Does contemporary usage of "neithernor" for more than two options originate in the US? In a Terraform Cloud workspace. Is there a general issue open with Terraform to improve conditional support? You say in your question that your variables are in a file variables.tf which means the terraform plan command will not automatically load that file. You must log in or register to reply here. }, ###################### source = "./iam/customer/${local.orgname}" I am asking this question WHY? Thanks for contributing an answer to Stack Overflow! How to extract sensitive output variables in terraform? Not the answer you're looking for? It looks like: It seems it's not really possible to set nested key/value in the command line argument: backend "s3" { If the variable you are trying to pass in is a map, then it needs to be parse-able as a map. This is where the concept of Terraform Workspaces comes in!! To: hashicorp/terraform +1 on this. intended to export it. It would be an infrastructure-as-code dream to get this working. peer-account = "xxxxxxxxxxxxxx" the module's own source code. but more ephemeral environments I want to be able to pull the environment down without editing the code temporarily. Terraform's usual syntax for I hope that you didn't want to store tf-state in one AWS account, but prepare environments in others. Perhaps in some cases this could be worked around by breaking a configuration into two separate runs, with an initial run creating a remote state that can be consumed by the second run. If you use a sensitive value as part of an cidr-octs = "10.7" access_key = "${var.aws_access_key}" misleading tfvars error message: "Variables not allowed", resource 'monitoring_alert_policy' field 'documentation'. #30937. you spot this mistake. Do you expect some modules to have the same interface, so you can swap these? Using separate config file during each TF run is not useful at all. I've knocked up a bash script which will update TF_VAR_git_branch every time a new command is run from an interactive bash session. I can do this in "provider" blocks as the provider block allows interpolations so I can assume the relevant role for the environment I'm deploying to, however if I also rely on the role being set for the backend state management (e.g. The best workaround I have found is by using putting something like this in override.tf. Please can someone help. You can't specify a different backend bucket in terraform environments. on line 1: Error: Variables not allowed on main.tf line 7, in resource "null_resource" "res": 7: prevent_destroy = locals.test Variables may not be used here. Or some sort of cli option --source_overrides=something.yaml The value is saved in the state, and warns if anything is different to the last run. from the perspective of the user of the module rather than its maintainer. Here is the error Output of terraform validate: I needs dis! Switching which infrastructure you're operating against could be as easy as checking out a different git branch. Successfully merging a pull request may close this issue. How do philosophers understand intelligence (beyond artificial intelligence)? the value for a variable. Microservices are better versioned and managed discretely per component, rather than dumped into common prod/staging/dev categories which might be less applicable on a per-microservice basis, each one might have a different workflow with different numbers of staging phases leading to production release. There is a similar issue in not being able to use interpolation syntax when providing configuration for back ends (say S3 bucket/region). Initializing the backend ###################### rev2023.4.17.43393. I don't want to accidentally have credentials setup for account A and be passing in the backend details for account B. the versions.tf file defines the terraform block. Adding required parameters from the command line, in the absence of being able to actually using variables within backend, is simply suboptimal. I am using Terraform v0.9.4. Already on GitHub? I'd rather like to pull all my source definitions to the top of a configuration, in a locals definition, so I don't have to go hunting through every file to find/update the string. You are receiving this because you commented. Are there any chances that we'll have this ability in future versions? This is because environment variables may as sensitive themselves, and so in the above example the two arguments of @akvadrako I'm not following your workaround. I'd expect this to be a bit more verbose. And will it, if I do this workaround, keep working? Using variables in terraform backend config block. Guys the best method to get around it is to wrap your terraform in a script. Terraform reads all of your *.tf files (under your working directory) as one giant script during run time, so you only need to declare your variables once. when running terraform env select) it doesn't work. ", "The image_id value must be a valid AMI id, starting with \"ami-\".". +1 We use terraform modules, the main dev set the default value at "true", that's not my use case :(. the main.tf file defines two NGINX containers: one using the docker_container resource, and the other through a local module called ngnix. I managed to get it working by using AWS profiles instead of the access keys directly. Asking for help, clarification, or responding to other answers. on main.tf line 19, in terraform: block: The label after the variable keyword is a name for the variable, which must would merge map values instead of overriding them. This is not a bad idea but it is very hard to do with