---
environment:
  ATLANTIS_ALLOW_COMMANDS: "plan,apply,unlock,approve_policies,import"
  ATLANTIS_FAIL_ON_PRE_WORKFLOW_HOOK_ERROR: true
  ATLANTIS_ENABLE_POLICY_CHECKS: true
  ATLANTIS_HIDE_UNCHANGED_PLAN_COMMENTS: true
  ATLANTIS_QUIET_POLICY_CHECKS: true
  repoConfig: |
  ---
  repos:
  - id: "/.*/"
    delete_source_branch_on_merge: true
    apply_requirements: [approved, mergeable]
    allowed_overrides: [workflow]
    repo_locking: false
    policy_check: true
    custom_policy_check: true
    workflow: terragrunt
    pre_workflow_hooks:
    - run: |
        echo "generating atlantis.yaml"
        terragrunt-atlantis-config generate --output atlantis.yaml --autoplan --automerge --parallel --create-workspace="true" --workflow="terragrunt" --ignore-dependency-blocks="true" --filter "live/staging" --filter "live/dev" --filter "live/rec" --filter "live/pp" --filter "live/prod";
  metrics:
    prometheus:
      endpoint: /metrics
  workflows:
    terragrunt:
      plan:
        steps:
        - env:
            # Reduce Terraform suggestion output
            name: TF_IN_AUTOMATION
            value: 'true'
        - run: terragrunt hclfmt --terragrunt-check
        - run:
            # Allow for targetted plans/applies as not supported for Terraform wrappers by default
            command: terragrunt plan -input=false $(printf '%s' $COMMENT_ARGS | sed 's/,/ /g' | tr -d '\\') -no-color -out $PLANFILE
            output: hide
        - run: terragrunt show $PLANFILE
      policy_check:
        steps:
          - run:
              command: terragrunt show -json $PLANFILE | awk '/^\{/ {print}' > "plan.json"
              output: hide
          - run: 
              command: |
                cat <<-EOF > ./variables.json
                {
                   "mode": "FULL"
                }
                EOF
              output: hide
          - run: |
              conftest test plan.json variables.json --combine --all-namespaces -p /atlantis-data/opa-rules/policy --quiet --no-color --strict
      apply:
        steps:
        - env:
            name: TF_IN_AUTOMATION
            value: 'true'
        - run: terragrunt apply -input=false $PLANFILE
      import:
        steps:
        - run: terragrunt import -input=false $(printf '%s' $COMMENT_ARGS | sed 's/,/ /' | tr -d '\\')
---