#atlantis - May 2019

@antonbabenko Do you know how much it cost monthly to run atlantis using https://registry.terraform.io/modules/terraform-aws-modules/atlantis/aws/1.17.0 ?

This is probably a dumb question but which tarball should i be using on macOS to checkout atlantis testdrive

brew install atlantis, and the price is described here - https://github.com/terraform-aws-modules/terraform-aws-atlantis/issues/19#issuecomment-420341630 , but I think I pay a bit more.

Is Make in Atlantis workflows a security risk? My thought is a pull request could have a Make file that tells it to run arbitrary code during a plan and extract secrets, etc.

We patched Atlantis to support GitHub teams. Maintainer doesn’t want to support that. Teams let us control who can run plan and apply.

Full context is here

Without GitHub teams atlantis security is a pie in the sky since any command can be run by anyone with repo access even part of the plan. Proof of concept in the issue.

That makes a lot of sense. I'm going to test out your version of Atlantis. Are there other changes planned for your version Atlantis vs the official?

We actually just ripped out everything else we did to be more compatible with the main line

We ripped out custom Atlantis.yaml location, support for git modules, and destroy command

We are hoping Atlantis will eventually come around.

Someone posted an interesting alternative for atlantis a while ago. Anyone remember what that was?

@geertn Maybe https://codeherent.tech/ ?

Looks cool, but that wasn't it.

@geertn maybe github actions?

although it doesn't have an apply action - so maybe not this 🙂

Thanks, I found it. I was looking for: https://docs.geopoiesis.io/manual/

Doesn't seem to be open source AFAICS though

@Sajid haven't tried it, but it would work well with a custom workflw

to anyone using bitbucket cloud with atlantis https://github.com/runatlantis/atlantis/issues/652

Atlassian introduced https://developer.atlassian.com/cloud/bitbucket/bitbucket-api-changes-gdpr/

I spent the morning trying to fix this