the current architecture of how modules work with Terraform. You signed in with another tab or window. I also would like to be able to use interpolation in my backend config, using v 0.9.4, confirming this frustrating point still exists. +1 for this. No, can be done from the inside as well. I believe the blocker is that to support this feature one would need to implement pre-processing of the configuration. Sure, this "works", but it is completely against the very purpose of Terraform, which is to declaratively store a complete picture of resources as code. If your .tfvars file is in another directory you must provide it as a -var-file parameter. watch out for the types. But how is Jhonny's answer any different? Ideally I'd want my structure to look like "project/${var.git_branch}/terraform.tfstate", yielding: Now, everything you find for a given project is under its directory so long as the env is hard-coded at the beginning of the remote tfstate path, you lose this flexibility. Date: Wednesday, December 5, 2018 at 6:30 AM Terraform 0.12 has an explicit validation check for it to give you better feedback that it's not supported. i.e. Just as suboptimal as augmenting Terraform with shell scripts or any other solution besides the Terraform developers fixing an issue that's now been open for over 5 years. It is also important that the resource plans remain clear of personal details for security reasons. I got it by providing a list variable with following input: [name1,name2,name3] source = "./vpc/customer/${local.orgname}" Is that intended behavior? Seeing "The filename or extension is too long" when "terragrunt plan" is executed in Windows, Terraform unable to find azurerm backend storage during init. However, the s3 backend docs show you how you can partition some s3 storage based on the current workspace, so each workspace gets its own independent state file. As environment variables. The terraform backend docs state: A backend block cannot refer to named values (like input variables, locals, or data source attributes). Find centralized, trusted content and collaborate around the technologies you use most. I was hoping to do the same thing as described in #13603 but the lack of interpolation in the terraform block prevents this. Full control over the paths is ideal, and we can only get that through interpolation. the calling module should pass values in the module block. By clicking Accept all cookies, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy. output value then Terraform will require which will cause Terraform to hide it from regular output regardless of how We use workspaces for different AWS environments and wanted to use different buckets for each workspace, but it looks like it is not possible. To subscribe to this RSS feed, copy and paste this URL into your RSS reader. type of value that will be accepted as I can't see what the difference is, other than the names and the fact that one of the attributes are a boolean. I found no way to prevent accidental deletion of an Elastic Beanstalk Application Environment. Use Raster Layer as a Mask over a polygon in QGIS. Setting nullable to false ensures that the variable value will never be commentary for module maintainers, use comments. or .tfvars.json) and then specify that file on the command line with Please help! providers = { This name is used to I am trying to pass aws alias configuration down into a module, where in the module its specified like this: When trying to plan this configuration (with TF-12.x or TF-13.x, doesnt really matter), I get an error: Although the sole Terraform documentation prescribe such usage, see Providers Within Modules - Configuration Language - Terraform by HashiCorp (in the end of the section, right before the next section starts). In this case with above backend definition leads us to this Error: Is there a workaround for this problem at the moment, documentation for backend configuration does not cover working with environments. When you declare them in child modules, Well occasionally send you account related emails. privacy statement. Couldn't something be done similarly (provide the value as some kind of command line param)? If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further. (source code not available) I write tests for my modules. If you have defined a variable value, but not its corresponding variable {} really appreciate your help - Eva. } I hope that you didn't want to store tf-state in one AWS account, but prepare environments in others as somebody asked here. I edited my answer to show how to read the backend configuration from a file. definition, you may get an error or warning depending on how you have provided If you provide values for undeclared variables defined as environment variables From your comment replies it doesn't seem like you guys are keeping an open mind to other people's use cases. Seen multiple threads like this. I wish terraform did this natively. Changing module versions manually is error prone. Other kinds of variables in Terraform include How can I make the following table quickly? When variable values are provided in a variable definitions file, you can use env = "production" For example, you can easily tell TF to create an SSH key that seems fine with tf plan but errors out with tf apply. Terraform version: v0.12.8 provider.aws: version = "~> 2.35" Not impossible, but not something that is likely to happen without a major product design effort. Sign in Also to set the branch/tag via a variable would be helpful @radeksimko I'm familiar with ref as added in a recent version, but I'm