configuring Atlantis on jenkins

[skkc2]

Hello Everyone,

I'm very new to the atlantis stuff, apologies in advance if this question is silly.

I have a requirement to get Atlantis up and running on our private infrastructure. I've installed atlantis v0.23.5 in jenkins machine and our SCM is gitlab enterprise. as of now all our jenkins machines can pull code from gitlab and execute terraform & terragrunt as required.

I've followed the runatlantis.docs for installting the atlantis, setting up the webhook secret,etc. I'm succesfully able to reach the atlantis on port 4141. I've created a internal repo in gitlab for testing purpose which has main.tf, variables.tf and main.tfvars also I've created new branch called testing1 and created a merge request. When I comment atlantis plan or help I straight away get
Error: This repo is not allowlisted for Atlantis.

below is my atlantis_config.sh
`
atlantis server
--atlantis-url="https://private_ip:4141" \
--gitlab-hostname="https://gitlab.private.cloud"
--gitlab-user="git_user"
--gitlab-token="ABCDEFGHIKJLETCj"
--gitlab-webhook-secret="abcdefgh123456789"
--repo-allowlist="gitlab.private.cloud/folder1/folder2/folder3/folder4/atlantis"
--repo-config="./repos.yaml"

`

below is my repos.yaml file

repos:
- id: /.*/
  allowed_overrides: [workflow]

workflows:
  custom1:
    plan:
      steps:
      - init
      - run: terraform init
      - run: terraform plan -var-file=testing.tfvars
    apply:
      steps:
      - run: terraform apply -var-file=testing.tfvars

Git version: 2.39.2
Terraform version: 1.0.7
atantis version: 0.23.5

Can anyone please suggest how to overcome the error and the get the outputs in comment section

Thank you very much in advance

[jamengual]

the --repo-allowlist="gitlab.private.cloud/folder1/folder2/folder3/folder4/atlantis" need to be a repo url, you can't target subfolders.

[skkc2]

Hi Jamengual,

Hope you're doing well.

I don't understand when you say you can't target subfolders. We've a lot of repos in the all folders and the folders are nested.

here's the URL = "gitlab.private.cloud/src/aws/dev/region/atlantis" when we he hit it in browser it works fine. But we sill get the same error in comments Error: This repo is not allowlisted for Atlantis.

Thanks

[jamengual]

the repoallowlist is a repo url only it does not include subfolders.

for example:

github.com:tacothunder/myrepo even though there are many subfolders in the repo.

[skkc2]

I've updated the same and still get the same Error: This repo is not allowlisted for Atlantis.

[jamengual]

enable debug and check what url you see on the request in atlantis, you might be missing something.
If this was not working for everyone no one will be able to use Atlantis.

[jamengual]

did you changed any tf files on that pr?

