Commit Graph

1971 Commits

Author SHA1 Message Date
Maarten Hoogendoorn
e6ed1027ff docs: typo in heading level (#1960)
Co-authored-by: Maarten Hoogendoorn <maarten.hoogendoorn@navara.nl>
2021-12-30 07:56:27 -05:00
Justin Roberson
6dda3dfde1 fix: fallback to default TF version in apply step (#1931)
The plan step has a mechanism to use the default tf version from the Terraform
client if the context does not define one, however the apply step does not have
this. This results in remote executions of apply failing with a nil pointer
dereference when it checks tfVersion in StripRefreshingFromPlanOutput. This fix
involves copying what the PlanStepRunner does and falls back to the default
version if the context's version is nil.
2021-12-22 14:54:14 -05:00
Paul Erickson
bc368465a0 feat: add GitHub team allowlist configuration option (#1694)
* Add GitHub team allowlist configuration option

Co-authored-by: PePe (Jose) Amengual <jamengual@sonatype.com>
Co-authored-by: Troy Neeriemer <tneeriemer@sonatype.com>
Co-authored-by: Ted Roby <troby+github@sonatype.com>
Co-authored-by: Paul Erickson <perickson@sonatype.com>

* Check team allowlist in command runner, rather than event controller

* Remove unneeded trimming

* Test wildcard groups and commands

* Improve error logging

Co-authored-by: PePe (Jose) Amengual <jamengual@sonatype.com>
Co-authored-by: Troy Neeriemer <tneeriemer@sonatype.com>
Co-authored-by: Ted Roby <troby+github@sonatype.com>
2021-12-21 16:08:43 -08:00
Javier Beaumont
f4582101cb Add in Dockerfile support for last Terraform 1.0.x version in AVAILABLE_TERRAFORM_VERSIONS (#1957) 2021-12-21 15:55:56 -08:00
dependabot[bot]
eb357610ac build(deps): bump github.com/spf13/viper from 1.10.0 to 1.10.1 (#1956)
Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.10.0 to 1.10.1.
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](https://github.com/spf13/viper/compare/v1.10.0...v1.10.1)

---
updated-dependencies:
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-20 12:17:51 -05:00
rui
50a510fa26 deps: terraform 1.1.2 (#1952) 2021-12-18 13:09:34 -05:00
rui
bd8aedabde release: 0.17.6 (#1947)
* release: 0.17.6

Signed-off-by: Rui Chen <rui@chenrui.dev>

* update changelog

Signed-off-by: Rui Chen <rui@chenrui.dev>
v0.17.6
2021-12-17 14:44:39 -05:00
rui
45e8513f23 docker: make multi-platform atlantis image (#1943)
* docker: multi-platform image for atlantis

* workflow: update for multi platform image builds

Signed-off-by: Rui Chen <rui@chenrui.dev>

* update branch trigger for testing dev image

Signed-off-by: Rui Chen <rui@chenrui.dev>

* revert to use testing-env:2021.08.31

Signed-off-by: Rui Chen <rui@chenrui.dev>

* Revert "update branch trigger for testing dev image"

This reverts commit 266e04da08.
2021-12-17 14:41:05 -05:00
Rui Chen
fad1c758cb docker(testing): fix arch ref for linux/arm/v7
relates to eb1c78dd0b

- `docker buildx build --progress=plain --no-cache --platform linux/arm/v7 .`
- `docker buildx build --progress=plain --no-cache --platform linux/arm/v8  .`

```
```

Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-17 13:27:35 -05:00
Rui Chen
ec4d77fbfb docker(testing): updating image build process
relates to #1943

Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-17 12:23:23 -05:00
David Heward
9e849f7e66 docs: fix policy check documentation examples (#1945) 2021-12-16 09:43:12 -05:00
Rui Chen
7b76df7478 build: make multi-platform image for testing-env
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-16 00:40:30 -05:00
Rui Chen
4a57b30285 atlantis-base: fix context 2021-12-15 17:27:01 -05:00
Rui Chen
245a9015e4 atalntis-base: update platforms and path trigger
> Supported architectures: (more info) `amd64`, `arm32v6`, `arm32v7`, `arm64v8`, `i386`, `ppc64le`, `riscv64`, `s390x`

https://hub.docker.com/_/alpine

Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-15 17:21:50 -05:00
Rui Chen
726ec5aa10 atlantis-base: update platforms
https://hub.docker.com/layers/alpine/library/alpine/3.15.0/images/sha256-c74f1b1166784193ea6c8f9440263b9be6cae07dfe35e32a5df7a31358ac2060

Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-15 17:14:42 -05:00
Rui Chen
a55a75b469 docker: setup multi-platform build for atlantis-base
Use master branch for testing instead 🤦

closes #1932
closes #1940

Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-15 17:08:23 -05:00
rui
649dde8404 deps: alpine 3.15 (#1941)
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-15 17:07:44 -05:00
rui
a74e740c11 deps: terraform 1.1.1 (#1939)
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-15 17:03:41 -05:00
dependabot[bot]
52c90bc419 build(deps): bump github.com/spf13/viper from 1.9.0 to 1.10.0 (#1934)
Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](https://github.com/spf13/viper/compare/v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-13 10:27:16 -05:00
rui
8aa1ea4d04 deps: terraform 1.1.0 (#1930)
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-12-08 17:07:08 -05:00
David Heward
4370dc67db docs: add clarity and further policy_check examples (#1925)
* Add clarity + further policy_check examples to docs

* Fix broken link to Atlantis on AWS Fargate Terraform module

Co-authored-by: Dave Heward <74298782+davidh-unmind@users.noreply.github.com>
2021-12-08 15:28:27 -05:00
dependabot[bot]
9f3d9e0f27 build(deps): bump github.com/golang-jwt/jwt/v4 from 4.1.0 to 4.2.0 (#1928)
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-06 10:47:58 -05:00
dependabot[bot]
a0dc15ca70 build(deps): bump github.com/xanzy/go-gitlab from 0.51.1 to 0.52.2 (#1921)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.51.1 to 0.52.2.
- [Release notes](https://github.com/xanzy/go-gitlab/releases)
- [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go)
- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.51.1...v0.52.2)

---
updated-dependencies:
- dependency-name: github.com/xanzy/go-gitlab
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-03 22:24:21 -05:00
dependabot[bot]
c875b6b861 build(deps): bump github.com/urfave/negroni from 0.3.0 to 1.0.0 (#1922)
* build(deps): bump github.com/urfave/negroni from 0.3.0 to 1.0.0

Bumps [github.com/urfave/negroni](https://github.com/urfave/negroni) from 0.3.0 to 1.0.0.
- [Release notes](https://github.com/urfave/negroni/releases)
- [Changelog](https://github.com/urfave/negroni/blob/master/CHANGELOG.md)
- [Commits](https://github.com/urfave/negroni/compare/v0.3.0...v1.0.0)

---
updated-dependencies:
- dependency-name: github.com/urfave/negroni
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix broken link

```
$ curl -I https://tf-registry.herokuapp.com/modules/terraform-aws-modules/atlantis/aws/latest
HTTP/1.1 503 Service Unavailable
```

ref, https://app.circleci.com/pipelines/github/runatlantis/atlantis/1694/workflows/35fa6a93-77e2-4b48-8d0c-e4e9425908cc/jobs/8747

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rui Chen <rui@chenrui.dev>
2021-12-03 22:16:39 -05:00
Nish Krishnan
33b4d6325a refactor: Add PullStatusFetcher interface (#1904) 2021-11-18 11:42:36 -08:00
Bruno Ferreira
79af92458a feat: adds allowed_regexp_prefixes parameter to use with the --enable-regexp-cmd flag (#1884)
* adds AllowedRegexpPrefixes config and use it on the FindProjectsByName method

* adds tests for the new AllowedRegexpPrefixes config

* update documentation with the new AllowedRegexpPrefixes config
2021-11-17 17:25:48 -05:00
Alexander Dupuy
dc4cc2f614 docs: document approve_policies command in comment_parser (#1886)
* docs: document approve_policies command in help

The `approve_policies` command was added with policy checking but was
never included in the command parser help.

Also update the comments in the file to reflect all of the commands.

* feat: Better message on policy failure

Include the specific command `approve_policies` in the message.
2021-11-17 17:25:29 -05:00
rui
09b8e7a93a Revert "docs: revert to use docker hub page as 404 on github pkg registry (#1897)" (#1900)
This reverts commit 24001aa830.
2021-11-17 09:39:08 -05:00
Kevin Wendt
f5b6ab09ec fix: allow requests to /healthz without authentication (#1896)
* fix: allow requests to /healthz without authentication

* allow unauthed requests to /status
2021-11-14 20:02:44 -05:00
rui
24001aa830 docs: revert to use docker hub page as 404 on github pkg registry (#1897)
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-11-12 15:18:05 -05:00
Tom Harrison
d310e2f170 docs: clarify maximum version limit (#1894)
* Clarify maximum version limit

When latest Docker image still had terraform 1.0.0, for example, any method of specifying a higher version failed to build.  This note clarifies the dependency.

* update the docker image reference

Co-authored-by: rui <rui@chenrui.dev>
2021-11-12 14:36:24 -05:00
rui
6d86119d75 deps: tf 1.0.11 (#1892) 2021-11-10 18:44:50 -05:00
rui
f4314e2f12 release: 0.17.5 (#1874)
* release: 0.17.5

Signed-off-by: Rui Chen <rui@chenrui.dev>

* update changelog

Signed-off-by: Rui Chen <rui@chenrui.dev>
v0.17.5
2021-11-04 19:48:13 -04:00
Rui Chen
ac9a6c3c4f deps: conftest 0.28.3
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-11-03 22:34:39 -04:00
Nish Krishnan
a8bfd77452 Move runtime common under existing runtime package. (#1875) 2021-11-01 11:32:52 -07:00
rui
2a0b78051e feat: use goreleaser to replace the binary-release script (#1873)
* feat: add goreleaser flow

