Merge pull request #8761 from iftachk/atlantis-onboard-kops-infra-ci

configure kops-infra-ci to use atlantis

Author: k8s-ci-robot

.atlantis.yaml

@@ -10,3 +10,7 @@ projects:
     branch: /main/
     dir: infra/aws/terraform/artifacts.k8s.io
     workflow: aws
+  - name: kops-infra-ci
+    branch: /main/
+    dir: infra/aws/terraform/kops-infra-ci
+    workflow: aws

infra/aws/terraform/kops-infra-ci/atlantis.config

@@ -0,0 +1,3 @@
+assume_role = {
+  role_arn = "arn:aws:iam::354561287328:role/OrganizationAccountAccessRole"
+}

infra/aws/terraform/kops-infra-ci/atlantis.tfvars

@@ -0,0 +1 @@
+atlantis_role_arn = "arn:aws:iam::354561287328:role/OrganizationAccountAccessRole"

infra/aws/terraform/kops-infra-ci/locals.tf

@@ -16,10 +16,6 @@ limitations under the License.
 
 
 locals {
-  kops-infra-ci-name       = "kops-infra-ci"
-  kops-infra-ci-index      = index(data.aws_organizations_organization.current.accounts.*.name, local.kops-infra-ci-name)
-  kops-infra-ci-account-id = data.aws_organizations_organization.current.accounts[local.kops-infra-ci-index].id
-
   prefix                     = "k8s-infra-kops"
   cluster_name               = "${local.prefix}-prow-build"
   cluster_autoscaler_version = "v${var.eks_version}.5"

infra/aws/terraform/kops-infra-ci/providers.tf

@@ -19,7 +19,7 @@ provider "aws" {
   alias  = "kops-infra-ci"
 
   assume_role {
-    role_arn = "arn:aws:iam::${local.kops-infra-ci-account-id}:role/OrganizationAccountAccessRole"
+    role_arn = var.atlantis_role_arn
   }
 }
 

infra/aws/terraform/kops-infra-ci/variables.tf

@@ -46,3 +46,8 @@ variable "vpc_cidr" {
   description = "CIDR of the VPC"
   default     = "10.128.0.0/16"
 }
+
+variable "atlantis_role_arn" {
+  description = "The ARN of the Atlantis IAM role"
+  default     = null
+}