…

On Thu, May 11, 2023, 5:02 a.m. skkc ***@***.***> wrote: Hi Jamengual I've set the repoallowlist to * and updated Atlantis.yaml dir to *- dir: ./dev/aws/service/region/atlantis*. we get Ran Plan for 0 projects: I got stuck on this for a while. just to get it up and running any help ? below is my repos.yaml repos: - id: /.*/ allowed_overrides: [workflow] pre_workflow_hooks: - run: "cat ~/atlantis/atlantis.yaml > atlantis.yaml" workflows: custom1: plan: steps: - init - run: "terraform init" - run: "terraform plan -var-file=testing.tfvars" apply: steps: - run: "terraform apply -var-file=testing.tfvars" below is my atlantis.yaml version: 3 projects: - dir: ./dev/aws/service/region/atlantis workflow: custom1 # could also be custom2 OR default autoplan: enabled: true below is log {"level":"debug","ts":"2023-05-11T11:33:56.538Z","caller":"events/project_command_builder.go:284","msg":"1 files were modified in this pull request" ,"json":{"repo":"dev/aws/service/region/atlantis","pull":"5"}} {"level":"debug","ts":"2023-05-11T11:33:56.538Z","caller":"events/project_command_builder.go:326","msg":"got workspace lock","json":{"repo":"dev/ aws/service/region/atlantis","pull":"5"}} {"level":"debug","ts":"2023-05-11T11:33:56.538Z","caller":"events/working_dir.go:97","msg":"clone directory \"/home/ec2-user/.atlantis/repos/dev/ aws/service/region/atlantis/5/default\" already exists, checking if it's at the right commit","json":{"repo":"dev/aws/service/region/atlantis","pull":"5"}} {"level":"debug","ts":"2023-05-11T11:33:56.540Z","caller":"events/working_dir.go:124","msg":"repo is at correct commit \"bed8e999d111e7f250975dd38 6870836fa0d6f98\" so will not re-clone","json":{"repo":"dev/aws/service/region/atlantis","pull":"5"}} {"level":"info","ts":"2023-05-11T11:33:56.541Z","caller":"events/project_command_builder.go:351","msg":"successfully parsed atlantis.yaml file" ,"json":{"repo":"dev/aws/service/region/atlantis","pull":"5"}} {"level":"debug","ts":"2023-05-11T11:33:56.541Z","caller":"events/project_command_builder.go:358","msg":"moduleInfo for /home/ec2-user/.atlantis/repos/dev/aws/service/region/atlantis/5/default (matching \"\") = map[]","json":{"repo":"dev/aws/service/region/atlantis","pull":"5"}} {"level":"debug","ts":"2023-05-11T11:33:56.541Z","caller":"events/project_finder.go:185","msg":"found downstream projects for \"v1\": []", "json":{"repo":"dev/aws/service/region/atlantis","pull":"5"}} {"level":"debug","ts":"2023-05-11T11:33:56.541Z","caller":"events/project_finder.go:192","msg":"checking if project at dir \"dev/aws/ service/region\" workspace \"default\" was modified","json":{"repo":"dev/aws/service/region/atlantis","pull":"5"}} {"level":"info","ts":"2023-05-11T11:33:56.541Z","caller":"events/project_command_builder.go:365","msg":"0 projects are to be planned based on their when_modified config","json":{"repo":"dev/aws/service/region/atlantis","pull":"5"}} {"level":"debug","ts":"2023-05-11T11:33:56.541Z","caller":"metrics/debug.go:52","msg":"timer","json":{"name":"atlantis.builder.execution_time" ,"value":0.446341056,"tags":{},"type":"timer"}} {"level":"debug","ts":"2023-05-11T11:33:56.541Z","caller":"events/plan_command_runner.go:241","msg":"deleting previous plans and locks","json":{"repo":"dev/aws/service/region/atlantis","pull":"5"}} Thanks — Reply to this email directly, view it on GitHub <#3394 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAQ3ERDIBRLDPK4YIRDX2BTXFTIOVANCNFSM6AAAAAAX4S7BTY> . You are receiving this because you commented.Message ID: ***@***.***>

[skkc2]

nope, All I've created a new branch v1 and a new file called test yesterday. opened a merge request on it.
As of now only atlantis help works .

[jamengual]

Autoplan will only plan on tf files and some other tf related files so if you crate a file called `test` is not going to do anything, you need a valid `anyname.tf` file to trigger the autoplan. https://www.runatlantis.io/docs/server-configuration.html#autoplan-file-list

…

On Thu, May 11, 2023 at 8:25 AM skkc ***@***.***> wrote: nope, All I've created a new branch v1 and a new file called test yesterday. opened a merge request on it. As of now only atlantis help works . — Reply to this email directly, view it on GitHub <#3394 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAQ3ERBNHGQOR7LVFRPG2RTXFUAFBANCNFSM6AAAAAAX4S7BTY> . You are receiving this because you commented.Message ID: ***@***.***>

[skkc2]

thanks