suggesting something like source = "github.com/clstokes/terraform-modules//modules/common-vpc?ref=${var.module_branch}". same error. How Do I Avoid Repeating A Variable In Terraform? instead attempt to parse its value using the same syntax used within variable Error: No value for required variable on variables.tf line 1: 1: variable " foo " { The root module input variable " foo " is not set, and has no default value. Storing in a separate AWS account is a safe method. @mitchellh - It would be great if hashicorp could re-look at this. foo1: foo2.tf. org-name = "${local.orgname}" Browse other questions tagged, Where developers & technologists share private knowledge with coworkers, Reach developers & technologists worldwide, Thanks much! The chosen direction to implement support for just the version is very limiting. The text was updated successfully, but these errors were encountered: I am trying to do something like this; getting the same "configuration cannot contain interpolations" error. WHY? Can mirrored (shadowed) rdp sessions go fullscreen? if you need help, let me know. value must be convertible to the specified type. If you have a factory that makes street gates, does it not have to move one of them outside to install in the factory entrance? Thanks for your interest in this issue! if they are present: Files whose names end with .json are parsed instead as JSON objects, with imagine if your C code could arbitrarily download new C files during compile/execution. For example, the following configuration: Will cause Terraform to warn you that there is no variable declared "mosse", which can help if no value is set when calling the module or running Terraform. This would cause issues because now the changes I intended for account B was actually made to account A. Terraform outputs 'Error: Variables not allowed' when doing a plan, https://github.com/hashicorp/terraform/issues/24391, The philosopher who believes in Web Assembly, Improving the copy in the close modal and post notices - 2023 edition, New blog post from our CEO Prashanth: Community is the future of AI. [Solved] Ruby on Rails 7 with esbuild generate multiples files .js, [Solved] How can I get the previous location of moved files using applescript and folder actions. see I, on the other hand, need to authenticate myself to GCS. @NickMetz it's trying to do multiple environments with multiple backend buckets, not a single backend. Our community conference is taking place in San Francisco and online October 10-12. It would be nice if I could have a variable file that specifies stack_name, environment, region. @mitchellh agreement with @jjshoe the original issue of allowing interpolation for the source parameter has not been addressed. You are using an out of date browser. of the above use cases could be resolved by adding${path.root} to the list of allowed local module source prefixes. the variable is considered to be optional and the default value will be used region = "us-east-1" lol what? Echoing the use case for generated credentials being able to be generated and used in another provider but not being able to use the same credentials for lets say a S3 backend which makes it pointless to generate the credentials inside of a terraform run and must now move these to outside of terraform completely. Then using a variable file for each environment the resulting backend would populate the bucket, key, region, dynamo_table correctly: You can. I was able to work around this by creating per-environment override files which are copied into place as part of the deployment pipeline. and lower case letters as in the above example. Asking for help, clarification, or responding to other answers. Connect and share knowledge within a single location that is structured and easy to search. Again, please do not quote me on that technical explanation; this is how I understand the underlying issue but I may be a little off-base. Is it considered impolite to mention seeing a new city as an incentive for conference attendance? I expect it would make modules much more maintainable overall. When variables are declared in the root module of your configuration, they where matches the label given in the declaration block: Note: Input variables are created by a variable block, but you Same issue experienced here as well, posting my specific error to help future googlers (my output is slightly different due to me wrapping my config with Terragrunt): The following produced the similar error as @steinybot. Hi all, judging by the comments above, -backend-config is probably the preferred way for now. For example, a provider might return the following error even if "foo" is a sensitive value: "Invalid value 'foo' for field". Modules. terraform plan Error: Variables not allowed on terraform.tfvars line 1: 1: foo = bar Variables may not be used here. bucket = "ops" I don't really want to use terragrunt, but its the only way I can use variables to populate my backend information. Moreover, a single TF project may deploy to many different accounts simultaneously. I know it's been 4 years in the asking - but also a long time now in the replying. You can only declare stuff. why not use some simple shell script with variable substitution instead? 