Merge pull request #8687 from upodroid/atlantis-patch

configure the workflow server-side instead of inrepo

Author: k8s-ci-robot

.atlantis.yaml

@@ -10,23 +10,3 @@ projects:
     branch: /main/
     dir: infra/aws/terraform/artifacts.k8s.io
     workflow: aws
-# For AWS, atlantis needs to assume a specific role in each account except the management account
-# so we read it from the folder that atlantis will work on
-workflows:
-  aws:
-    plan:
-      steps:
-        - init:
-            extra_args: ["--backend-config", "atlantis.config"]
-        - plan:
-            extra_args: ["-var-file", "atlantis.tfvars"]
-    apply:
-      steps:
-        - apply:
-            extra_args: ["-var-file", "atlantis.tfvars"]
-    import:
-      steps:
-        - init:
-            extra_args: ["--backend-config", "atlantis.config"]
-        - import:
-            extra_args: ["-var-file", "atlantis.tfvars"]

kubernetes/gke-utility/atlantis/atlantis.yaml

@@ -11,4 +11,5 @@ hide-prev-plan-comments: true
 hide-unchanged-plan-comments: true
 checkout-strategy: merge
 emoji-reaction: eyes
+repo-config: /config/repos.yaml
 # default-tf-distribution: opentofu # uncomment when we start using opentofu

kubernetes/gke-utility/atlantis/kustomization.yaml

@@ -15,6 +15,7 @@ configMapGenerator:
   - name: atlantis-config
     files:
       - atlantis.yaml
+      - repos.yaml
 
 patchesStrategicMerge:
   - |-

kubernetes/gke-utility/atlantis/repos.yaml

@@ -0,0 +1,27 @@
+# https://www.runatlantis.io/docs/server-side-repo-config.html
+repos:
+  - id: github.com/kubernetes/k8s.io
+    branch: /main/
+    allow_custom_workflows: false # NO CUSTOM WORKLOADS CAN BE SPECIFIED IN THE REPOS
+    allowed_workflows: [aws]
+
+# For AWS, atlantis needs to assume a specific role in each account except the management account
+# so we read it from the folder that atlantis will work on
+workflows:
+  aws:
+    plan:
+      steps:
+        - init:
+            extra_args: ["-backend-config=atlantis.config"]
+        - plan:
+            extra_args: ["-var-file=atlantis.tfvars"]
+    apply:
+      steps:
+        - apply:
+            extra_args: ["-var-file=atlantis.tfvars"]
+    import:
+      steps:
+        - init:
+            extra_args: ["-backend-config=atlantis.config"]
+        - import:
+            extra_args: ["-var-file=atlantis.tfvars"]