Atlantis DCI (DevOpsCorner Indonesia) Terraform

Centralized IaC Tools Provisioning using Terraform

---

Available Tags

Alpine v3.22

Image name	Size
devopscorner/devopscorner-atlantis:latest
devopscorner/devopscorner-atlantis:alpine
devopscorner/devopscorner-atlantis:alpine-latest

Debian Bookworm

Image name	Size
devopscorner/devopscorner-atlantis:debian
devopscorner/devopscorner-atlantis:debian-latest

AWS Linux

Image name	Size
devopscorner/devopscorner-atlantis:aws
devopscorner/devopscorner-atlantis:aws-latest

---

Prerequirements

• Docker (docker)
• Docker Compose (docker-compose)

---

AWS Control Tower

AWS Organization

.
├── DCI-Management
│   ├── devopscorner-ct-log        (123456789012 | [email protected])
│   ├── devopscorner-ct-management (112233445566 | [email protected])
│   └── devopscorner-ct-audit      (111122223333 | [email protected])
└── DCI-OrganizationUnit
    ├── DCI-Billing
    │   └── devopscorner-billing   (444455556666 | [email protected])
    ├── devopscorner-dev01         (098765432101 | [email protected])
    ├── devopscorner-dev02         (555566667777 | [email protected])
    ├── devopscorner-uat01         (888899990000 | [email protected])
    ├── devopscorner-uat02         (123123123123 | [email protected])
    ├── devopscorner-prod01        (456456456456 | [email protected])
    └── devopscorner-prod02        (789789789789 | [email protected])

Terraform Centralized Provisioning

Terraform Structure

tree -L 3    # three-levels show
---
.
├── LICENSE
├── README.md
├── atlantis.yaml
├── aws-session.sh
├── builder
│   ├── ATLANTIS-WORKSPACE.md
│   ├── Dockerfile
│   ├── Dockerfile-AWS-Python3.12
│   ├── Dockerfile-Alpine-3.22-Python3.12
│   ├── Dockerfile-Debian-Bookworm-Python3.12
│   ├── HOW-TO.md
│   ├── atlantis-nginx-basic-auth.conf
│   ├── atlantis-nginx.conf
│   ├── atlantis-v4.25.2.yaml
│   ├── config
│   │   ├── docker
│   │   └── k8s
│   ├── docker-compose.yml
│   ├── dockerhub-build.sh
│   ├── dockerhub-push.sh
│   ├── dockerhub-tag.sh
│   ├── ecr-build.sh
│   ├── ecr-pull.sh
│   ├── ecr-push.sh
│   ├── ecr-tag.sh
│   ├── git-clone.sh
│   ├── repo-v4.25.2.yaml
│   └── scripts
│       ├── atlantis-deploy
│       ├── download-release.sh
│       ├── init-atlantis
│       ├── install-atlantis-deploy
│       └── setup-basic-auth
├── docs
│   └── assets
│       ├── ct-billing.svg
│       ├── ct-ou.svg
│       ├── ct.svg
│       └── tf-provisioning.svg
├── environments
│   ├── ct
│   │   └── ct-management-112233445566
│   ├── dev
│   │   └── dev01-098765432101
│   └── uat
│       └── uat01-888899990000
├── gen-docs.sh
├── helm
│   ├── atlantis
│   │   ├── CODEOWNERS
│   │   ├── LICENSE
│   │   ├── Makefile
│   │   ├── README.md
│   │   ├── charts
│   │   └── ct.yaml
│   └── jumppod
│       ├── backend
│       └── stateful
├── manifest
│   ├── credentials-config.txt
│   ├── csi-driver
│   ├── eks-manifest
│   ├── helm-value-atlantis-nfs.yaml
│   ├── helm-value-jumppod-nfs.yaml
│   ├── manifest-configmap-atlantis-aws-config.yaml
│   ├── manifest-configmap-atlantis-aws-credentials.yaml
│   ├── manifest-configmap-atlantis-config.yaml
│   ├── manifest-configmap-atlantis-tf-config.yaml
│   ├── manifest-configmap-atlantis.yaml
│   ├── manifest-secretref-atlantis-aws.yaml
│   ├── manifest-secretref-atlantis-gh-vcs.yaml
│   ├── manifest-storage-class-aws copy.yaml
│   ├── manifest-storage-class-aws.yaml
│   └── secret
│       ├── aws-auth.txt
│       └── manifest-secret-http-auth.yaml
├── modules
│   ├── budget
│   ├── core-igw
│   ├── core-igw-ec2
│   ├── core-igw-eks
│   ├── core-nat
│   ├── core-nat-ec2
│   ├── core-nat-eks
│   ├── eks
│   ├── iam-tfuser-executor
│   ├── iam-user
│   ├── scheduler
│   │   ├── scheduler-config
│   │   ├── scheduler-core
│   │   └── scheduler-notifications
│   ├── storage-efs
│   ├── storage-s3
│   └── tfstate
├── repo.yaml
└── scripts
    ├── csi-driver.sh
    └── nfs-subdir.sh