'content' not support variable. If you provide values for undeclared variables defined in a file ####################### Should the alternative hypothesis always be the research hypothesis? String interpolations when specifying required_version, Values of provider "aws" superseded by ~/.aws/credentials when doing terraform init, s3 remote state still broken for multiple users, Can't count lists in local vars if they contain non-created resources, S3 bucket names collide when a stack instance is already deployed, https://registry.terraform.io/providers/hashicorp/vault/latest/docs/data-sources/aws_access_credentials#example-usage, https://www.terraform.io/language/settings/backends/configuration, https://developer.hashicorp.com/terraform/language/settings/backends/configuration#credentials-and-sensitive-data, https://developer.hashicorp.com/terraform/language/settings/backends/gcs#access_token, feature request: inverse targeting / exclude, terraform.backend: configuration cannot contain interpolations. peer-cidr = "192.10.0.0/16" Two faces sharing same four vertices issues. The text was updated successfully, but these errors were encountered: prevent_destroy cannot support references like that, so if you are not seeing an error then the bug is that the error isn't being shown; the reference will still not be evaluated. Which in the output will generate us a main.tf file with an injected access_token and fire off terraform init as a child process. Making statements based on opinion; back them up with references or personal experience. definitions files, which requires careful attention to the string escaping rules https://github.com/hashicorp/terraform/issues/24391. more information on the meaning and behavior of these different types, as well Though it's fairly reasonable to want to store the state of an environment in the same account that it's deployed to. An example from https://stackoverflow.com/a/61506549/132438: Thanks for contributing an answer to Stack Overflow! Sign in Another example as to why this is beneficial: `####################### Global value ####################### So just use: And switch workspaces as appropriate before deployments. I feel that many (all?) and so anyone who can access the state data will have access to the sensitive I need to be able to re-run tests over and over. I agree with that statement. This section does For example. Thank you, solveforum. Site design / logo 2023 Stack Exchange Inc; user contributions licensed under CC BY-SA. prevent_destroy Variables may not be used here. The same also happens when you forget to put quotes around a string default value like this: I just hit this on Windows Terminal using a list variable as part of the command. This is of course not as convenient as creating everything in one step using directly-referenced modules, but maybe it's a reasonable workaround for some situations in the mean time. @danieldreier given that Hashicorp has acknowledged this issue as a "known limitation" based on your June 12, 2020 comment, is the company able to provide a standard or recommended workaround to address this? Multiple matching workspaces: Terraform will prompt you to select a workspace from the list. the environment of its own process for environment variables named TF_VAR_ I'd like to do something like (sorry, for the wrapper in Node.js, but it will rather be understandable - I didn't want to rewrite it): I'm also not interested in setting GOOGLE_BACKEND_CREDENTIALS (service account JSON etc.) Can you elaborate? I would suggest you to try looking into running your terraform plan via CI/CD tools. @gsirvas @umeat To archive multiple environment with the same backend configuration it is not necessary to use variables/interpolation .It is expected that is not possible to use variables/interpolation in backend configuration see comment from @christofferh. I believe the blocker is that to support this feature one would need to implement pre-processing of the configuration. When multiple operators are used together in an expression, they are evaluated in the following order of operations: !, - (multiplication by -1) *, /, %. Running terraform plan should have read the variables from terraform.tfvars. bucket = var.backend_bucket_name "The id of the machine image (AMI) to use for the server. Does it have to be placed here so that I don't have to check the access and secret keys to github, terraform { "Variables may not be used here" during terraform init, https://terragrunt.gruntwork.io/docs/getting-started/quick-start/#keep-your-backend-configuration-dry, https://stackoverflow.com/a/69664785/132438, https://www.terraform.io/docs/configuration/locals.html, https://stackoverflow.com/a/61506549/132438, The philosopher who believes in Web Assembly, Improving the copy in the close modal and post notices - 2023 edition, New blog post from our CEO Prashanth: Community is the future of AI. Am not sure I understood the solution. This feature was introduced in Terraform v0.14.0. Please, this is really frustrating. This tutorial also appears in: Associate Tutorials (003). Funny thing is when I do it with another variable, that has the same structure, I don't get this error. Error: Variables not allowed on provider.tf line 12, in terraform: 12: dynamodb_table = "data-pf-snowflake-terraform-state-lock-${terraform.workspace}" Variables may not be used here. of the variable and what kind of value is expected. The database username and password are hard-coded. Hi @rosshettel. providers = { Works great. @umeat in that case you are right, it is not possible at the moment to use different backends for each environment. The example below checks whether the AMI ID has the correct syntax. I'm trying to the the same as @NickMetz, I'm running terraform 0.9.3, This is the message when I try to run terraform init. By the time plan is running, Terraform is just thinking about the module name and paying no attention to the module source, since the module is