Advocate tags that comply with the standard

[explorigin]

The default tags specified in https://github.com/RSS-Engineering/terraform/blob/main/backend_state_init/backend.tf.sample#L17 should be changed to meet two standards:

• Rackspace Public Cloud Standard (https://one.rackspace.com/pages/viewpage.action?pageId=532306599)
• RSS Engineering Tagging Standard is designed around observability data but wouldn't hurt to add also(https://github.com/RSS-Engineering/platform-central/blob/master/Quick%20Start/observability-tooling.md#tagging-standard)

For RPCS:

• Set confidentiality to "Confidential" - this is a base default and can be modified but we want it to be secure by default

For RSS:

• Set env (doubles with environment but better to have both)
• service - name of the app

[cre8ive-gds]

@explorigin Shall the version be a 7-digit hash of the git commit as per the RSS tagging standard?
In the issue, it says 6-digit hash.

[explorigin]

Actually, I don't recommend it at all. If we have the commit hash as a tag on every asset we either have to ignore that tag in the lifecycle settings or update that resource on every apply. (-: (ask me how I know!)

[explorigin]

Removed version from the original issue description.

[cre8ive-gds]

Actually, I don't recommend it at all. If we have the commit hash as a tag on every asset we either have to ignore that tag in the lifecycle settings or update that resource on every apply. (-: (ask me how I know!)

For our use case, we'll most likely end up running terraform commands only once when setting up the infrastructure (S3 buckets) for the new micro-ui, so it doesn't hurt to keep the version.

Ooc :), does the ignore_changes lifecycle hook work for tags?

locals {
  common_tags = {
    app-name: 'my-app'
    version: 'git-sha'
  }
}

resource "aws_s3_bucket" "application" {
  bucket = "my-app"
  tags   = local.common_tags
  lifecycle {
    ignore_changes = [
      tags.version
    ]
  }
}

[explorigin]

The example I saw was more like:

  lifecycle {
    ignore_changes = [
      tags["version"]
    ]
  }

But I didn't try it so I'm not certain that it will work.