45 directories, 249 files

Atlantis Features

• Atlantis Container Builder Image
  • Alpine v3.22
  • Debian Bookworm
  • AWS Python-3.12
• Atlantis Docker-Compose
• Atlantis Manifest Helm Deployment for Kubernetes
• Atlantis Documentation with
• Atlantis Deployment Script Dynamic & Customize Workspace
• Production Grade Modularity Terraform

Atlantis Environment Check (DEBUG)

🔍 Debug Information:
   PATH: /home/atlantis/bin:/home/atlantis/.local/share/pnpm:/home/atlantis/.nvm/versions/node/v20.19.3/bin:/home/atlantis/bin:/home/atlantis/.local/share/pnpm:/home/atlantis/.nvm/versions/node/v20.19.3/bin:/home/atlantis/.local/share/pnpm:/home/atlantis/.nvm/versions/node/v20.19.3/bin:/home/atlantis/.local/bin:/home/atlantis/.local/share/pnpm:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/home/atlantis/.nvm/versions/node/v20/bin
   Current working directory: /home/atlantis
   Current user: atlantis (UID: 100, GID: 100)
🔍 Binary Discovery:
   Checking /usr/local/bin/ for tools...
-rwxr-xr-x 1 atlantis users 33013912 Nov 23  2024 atlantis
-rwxr-xr-x 1 root     root     29301 Jun 26 15:33 atlantis-deploy
-rwxr-xr-x 1 root     root      1128 Jun 26 15:29 install-atlantis-deploy
-rwxr-xr-x 1 root     root  89059480 Oct 16  2024 terraform
-rwxr-xr-x 1 root     root  90235032 Jan 22 23:45 terraform1.10.5
-rwxr-xr-x 1 root     root  90579096 Apr  9 20:03 terraform1.11.4
-rwxr-xr-x 1 root     root  81002496 Dec 14  2023 terraform1.6.6
-rwxr-xr-x 1 root     root  84525056 Mar 14  2024 terraform1.7.5
-rwxr-xr-x 1 root     root  88207512 Jun  5  2024 terraform1.8.5
-rwxr-xr-x 1 root     root  89059480 Oct 16  2024 terraform1.9.8
-rwxr-xr-x 1 root     root  96852811 Jun 27 08:14 terragrunt
-rwxr-xr-x 1 root     root  96852811 Jun 27 08:14 terragrunt0.70.4
-rwxr-xr-x 1 root     root  84988056 Nov 22  2024 tofu
-rwxr-xr-x 1 root     root  84988056 Nov 22  2024 tofu1.8.6

