Raquel Pau Fernandez
09/13/2022, 1:07 PMMaciej Raszplewicz
09/13/2022, 1:19 PMfinally
block (or defer
in Golang).
And all the integration tests are being executed on a sandbox AWS account. Also, I am executing aws-nuke (https://github.com/rebuy-de/aws-nuke) on this account from time to time.
I am not running integration tests in PRs (yet?). However, adding the UUID should do the trick for PRs too.jonny s.
09/13/2022, 1:47 PMHow do you protect that 2 PR that are touching terraform files become inconsistent, because you share the Terraform status?The workflow I’ve seen at several places is something like: • PR does a plan/preview step against the real infrastructure • only
main
branch deployments actually get deployed to production
• Any automated tests we write against the infra are used to build out the terraform/pulumi in a sandbox account where we run it manually.
• Those tests do get run against production after the deployment, but they don’t trigger rollbacks if they fail (just because IAC rollbacks can get very hairy very easily) but do fail the pipeline and alert the teams they have to fix itHarel Safra
09/14/2022, 6:56 AM