getsentry / tacos-gha

Terraform Automation & Collaboration Software (TACOS) help organizations to scale the use of Terraform by enabling collaboration through governance, access controls, and automation of Terraform runs.
Apache License 2.0
1 stars 0 forks source link

Race condition between TACOs apply and PR merge. Cannot recover. #228

Open fpacifici opened 5 months ago

fpacifici commented 5 months ago

Environment

https://github.com/getsentry/tacos-gha/tree/stable on the ops repo This is the PR where the issue happened: https://github.com/getsentry/ops/pull/11131

Steps to Reproduce

On any slice:

Expected Result

One of the following:

Actual Result

mwarkentin commented 5 months ago

Is there a way for us to configure GHA to not cancel on merge? Feels like an optimization for unit test runtime or something..

mwarkentin commented 5 months ago

Re: apply on merge, I think we need to consider it very carefully as it can introduce some catastrophic failures.

An example:

A GCP disk is scaled up out of band. There is no way to shrink the disk, so the way it would apply will be to destroy the disk and recreate it. Hope your backups are working and tested. 😅