Homelab/infra-core
6
0
Fork 2
Code Issues Pull requests 35 Projects Releases 1 Packages Wiki Activity Actions

SCRATCH PROBE do not merge - HOMELAB-1865 Atlantis head-vs-base config test #583

Closed
aaron wants to merge 1 commit from scratch/HOMELAB-1865-atlantis-headtest into live
pull from: scratch/HOMELAB-1865-atlantis-headtest
merge into: Homelab:live
Conversation 0 Commits 1 Files changed 1 +28 -11
aaron commented 2026-10-02 07:42:21 +00:00
Owner
Copy link

SCRATCH PROBE — DO NOT MERGE. Verification probe for HOMELAB-1865 / PR #582.

Branched off plane/HOMELAB-1865-atlantis-leg (whose atlantis.yaml no longer declares the zitadel project) and touches core/terraform/live/zitadel/main.tf with a no-op comment. Purpose: determine empirically whether Atlantis resolves repo-level atlantis.yaml from the PR head or the base branch. Will be closed immediately after reading the result.

SCRATCH PROBE — DO NOT MERGE. Verification probe for HOMELAB-1865 / PR #582. Branched off `plane/HOMELAB-1865-atlantis-leg` (whose `atlantis.yaml` no longer declares the `zitadel` project) and touches `core/terraform/live/zitadel/main.tf` with a no-op comment. Purpose: determine empirically whether Atlantis resolves repo-level `atlantis.yaml` from the PR **head** or the **base** branch. Will be closed immediately after reading the result.
HOMELAB-1865: ci(atlantis): zitadel root applies via prod infra-apply, not Atlantis
All checks were successful
0/0 projects applied successfully.
CI Review / receiver-test (pull_request) Successful in 5s
Details
CI Review / helm-validate (pull_request) Successful in 7s
Details
Lint & Validate / yaml-lint (pull_request) Successful in 11s
Details
Lint & Validate / shellcheck (pull_request) Successful in 6s
Details
CI Review / alert-receiver-test (pull_request) Successful in 22s
Details
CI Review / dispatcher-test (pull_request) Successful in 2m7s
Details
Lint & Validate / terraform-validate (pull_request) Successful in 2m57s
Details
6ecd475da8 
core/terraform/live/zitadel can never be planned by in-cluster Atlantis: its
backend block is partial and the real backend.hcl is gitignored by the repo
root .gitignore (*.hcl / !*.hcl.example) and lives only in the private prod
repo. Atlantis clones infra-core alone, so its custom workflow's
'init -backend-config=backend.hcl' fails with:

  Error: Failed to read file
  The file "backend.hcl" could not be read.

Verified in the live atlantis-0 pod log for PR #581 (commit 9c12fb5). The red
plan status fired on every commit (seen on 648cfd8, c05c0e3, 4d893e4,
9c12fb5) and, via the landing lock (HOMELAB-1679, no override), now blocks
merges of otherwise-green downstream PRs.

The sanctioned path for this root is prod's .forgejo/workflows/infra-apply.yaml
with 'target: zitadel', which checks infra-core out at live on the runner and
uses prod's tracked backend.hcl + terraform.tfvars. Atlantis coverage was
redundant with that path and environmentally impossible.

Remove the zitadel project block; the network and bootstrap projects are
untouched. The zitadel workflow is retained, marked dormant, for one-block
re-enable once an Atlantis-visible backend config exists.
HOMELAB-1865: scratch probe (do not merge) - zitadel TF touch on top of the atlantis.yaml fix
All checks were successful
0/0 projects applied successfully.
CI Review / receiver-test (pull_request) Successful in 5s
Details
CI Review / helm-validate (pull_request) Successful in 9s
Details
Lint & Validate / shellcheck (pull_request) Successful in 4s
Details
Lint & Validate / yaml-lint (pull_request) Successful in 11s
Details
CI Review / alert-receiver-test (pull_request) Successful in 20s
Details
CI Review / dispatcher-test (pull_request) Successful in 2m41s
Details
Lint & Validate / terraform-validate (pull_request) Successful in 2m58s
Details
39bd74487c
aaron closed this pull request 2026-10-02 07:43:05 +00:00
All checks were successful
0/0 projects applied successfully.
CI Review / receiver-test (pull_request) Successful in 5s
Details
CI Review / helm-validate (pull_request) Successful in 9s
Required
Details
Lint & Validate / shellcheck (pull_request) Successful in 4s
Required
Details
Lint & Validate / yaml-lint (pull_request) Successful in 11s
Required
Details
CI Review / alert-receiver-test (pull_request) Successful in 20s
Details
CI Review / dispatcher-test (pull_request) Successful in 2m41s
Details
Lint & Validate / terraform-validate (pull_request) Successful in 2m58s
Required
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
operator-review

Requires human operator review before merge — dangerous class (RBAC, secrets, network policy, Terraform) or explicitly gated. Never auto-merge.

No labels
operator-review
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Homelab/infra-core!583
No description provided.