add the ability to disable the '-auto-approve' option with terraform #617
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
With the current settings, when we run the
bbl up
command, it callsterraform apply -auto-approve
. In some cases, knowing that we're working with other people, some applied changes may not be something we want to apply in our infrastructure. So we'd like to be able to approve changes ourselves instead of having them applied automatically.The apply and destroy terraform commands are always used with the
-auto-approve
option. Before using this option, it is recommended that you make sure that nobody else can modify the infrastructure outside the Terraform workflow.This feature adds the ability to disable automatic approval when using terraform by adding the
--disable-tf-auto-approve
option and theBBL_DISABLE_TF_AUTO_APPROVE
environment variable.