Hi there, I recently got Atlantis up and running i...
# atlantis-communityn
Nelson W
04/09/2024, 9:03 PMHi there, I recently got Atlantis up and running in ECS using terraform-aws-atlantis via a github token. I am switching to a github app, but it's not working. Here is my secrets block
Copy code
secrets = [
{
name = "ATLANTIS_GH_APP_ID"
valueFrom = module.secrets_manager["gh-app-id"].secret_arn
},
{
name = "ATLANTIS_GH_APP_KEY"
valueFrom = module.secrets_manager["gh-app-private-key"].secret_arn
},
{
name = "ATLANTIS_GH_WEBHOOK_SECRET"
valueFrom = module.secrets_manager["gh-webhook-secret"].secret_arn
}, Copy code
--gh-user/--gh-token or --gh-app-id/--gh-app-key-file or --gh-app-id/--gh-app-key or --gitlab-user/--gitlab-token or --bitbucket-user/--bitbucket-token or --azuredevops-user/--azuredevops-token must be set[39m👍 1
p
PePe Amengual
04/09/2024, 9:11 PMis the entrypoint receiving those secrets?
PePe Amengual
04/09/2024, 9:11 PMthat is all you get from the logs?
n
Nelson W
04/09/2024, 9:12 PMThe only other entry in the logs is
Copy code
No files found in /docker-entrypoint.d/, skippingp
PePe Amengual
04/09/2024, 9:12 PMno no, I mean are the secrets actually being populated correctly
PePe Amengual
04/09/2024, 9:12 PMand passed down to the container at tun time
n
Nelson W
04/09/2024, 9:13 PMThe task definition appears to have them
Nelson W
04/09/2024, 9:13 PMI'm a little unclear how they get utilized though
Nelson W
04/09/2024, 9:15 PMI'm using the same configuration as when the github token method was working. Only difference is I no longer set ATLANTIS_GH_USER in environment and no longer set ATLANTIS_GH_TOKEN in secrets
Nelson W
04/09/2024, 9:20 PMoh I see, those are turned into environment variables and atlantis gets them from the environment. 🤔
Nelson W
04/09/2024, 9:26 PMhm, tried setting debug output. Now getting a slightly different error
Copy code
[31mError: initializing server: error initializing github authentication transport: wrong number of installations, expected 1, found 0[39mp
PePe Amengual
04/09/2024, 9:28 PMI think you need the app name too
PePe Amengual
04/09/2024, 9:31 PMthis is what I have in mine
Copy code
map_secrets:
ATLANTIS_GH_APP_KEY: atlantis/ATLANTIS_GH_APP_KEY
ATLANTIS_GH_WEBHOOK_SECRET: atlantis/ATLANTIS_GH_WEBHOOK_SECRET
map_environment:
ATLANTIS_GH_APP_ID: "111111"
ATLANTIS_GH_APP_SLUG: "runatlantis-atlantis"
ATLANTIS_REPO_ALLOWLIST: "<http://github.com/runatlantis/atlantis|github.com/runatlantis/atlantis>"
ATLANTIS_WRITE_GIT_CREDS: true
ATLANTIS_ENABLE_DIFF_MARKDOWN_FORMAT: true
ATLANTIS_SILENCE_VCS_STATUS_NO_PLANS: true
ATLANTIS_HIDE_PREV_PLAN_COMMENTS: true
ATLANTIS_LOG_LEVEL: info
ATLANTIS_ATLANTIS_URL: <https://atlantis.runatlantis.io>
ATLANTIS_REPO_CONFIG_JSON: '{"repos":[{"id":"/.*/", "allowed_overrides":["apply_requirements","workflow","delete_source_branch_on_merge"], "allow_custom_workflows":true ,"apply_requirements": ["mergeable"]}]}'PePe Amengual
04/09/2024, 9:31 PMthose all map to ENV vars
PePe Amengual
04/09/2024, 9:32 PMyou do not need this :
Copy code
ATLANTIS_GH_WEBHOOK_SECRET: atlantis/ATLANTIS_GH_WEBHOOK_SECRETn
Nelson W
04/09/2024, 9:33 PMCan
ATLANTIS_GH_APP_SLUGp
PePe Amengual
04/09/2024, 9:33 PMit maps to the name you put in the app
✅ 1
PePe Amengual
04/09/2024, 9:33 PMwhen you create it in github
n
Nelson W
04/09/2024, 10:08 PMlooks like adding
ATLANTIS_GH_APP_SLUGATLANTIS_WRITE_GIT_CREDS👍🏽 1
25 Views