bmihaescu
03/23/2023, 7:41 AMparis
03/23/2023, 8:53 AMplan
operation before it can run apply
.
You can take advantage of that and dismiss all approvals after every new plan; I don’t think Atlantis provides a flag for that but you could do it either with a custom workflow or even with a GHA action (that looks for new plan
comments and removes all approvals)
Then, any changes upstream will be noticed in the new plan and require a new approval before an apply is possible.
PS: That relies on the assumption that Atlantis uses plans when applying and does not replan from scratch. You need to doublecheck that. We use it in a way that does not use plans unfortunately so that wouldn’t work for us
PS2: But then you’d hope whoever is changing upstream would want to at least run a plan prior to apply to see the diff. Then dismissing approvals after every plan would solve your problembmihaescu
03/23/2023, 10:07 AMPePe Amengual
03/23/2023, 3:36 PM