrations/\*/\*"',
+    help=r'A glob of a directory that needs to be excluded, this option can be used multiple times. For example: -E "integrations/\*/\*"',
     show_default=True,
     )
 @click.option('--working-dir', '-w', default=None,
@@ -752,7 +783,7 @@ def check_deployments(manifest_file, verbose, working_dir, out):
     )
 @click.argument('terragrunt-args', nargs=-1, type=click.UNPROCESSED)
 @click.version_option(version=__version__)
-def show_graph(verbose, backwards, exclude_external_dependencies, working_dir, include_dir, exclude_dir, terragrunt_args):
+def show_graph(verbose, backwards, exclude_external_dependencies, analyze, working_dir, include_dir, exclude_dir, terragrunt_args):
     """ Shows the dependencies of a project """
 
     check_latest_version(verbose)
@@ -761,6 +792,7 @@ def show_graph(verbose, backwards, exclude_external_dependencies, working_dir, i
     tgwrap.show_graph(
         backwards=backwards,
         exclude_external_dependencies=exclude_external_dependencies,
+        analyze=analyze,
         working_dir=working_dir,
         include_dirs=include_dir,
         exclude_dirs=exclude_dir,
@@ -826,6 +858,66 @@ def change_log(changelog_file, verbose, working_dir, include_nbr_of_releases):
         include_nbr_of_releases=include_nbr_of_releases,
     )
 
+@main.command(
+    name="inspect",
+    context_settings=dict(
+        ignore_unknown_options=True,
+    ),
+)
+@click.option('--domain', '-d',
+    help='Domain name used in naming the objects',
+    required=True,
+    )
+@click.option('--substack', '-S',
+    help='Identifier that is needed to select the objects',
+    default=None,
+    )
+@click.option('--stage', '-s',
+    help='Stage (environment) to verify',
+    required=True,
+    )
+@click.option('--azure-subscription-id', '-a',
+    help='Azure subscription id',
+    required=True,
+    )
+@click.option('--config-file', '-c',
+    help='Config file specifying the verifications',
+    required=True,
+    type=click.Path(),
+    )
+@click.option('--out', '-o', is_flag=True, default=False,
+    help='Show output as json',
+    show_default=True
+    )
+@click.option('--data-collection-endpoint', '-D', default=None,
+    help='Optional URI of an (Azure) data collection endpoint, to which the inspection results will be sent',
+    envvar='TGWRAP_INSPECT_DATA_COLLECTION_ENDPOINT',
+    show_default=True,
+    )
+@click.option('--verbose', '-v', is_flag=True, default=False,
+    help='Verbose printing',
+    show_default=True
+    )
+@click.version_option(version=__version__)
+def inspect(domain, substack, stage, azure_subscription_id, config_file, out, 
+            data_collection_endpoint, verbose):
+    """ Inspect the status of an (Azure) environment """
+
+    check_latest_version(verbose)
+
+    tgwrap = TgWrap(verbose=verbose)
+    exit = tgwrap.inspect(
+        domain=domain,
+        substack=substack,
+        stage=stage,
+        azure_subscription_id=azure_subscription_id,
+        out=out,
+        data_collection_endpoint=data_collection_endpoint,
+        config_file=config_file,
+    )
+
+    sys.exit(exit)
+
 # this is needed for the vscode debugger to work
 if __name__ == '__main__':
     main()

tgwrap/deploy.py

@@ -179,12 +179,16 @@ def prepare_deploy_config(step, config, source_dir, source_config_dir, target_di
             source_path = os.path.join(
                 source_dir, source_stage, substack['source'], ''
                 )
+            source_modules = {
+                entry:{} for entry in os.listdir(source_path) if os.path.isdir(os.path.join(source_path, entry))
+            }
             target_path = os.path.join(
                 target_dir, substack['target'], ''
                 )
 
-            include_modules = substack['include_modules'] if len(substack.get('include_modules', {})) > 0 else []
-            printer.verbose(f'Include modules: {include_modules}')
+            printer.verbose(f'Include substack modules: {include_modules}')
+
+            include_modules = substack.get('include_modules', [])
 
             if include_modules:
                 # get all directories in the substack and create an exlude_modules list from that
@@ -192,7 +196,10 @@ def prepare_deploy_config(step, config, source_dir, source_config_dir, target_di
                 exclude_modules = list(set(source_directories) - set(include_modules))
             else:
                 exclude_modules = substack.get('exclude_modules', [])
-            
+
+            printer.verbose(f'Include modules: {include_modules}')
+            printer.verbose(f'Exclude modules: {include_modules}')
+
             if os.path.exists(source_path):
                 deploy_actions[f'substack -> {substack["target"]}'] = {
                     "source": source_path,

tgwrap/inspector-resources-template.yml

@@ -0,0 +1,63 @@
+---
+entra_id_group:
+  # note that there must be single quotes around the {name}, double quotes are not working!
+  url: "https://graph.microsoft.com/v1.0/groups?$filter=displayName eq '{name}'"
+  properties: {}
+subscription:
+  url: https://management.azure.com/subscriptions/{subscription_id}?api-version=2024-03-01
+  properties:
+    state: Enabled
+resource_group:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{name}?api-version=2024-03-01
+  properties:
+    properties.provisioningState: Succeeded
+    location: "{{location_code}}"
+key_vault:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.KeyVault/vaults/{name}?api-version=2019-09-01
+  properties:
+    properties.provisioningState: Succeeded
+    location: "{{location_code}}"
+application_insights:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.Insights/components/{name}?api-version=2014-04-01
+  properties:
+    properties.provisioningState: Succeeded
+    location: "{{location_code}}"
+log_analytics_workspace:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.OperationalInsights/workspaces/{name}?api-version=2021-06-01
+  properties:
+    properties.provisioningState: Succeeded
+    location: "{{location_code}}"
+storage_account:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.Storage/storageAccounts/{name}?api-version=2021-08-01
+  properties:
+    properties.provisioningState: Succeeded
+    kind: StorageV2
+    location: "{{location_code}}"
+databricks_access_connector:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.Databricks/accessConnectors/{name}?api-version=2024-05-01
+  properties:
+    properties.provisioningState: Succeeded
+    location: "{{location_full}}"
+databricks_workspace:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.Databricks/workspaces/{name}?api-version=2024-05-01
+  properties:
+    properties.provisioningState: Succeeded
+    location: "{{location_code}}"
+machine_learning_workspace:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.MachineLearningServices/workspaces/{name}?api-version=2023-04-01
+  properties:
+    properties.provisioningState: Succeeded
+    location: "{{location_code}}"
+data_factory:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.DataFactory/factories/{name}?api-version=2018-06-01
+  properties:
+    properties.provisioningState: Succeeded
+    properties.repoConfiguration.repositoryName: datafactory
+    properties.repoConfiguration.type: FactoryVSTSConfiguration
+    location: "{{location_code}}"
+function_app:
+  url: https://management.azure.com/subscriptions/{subscription_id}/resourceGroups/{resource_group}/providers/Microsoft.Web/sites/{name}?api-version=2021-01-15
+  properties:
+    properties.state: Running
+    properties.enabled: true
+    location: "{{location_full}}"