assumed to already be retrieved into the .terraform subdirectory. So working with different accounts is normal. What could a smart phone still do or not do and what would the screen display be if it was sent back in time 30 years to 1993? rev2023.4.17.43393. Individually, with the -var command line option. How to create a storage account for a remote state dynamically? This happens for resource types where Can terraform backend fields be accessed as variables? It's not perfect, but it has the benefit of allowing me to specify different versions of terraform modules on a per-environment basis, as well. +1 I also think that the gained flexibility would outweigh the disadvantages. If the same variable is assigned multiple values, Terraform uses For example, at a bash prompt on a Unix system: On operating systems where environment variable names are case-sensitive, Is it even on your feature/sprint/planning/roadmap or just a backlog item only? }`, this would be called acmecorp.tf, we would just copy this module and renamed it to loonytoons.tf and change the local var to loonytoons thus saving a lot of copy pasta, Adding to a comment by richardgavel from Nov 14, 2018, Backend configuration is stored in .terraform/terraform.tfstate, so store module sources in there and require re-init if those change, i.e something like module.cluster1.app -> source="github.com/example/example". Is simply suboptimal my modules Workspaces: terraform will prompt you to try looking into running your in. Simply suboptimal asking - but also a long time now in the asking - but also long. The gained flexibility would outweigh the disadvantages content and collaborate around the technologies use. Attention to the list i know it 's been 4 years in the US help - Eva. Raster. Time a new command is run from an interactive bash session putting something like this override.tf! Through a local module source prefixes terraform @ noreply.github.com > +1 on this shell script with variable substitution instead terraform variables may not be used here... In one AWS account, but not its corresponding variable { } really appreciate your help -.! In another directory you must provide it as a Mask over a polygon in QGIS would make modules much maintainable. Make the following table quickly `` 192.10.0.0/16 '' two faces sharing same four vertices issues: variables allowed. Allowed terraform variables may not be used here terraform.tfvars line 1: foo = bar variables may not be used region = `` ''. Where can terraform backend fields be accessed as variables in override.tf or responding to other answers one AWS,... Us a main.tf file with an injected access_token and fire off terraform init as a child.. Not available ) i write tests for my modules there is a similar in. Agreement with @ jjshoe the original issue of allowing interpolation for the parameter! Careful attention to the string escaping rules https: //github.com/hashicorp/terraform/issues/24391 `` xxxxxxxxxxxxxx '' module! Main.Tf file with an injected access_token and fire off terraform init as a child process as of... When i do it with another variable, that has the correct.. If you have defined a variable value will never be commentary for module,. I would suggest you to try looking into running your terraform in a separate AWS account but. To have the same interface, so you can swap these vertices issues environment, region it would great... Help - Eva. careful attention to the list for conference attendance definitions files, which careful! One using the docker_container resource, and the default value will never be commentary for module maintainers, comments. I 'd expect this to be able to work around this by creating per-environment override files which are into. When i do n't get this working some modules to have the same interface, so can. More than two options originate in the module 's own source code help. With an injected access_token and fire off terraform init as a -var-file parameter ( beyond artificial intelligence ), occasionally! And online October 10-12 that has the correct syntax when you declare them in child modules well. Collaborate around the technologies you use most variable, that has the same thing as described in # but. 'Ll have this ability in future versions somebody asked here to work around this by creating per-environment override which... Be an infrastructure-as-code dream to get this error be commentary for module maintainers, use comments module rather than maintainer! Variable substitution instead over the paths is ideal, and we can only get that interpolation. Here is the error Output of terraform Workspaces comes in! on this of... Are right, it is very limiting variable, that has the correct.! The access keys directly than two options originate in the above use cases could be resolved by $! And lower case letters as in the terraform block prevents this described in # 13603 the! Valid AMI id has the same structure, i do it with another variable, that the... Be nice if i could have a variable file that specifies stack_name environment! The docker_container resource, and we can only get that through interpolation a general issue open with terraform improve... Source code not available ) i write tests for my modules calling module should pass values in the.!, clarification, or responding to other answers provide the value as some kind value. Terraform Workspaces comes in! to authenticate myself to GCS able to work around this by creating per-environment override which. We can only get that through interpolation Application environment: variables not allowed on terraform.tfvars line:! 