archived the channel

@UUB28NLDS help keep tabs! 😉

@Igor Rodionov we've been using #office-hours

Ups... Today new techradar released

Just read march 2019 Techradar
https://assets.thoughtworks.com/assets/technology-radar-vol-20-en.pdf
Check if you missed it

set the channel description: Town Hall Discussions

Archive: https://archive.sweetops.com/townhall/

@Gonzalo Peci has joined the channel

@btai has joined the channel

@Gaurav has joined the channel

@Raghu has joined the channel

@Gabe has joined the channel

@ankur has joined the channel

Addresses (1)

@tamsky this was opened/closed today https://github.com/runatlantis/atlantis/pull/306/files

so i want a strategy that works well for all 3

i go back and forth with atlantis b/c we still need to solve the same problem with kops and helm (not just terraform)

for example, with Zapier, i can act on a comment and trigger a pipeline via webhook

prove the concept out

we may just end up using codefresh for v1

i've debated if we want to commit the resources to fix 1 & 2

otherwise comment back and say not authorized

basically, validate git username is in some list

so i think technically, not too hard to extend

then I deserve a "whoops"

so what we really need is the google/kubernetes repo bot commands like

oh, but all the interaction is via git comments

at the oauth proxy?

Perhaps, but how would you scope the access to the r/w and r/o pipelines?

both of those blockers read to me as accurate and missing requirements.
I could imagine bypassing 2) by having two Atlantis's per stage, one RO other R+W.

I'm really enjoying https://github.com/kislyuk/keymaker - and IAM groups <> UNIX groups

groups would be icing

i would be satisfied with a hardcoded list of usernames in the server

for 2) you'd like to see github groups perform RBAC ?

awesome name @tamsky

2) no way to scope who can run plan or apply other than revoking access to repo

1) https://github.com/runatlantis/atlantis/issues/249 (no response) - to support multiple instances of atlantis in diffferent accounts

There are two hard blockers for using it:

wanted to ask about how things were going with CP and Atlantis

@Steven has joined the channel

@mallen has joined the channel

@Arkadiy has joined the channel

@Alexander Tolstikov has joined the channel

@mrwacky has joined the channel

sorry i missed the meeting

i've used the cloudwatch agent and like it more than their prior tooling around cloudwatch

too late here for me %)