#atlantis (2022-10)

waiting for this : https://github.com/distributhor/workflow-webhook/pull/34

merged

So what’s left for the end to end implementation?

tidy up the workflows

workflow permission is an issue

in terms of running the workflows from atlantis?

no running but workflow permissions, who can apply a stack change in the prod stack?

so I guess that can be a mix of codeowners and other atlantis config ( which I’m trying to figure out)

you can do atlantis plan -- -target module.alb.xxxx

ah, cool!

doesn’t seem to work, just did it all again

but could be my custom workflows

if you have custom workflows you will have to pass the extra args

yeah

https://github.com/runatlantis/atlantis/issues/1167#issuecomment-973265900

you need to do the sed thing

Thank you, you just answered like 5 questions. haha

it doesn’t matter what I do, I keep getting

Error: Failed to parse command-line flags
> 
> flag provided but not defined: -target

or

╷
> │ Error: Failed to parse command-line flags
> │ 
> │ flag provided but not defined: -target
> ╵
> ╷
> │ Error: Too many command line arguments
> │ 
> │ Expected at most one positional argument.
> ╵

show me your custom workflow

$TF_CLI_ARGS will be have to at the end

“/atlantis-data/bin/terraform${ATLANTIS_TERRAFORM_VERSION}” plan “${varfiles[@]}”
/dev/null -input=false -refresh -no-color -compact-warnings -out “${PLANFILE}” “${comment_cli_args[@]}”

echo this

or that whole line

to see id is adding an extra -

/atlantis-data/bin/terraform1.3.3 plan -var-file=../env_vars/dev-xxxx-sydney-aws/adb2cs.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/apps-project-ping.txt -var-file=../env_vars/dev-xxxx-sydney-aws/apps.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/aws_auth.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/batch_data_pipeline.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/caching.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/clusters.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/config.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/data-pipeline-project-ping.txt -var-file=../env_vars/dev-xxxx-sydney-aws/databases.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/dns.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/domains.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/dynamodb.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/elasticsearch.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/environment-setup-project-ping.txt -var-file=../env_vars/dev-xxxx-sydney-aws/filesystems.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/front-door-project-ping.txt -var-file=../env_vars/dev-xxxx-sydney-aws/github_permissions.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/glue_jobs.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/istio.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/kafka.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/migration.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/monitoring.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/object_storage.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/operational-project-ping.txt -var-file=../env_vars/dev-xxxx-sydney-aws/operational.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/pagerduty.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/pagerduty_on_call_list.json -var-file=../env_vars/dev-xxxx-sydney-aws/pagerduty_schedule_start_date.json -var-file=../env_vars/dev-xxxx-sydney-aws/ses.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/streaming.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/swithces.tfvars -var-file=../env_vars/dev-xxxx-sydney-aws/whitelist_cidrs.tfvars -input=false -refresh -no-color -compact-warnings -out /atlantis-data/repos/deltatre-vxp/xxxx-terraform/2641/dev-xxxx-sydney-aws/apps/dev-xxxx-sydney-aws-apps-dev-xxxx-sydney-aws.tfplan ‘-target=module.applications[00].aws_kms_ciphertext.custom-ssl’

or I can change the PR comment and get
-target ‘module.applications[00].aws_kms_ciphertext.custom-ssl’

my pr comment is either
atlantis plan -p dev-xxxx-aws-apps – -target module.applications[“00”].aws_kms_ciphertext.custom-ssl

atlantis plan -p dev-xxxx-aws-apps – -target=module.applications[“00”].aws_kms_ciphertext.custom-ssl

to me the ‘’ in the wrong spots are doing it, some weird escape/quoting stuff.

can you do

atlantis plan -p dev-xxxx-aws-apps -- -target="module.applications["00"].aws_kms_ciphertext.custom-ssl"

same deal unfortunately.
‘-target=module.applications[00].aws_kms_ciphertext.custom-ssl’

can you just target module.applications? just to see if is the id “”

its just put
-target=module.applications

at the end, but same rror

I never seen in my life so many var files

mmm

execing into the pod and running it
-target=module.applications[“00”].aws_kms_ciphertext.custom-ssl

works at the end, so its the ‘’ and weird things

actually, wait.. that one, it planned but it did find my resouces

‘-target=module.applications[“00”].aws_kms_ciphertext.custom-ssl’

that worked, in the shell.. no problems

anyway, going to have to play with this tomororw now. I ahve some meetings. Thanks for your help. I have some ideas.

np