Raquel Pau Fernandez09/13/2022, 1:07 PM
Maciej Raszplewicz09/13/2022, 1:19 PM
in Golang). And all the integration tests are being executed on a sandbox AWS account. Also, I am executing aws-nuke (https://github.com/rebuy-de/aws-nuke) on this account from time to time. I am not running integration tests in PRs (yet?). However, adding the UUID should do the trick for PRs too.
jonny s.09/13/2022, 1:47 PM
How do you protect that 2 PR that are touching terraform files become inconsistent, because you share the Terraform status?The workflow I’ve seen at several places is something like: • PR does a plan/preview step against the real infrastructure • only
branch deployments actually get deployed to production • Any automated tests we write against the infra are used to build out the terraform/pulumi in a sandbox account where we run it manually. • Those tests do get run against production after the deployment, but they don’t trigger rollbacks if they fail (just because IAC rollbacks can get very hairy very easily) but do fail the pipeline and alert the teams they have to fix it
Harel Safra09/14/2022, 6:56 AM