Verifying environment...
===============================================================================
 Atlantis Server:
   atlantis v0.31.0 (commit: 245044c) (build date: 2024-11-22T17:58:20.688Z)
===============================================================================
 Infrastructure as Code Tools:
   Terraform: Terraform v1.9.8
   Terragrunt: terragrunt version v0.70.4
   OpenTofu: OpenTofu v1.8.6
-------------------------------------------------------------------------------
 Development Tools:
   Node.js: v20.19.3
   NPM: 10.8.2
   PNPM: 10.12.4
   Python: Python 3.12.0
-------------------------------------------------------------------------------
 Container & System Tools:
 Docker socket exists but not accessible.
   Docker: Not available (no socket access)
   User: atlantis (UID: 100, GID: 100)
   Working Directory: /home/atlantis
   Environment: production
===============================================================================
Available tool versions:
└── Terraform versions:
    ├── terraform: v1.9.8
    ├── terraform1.10.5: v1.10.5
    ├── terraform1.11.4: v1.11.4
    ├── terraform1.6.6: v1.6.6
    ├── terraform1.7.5: v1.7.5
    ├── terraform1.8.5: v1.8.5
    ├── terraform1.9.8: v1.9.8
└── Terragrunt versions:
    ├── terragrunt: v0.70.4
    ├── terragrunt0.70.4: v0.70.4
└── OpenTofu versions:
    ├── tofu: v1.8.6
    ├── tofu1.8.6: v1.8.6
===============================================================================
🔍 Checking Terragrunt-Terraform compatibility...
   Terraform: v1.9.8
   Terragrunt: v0.70.4
   ✅ Terraform version meets minimum requirement (>= 1.9.8)
   ✅ Terragrunt version supports Terraform 1.9.8+
===============================================================================
🔍 About to execute: atlantis server

INF INF server/server.go:325 > INF INF server/server.go:325 > INF INF server/server.go:325 > INF INF server/server.go:325 > ts=2025-06-27T09:19:21.643+0700 INF INF server/server.go:325 > INF INF server/server.go:325 > INF INF server/server.go:325 > INF INF server/server.go:325 > ts=2025-06-27T09:19:21.643+0700 msg=Supported VCS Hosts: Github INF INF server/server.go:325 > INF INF server/server.go:325 > INF INF server/server.go:325 > INF INF server/server.go:325 > ts=2025-06-27T09:19:21.643+0700 INF INF server/server.go:325 > INF INF server/server.go:325 > INF INF server/server.go:325 > INF INF server/server.go:325 > ts=2025-06-27T09:19:21.643+0700 msg=Supported VCS Hosts: Github json={}
INF INF server/server.go:478 > INF INF server/server.go:478 > INF INF server/server.go:478 > INF INF server/server.go:478 > ts=2025-06-27T09:19:21.846+0700 INF INF server/server.go:478 > INF INF server/server.go:478 > INF INF server/server.go:478 > INF INF server/server.go:478 > ts=2025-06-27T09:19:21.846+0700 msg=Utilizing BoltDB INF INF server/server.go:478 > INF INF server/server.go:478 > INF INF server/server.go:478 > INF INF server/server.go:478 > ts=2025-06-27T09:19:21.846+0700 INF INF server/server.go:478 > INF INF server/server.go:478 > INF INF server/server.go:478 > INF INF server/server.go:478 > ts=2025-06-27T09:19:21.846+0700 msg=Utilizing BoltDB json={}
INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > ts=2025-06-27T09:19:21.862+0700 INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > ts=2025-06-27T09:19:21.862+0700 msg=Scheduled Executor Service started INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > ts=2025-06-27T09:19:21.862+0700 INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > INF INF scheduled/executor_service.go:51 > ts=2025-06-27T09:19:21.862+0700 msg=Scheduled Executor Service started json={}
INF INF server/server.go:1048 > INF INF server/server.go:1048 > INF INF server/server.go:1048 > INF INF server/server.go:1048 > ts=2025-06-27T09:19:21.863+0700 INF INF server/server.go:1048 > INF INF server/server.go:1048 > INF INF server/server.go:1048 > INF INF server/server.go:1048 > ts=2025-06-27T09:19:21.863+0700 msg=Atlantis started - listening on port 4141 INF INF server/server.go:1048 > INF INF server/server.go:1048 > INF INF server/server.go:1048 > INF INF server/server.go:1048 > ts=2025-06-27T09:19:21.863+0700 INF INF server/server.go:1048 > INF INF server/server.go:1048 > INF INF server/server.go:1048 > INF INF server/server.go:1048 > ts=2025-06-27T09:19:21.863+0700 msg=Atlantis started - listening on port 4141 json={}

Copyright

• Author: DevOps Engineer ([email protected])
• Vendor: DevOpsCorner Indonesia (devopscorner.id)
• License: Apache v2