#atlantis (2021-09)

atlantis

Discuss the Atlantis (<http://runatlantis.iorunatlantis.io>)

**Archive: ** https://archive.sweetops.com/atlantis/

2021-09-14

tomv avatar

wave any chance there is an atlantis chart maintainer in here? i have a small pull request that would save me from not having to maintain my own fork up the upstream chart

Allow overriding fsGroup/runAsUser in statefulset if necessary by thomasv314 · Pull Request #78 · runatlantis/helm-chartsattachment image

The requirements of my base container force me to use a different uid, this patch helps me use the upstream chart while still using a custom Atlantis container.

jose.amengual avatar
jose.amengual

done

Allow overriding fsGroup/runAsUser in statefulset if necessary by thomasv314 · Pull Request #78 · runatlantis/helm-chartsattachment image

The requirements of my base container force me to use a different uid, this patch helps me use the upstream chart while still using a custom Atlantis container.

tomv avatar

very much appreciated @jose.amengual

tomv avatar

thanks!!

jose.amengual avatar
jose.amengual

np

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)
04:46:57 PM
Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

(in my screenshot, i should have only indented two, but you get the drift. the problem is that as written, the yaml map starts on the wrong line)

jose.amengual avatar
jose.amengual

ohhhhh yes that will screw the yaml….good catch @Erik Osterman (Cloud Posse)

jose.amengual avatar
jose.amengual

@tomv can you address that?

tomv avatar

yep!

tomv avatar

nindent is a helper that adds a new line prior to the indentation

tomv avatar
tomv
04:58:03 PM

rendered template from main:

jose.amengual avatar
jose.amengual

ahh so it will do newline first I see ok

jose.amengual avatar
jose.amengual

ok, so then we should be good

tomv avatar

yep yep, have been using that branch for a little bit now

jose.amengual avatar
jose.amengual

were you able to use the new release?

jose.amengual avatar
jose.amengual

I was having issues with the helm release pipeline

tomv avatar

i was not, i just assumed a manual tag had to be created and i didn’t want to bother you again

tomv avatar

ah, okay, i need to update chart.yaml

tomv avatar
Bump chart version 3.14.1 by thomasv314 · Pull Request #88 · runatlantis/helm-charts

Atlantis Helm Chart. Contribute to runatlantis/helm-charts development by creating an account on GitHub.

tomv avatar

^ Also updated the README.md to specify use case for statefulSet.securityContext

jose.amengual avatar
jose.amengual

ahhh that is why it failed, the version update

jose.amengual avatar
jose.amengual

ok

jose.amengual avatar
jose.amengual

I will merge that

jose.amengual avatar
jose.amengual

now is failing about something else

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

nindent! Thanks

jose.amengual avatar
jose.amengual

release is ready

tomv avatar

hmmm, unfortunately it looks like it didn’t actually release https://github.com/runatlantis/helm-charts/runs/3613111288

tomv avatar
Action is incompatible with `actions/checkout@v2` · Issue #13 · helm/chart-releaser-actionattachment image

When running this action, it&#39;s checking for charts that have changed since the same commit. For instance the release workflow was triggered by commit da27374 and is checking for changes since t…

jose.amengual avatar
jose.amengual

it did release

jose.amengual avatar
jose.amengual
08:20:33 PM
tomv avatar

it released the artifact but didn’t update the repository manifest: https://runatlantis.github.io/helm-charts/index.yaml

jose.amengual avatar
jose.amengual

we released 3.14.2 which have your changes

tomv avatar

much thanks @jose.amengual

1
tomv avatar

What was the issue exactly? Just a transient error?

jose.amengual avatar
jose.amengual

the github action released 3.14.1 but did not updated the index.yaml because on an earlier failure

tomv avatar

ah, cool.

2021-09-15

2021-09-16

Jurgen avatar

with custom workflows; can I get the status of the plan or apply (success or fail) and still run something after?

jose.amengual avatar
jose.amengual

there is always a lock

jose.amengual avatar
jose.amengual

so as long as is not locked you can run something

jose.amengual avatar
jose.amengual

lock is per repo

Jurgen avatar

yeah, I am not talking aboutg that

jose.amengual avatar
jose.amengual

no per folder in a repo

Jurgen avatar

so maybe I reword the question.

So; my plan or apply has run… I want to know its status code. exit 0; exit 1; or plan success or plan fail.

catch it and run differnt commands

jose.amengual avatar
jose.amengual

mmmm no any error is catch before the next command is run

Jurgen avatar

in bash I would be like
terraform plan
status=$?
if [ $status = 0 ]; then
stuff
else
other stuff
fi

jose.amengual avatar
jose.amengual

you can runa custom command with a bash script to do that

jose.amengual avatar
jose.amengual

I think they are

Jurgen avatar

cool, thank you

2021-09-17

jose.amengual avatar
jose.amengual
Enforcing best practice on self-serve infrastructure with Terraform, Atlantis and Policy As Codeattachment image

Here at loveholidays we are heavily dependant on Terraform. All of our Google Cloud infrastructure is managed using Terraform, along with a…

3

2021-09-24

SlackBot avatar
SlackBot
09:12:16 PM

This message was deleted.

2021-09-27

Carlos Tovar avatar
Carlos Tovar

Hi everyone - we are going through the process of upgrading to terraform fro 0.13 to 1.0 and ran into the consideration of what to do with the new terraform dependency lock files. I understand they should be committed, but for new terraform stacks, they are created by Atlantis, which is not going to commit it. How are people handling this consideration?

joshmyers avatar
joshmyers

Generate manually and commit. Atlantis will use.

Carlos Tovar avatar
Carlos Tovar

Thanks @joshmyers!

Steve Wade (swade1987) avatar
Steve Wade (swade1987)

I know @loren recommends git ignoring them

joshmyers avatar
joshmyers

Why?

Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

If you do decide to use them, make sure to lock for all architectures you’re using. E.g.

terraform providers lock \
  -platform=linux_arm64 \
  -platform=linux_amd64 \
  -platform=darwin_amd64 \
  -platform=windows_amd64
1
Erik Osterman (Cloud Posse) avatar
Erik Osterman (Cloud Posse)

so developers and atlantis are in sync

2021-09-28

2021-09-29

    keyboard_arrow_up