'Ve knocked up a bash script which will update TF_VAR_git_branch every time a new is! Useful at all maintainable overall sessions go fullscreen close this issue ( the! Looking into running your terraform plan error: variables not allowed on terraform.tfvars line:! String escaping rules https: //github.com/hashicorp/terraform/issues/24391 bash session TF project may deploy to many accounts. Is structured and easy to search `` the image_id value must be a more. Bit more verbose get it working by using AWS profiles instead of the user of the user of the is. And collaborate around the technologies you use most provide the value as some kind of command,! A file bad idea but it is to wrap your terraform plan via CI/CD tools commentary. There any chances that we 'll have this ability in future versions @ noreply.github.com > +1 on this in versions. It, if i could have a variable in terraform include how can make... Mitchellh - it would be an infrastructure-as-code dream to get around it is not possible the! The best method to get this error neithernor '' for more than two options originate in the use. The version is very limiting code temporarily user of the user of the variable value, but not corresponding! Inc ; user contributions licensed under CC BY-SA location that is structured and easy search... Method to get around it is very limiting architecture of how modules work with terraform create a account... Line with Please help back them up with references or personal experience prevent deletion. Deletion of an Elastic Beanstalk Application environment as in the US out a different backend bucket terraform... Tutorials ( 003 ) been 4 years in the replying to reply here register reply... Eva. has the same thing as described in # 13603 but the lack of interpolation the! 13603 but the lack of interpolation in the asking - but also a long time now in the -! To support this feature one would need to authenticate myself to GCS use backends! An Elastic Beanstalk Application environment access_token and fire off terraform init as a -var-file parameter copy and this... Instead of the access keys directly, so you can swap these module prefixes... For help, clarification, or responding to other answers into running your terraform in a separate account. Line with Please help some kind of value is expected adding required parameters from command... Support this feature one would need to implement pre-processing of the deployment pipeline statements based on opinion ; them... The chosen direction to implement pre-processing of the access keys directly you did n't want to tf-state! Swap these expect it would be great if hashicorp could re-look at this value is expected in. It as a child process not useful at all four vertices issues @ NickMetz it 's trying to do the. Based on opinion ; back them up with references or personal experience with another variable, that has the syntax... Generate US a main.tf file with an injected access_token and fire off terraform init a. Error Output of terraform Workspaces comes in! the calling module should values... Is there a general issue open with terraform to improve conditional support a variable file that specifies,. < terraform @ noreply.github.com > +1 on this paths is ideal, and the other hand, need to pre-processing. Of interpolation in the asking - but also a long time now in the US a single backend RSS... +1 i also think that the gained flexibility would outweigh the disadvantages i want to a... Whether the AMI id, starting with \ '' ami-\ ''. `` i my! Originate in the module 's own source code not available ) i write tests for my modules done the... Use comments to read the backend configuration from terraform variables may not be used here file intelligence ) will update TF_VAR_git_branch time... From an interactive bash session has not been addressed is there a issue... To Stack Overflow in others as somebody asked here to improve conditional support same as... Init as a -var-file parameter table quickly chances that we 'll have this ability in versions... '' for more than two options originate in the absence of being able to for! Adding $ { path.root } to the list request may close this.. Single location that is structured and easy to search be a valid AMI has. San Francisco and online October 10-12 backend bucket in terraform environments future versions modules to the! Security reasons it is to wrap your terraform plan error: variables not allowed on terraform.tfvars line:!: Thanks for contributing an answer to show how to read the backend configuration from a file value be... Intelligence ) Inc ; user contributions licensed under CC BY-SA deletion of an Elastic Beanstalk Application environment under CC.! Absence of being able to actually using variables within backend, is simply suboptimal this in override.tf any chances we. Terraform in a separate AWS account is a similar issue in not being able actually. You can swap these thing is when i do it with another terraform variables may not be used here... Aws account is a similar issue in not being able to pull the environment without. The server through interpolation useful at all be accessed as variables two options originate in the Output will generate a... Bucket/Region ) i know it 's been 4 years in the terraform block prevents.. Is probably the preferred way for now ephemeral environments i want to store tf-state in one account! Docker_Container resource, and we can only get that through interpolation: one using the docker_container,! @ jjshoe the original issue of allowing interpolation for the source parameter has not been addressed originate.