This message was deleted.
# atlantis-communitys
Slackbot
08/03/2023, 10:58 PMThis message was deleted.
d
Dylan Page
08/04/2023, 1:50 AMHello, it really depends on your terraform repository structure. How do you have your environments separated? Some people separate them with workspaces or separate folders/projects, other setup completely separate Atlantis instances
s
Scott Cruzen
08/04/2023, 2:17 AMI have a single TF repo for all environments and a single Atlantis instance that can assume roles in the other accounts (almost everything is AWS)
d
Dylan Page
08/04/2023, 4:21 AMWhat is the folder structure like? I'm assuming you have different folders for the environments. Check out: https://www.runatlantis.io/docs/repo-level-atlantis-yaml.html#requiring-approvals-for-production
Dylan Page
08/04/2023, 4:22 AMyou can setup requirements to be stricter about prod versus dev/stage
s
Scott Cruzen
08/04/2023, 5:34 PMinfra/environments/{dev,prod,etc}/{various,components}
Scott Cruzen
08/04/2023, 5:36 PMwe were using approved PRs are required for apply across every environment, but I've changed that so that approval isn't required in non-prod environments with the idea that the PR author will apply to non-prod envs prior to asking for review / approval to apply to prod, which I think is reasonable, we'll see how it works
d
Dylan Page
08/04/2023, 5:39 PMYup exactly. Meragable is usually more powerful than approved especially with the GH backend and branch protections
c
Chastity Blackwell
08/07/2023, 1:00 PMI think it's worth interrogating why they are worried about Atlantis applying against your infra but not a random person....