* del binary-release script
2021-10-31 11:38:49 -04:00
Mihail Kuzmich
8c9184b80a feat: add new bitbucket server webhook event type pr:from_ref_updated (#1866) 2021-10-28 11:50:05 -07:00
rui
720d8eb2d4 deps: conftest 0.28.2 (#1872) 2021-10-28 14:04:53 -04:00
dependabot[bot]
3dd4940a15 build(deps): bump github.com/microcosm-cc/bluemonday (#1868)
Bumps [github.com/microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) from 1.0.15 to 1.0.16.
- [Release notes](https://github.com/microcosm-cc/bluemonday/releases)
- [Commits](https://github.com/microcosm-cc/bluemonday/compare/v1.0.15...v1.0.16)

---
updated-dependencies:
- dependency-name: github.com/microcosm-cc/bluemonday
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-10-28 13:48:21 -04:00
Rui Chen
cb07e2adb0 deps: tf 1.0.10 2021-10-28 13:46:36 -04:00
Daniel Grimes
4248e2ebf4 fix(azure): allow correct path to be derived for on premise installation (#1863)
* add .devcontainer to .gitignore

* allow AzureDevOps host to be specified in the user_config

* fix spacing issues

* gofmt

* fixes to cmd and update to approach

* add specific self host fixtures

* add specific self host parser tests

* update code to azure self hosted devops

* go fmt

Co-authored-by: atlantisbot <lkysow+atlantis@gmail.com>
2021-10-26 10:34:47 -07:00
dependabot[bot]
a148eb80a8 build(deps): bump github.com/mcdafydd/go-azuredevops (#1867)
Bumps [github.com/mcdafydd/go-azuredevops](https://github.com/mcdafydd/go-azuredevops) from 0.12.0 to 0.12.1.
- [Release notes](https://github.com/mcdafydd/go-azuredevops/releases)
- [Commits](https://github.com/mcdafydd/go-azuredevops/compare/v0.12.0...v0.12.1)

---
updated-dependencies:
- dependency-name: github.com/mcdafydd/go-azuredevops
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-10-25 11:41:56 -04:00
FBLGit
cbf35ca0ed feat: add BasicAuth Support to Atlantis ServeHTTP (#1777)
* Add BasicAuth Support to Atlantis ServeHTTP

* Added Security notes

Co-authored-by: xmurias <xmurias@gmail.com>
2021-10-21 14:58:30 -07:00
Nish Krishnan
d01796b9d9 feat: filter out atlantis/apply from mergeability clause (#1856)
Filter out atlantis apply status during mergeability check.
2021-10-19 13:51:22 -07:00
rui
8093b8864a deps: update conftest to 0.28.1 for atlantis img (#1864)
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-10-19 12:35:10 -04:00
dependabot[bot]
8132efed9d build(deps): bump github.com/go-test/deep from 1.0.7 to 1.0.8 (#1862)
Bumps [github.com/go-test/deep](https://github.com/go-test/deep) from 1.0.7 to 1.0.8.
- [Release notes](https://github.com/go-test/deep/releases)
- [Changelog](https://github.com/go-test/deep/blob/master/CHANGES.md)
- [Commits](https://github.com/go-test/deep/compare/v1.0.7...v1.0.8)

---
updated-dependencies:
- dependency-name: github.com/go-test/deep
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-10-18 10:55:55 -04:00
Daniel Grimes
571f91fbda fix(azure): allow host to be specified in user_config for on premise installation (#1860)
* add .devcontainer to .gitignore

* allow AzureDevOps host to be specified in the user_config

* fix spacing issues

* gofmt

* fixes to cmd and update to approach

Co-authored-by: atlantisbot <lkysow+atlantis@gmail.com>
2021-10-17 14:07:14 -04:00
rui
515df4edb1 deps: terraform 1.0.9 (#1854)
Signed-off-by: Rui Chen <rui@chenrui.dev>
2021-10-17 13:46:47 -04:00
dependabot[bot]
94d7315786 build(deps): bump github.com/hashicorp/go-getter from 1.5.8 to 1.5.9 (#1850)
Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) from 1.5.8 to 1.5.9.
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](https://github.com/hashicorp/go-getter/compare/v1.5.8...v1.5.9)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-getter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-10-11 15:12:14 -04:00
Bea Hughes
070f5174e7 chore: use golang-jwt/jwt to replace dgrijalva/jwt-go (#1845)
* Migrate dgrijalva/jwt-go to golang-jwt/jwt/v4

dgrijalva's jwt is no longer maintained. The golang-jwt says it is a
drop in replacement for v4. This also fixes CVE-2020-26160 which
possibly won't be fixed in dgrijalva's version.

* Update occurrences of bradleyfalzon/ghinstallation to v2

v2.0.3 pulls in golang-jwt/jwt over the now unmaintained
dgrijalva/jwt-go.
2021-10-07 00:41:37 -04:00