runatlantis / atlantis

Terraform Pull Request Automation
https://www.runatlantis.io
Other
7.83k stars 1.06k forks source link

"atlantis yolo" #2655

Open ActuallyTrent opened 2 years ago

ActuallyTrent commented 2 years ago

Community Note


Describe the user story

As an engineer, I would like to have fresh authentication tokens when running apply, but I have to re-run atlantis plan to obtain them.

As a security-minded engineer, I do not want to extend token lifetimes, because that increases risk.

As an engineer, I would prefer to not re-run a plan that takes a long time and wait for the plan output to run an atlantis apply as I would like to context switch and work on something else, but if I context switch I may be late to an atlantis apply.

As an engineer, I would prefer to not re-run a plan for manual review if I do not need to, as I know nothing has changed in the underlying Terraform state and I received an appropriate review from my team.

As an engineer, I would like a self-describing and clear mechanism for knowingly circumventing safety features.

Describe the solution you'd like

A command/flag (atlantis yolo, atlantis plan -apply, atlantis apply -yolo, etc) that allows atlantis to plan and immediately apply the plan, without requiring manual interactions between the plan and apply stages. Ideally, this command would fail if code changes occur upstream (main branch, for example) in the current project. The command should also respect PR locks and other safety features. Additionally, it would be nice if this diff'd the new plan against the last plan and only applied if there are no changes.

Describe the drawbacks of your solution

Errors may occur if the underlying Terraform state changes.

Users need to be more aware of activity in their repositories and environments.

ahammond commented 3 days ago

I think yeet might be a better name for it. :)