tfvars encrypted with gpg

[bmailhe]

We use to encrypt our terraform.tfvars with sensitive data using GPG. But in Atlantis, the gpg command is not available so we cannot decrypt terraform.tfvars files.

As a workaround, I set env vars TF_VARS_xxx with variables from terraform.tfvars. But having a lot of repos to manage, it becomes complicated to maintain this workaround (every time a terraform.tfvars is modified, we have to update the Atlantis deployment to reflect it in env vars..)

• Do you have a better alternative to manage sensitive data with Atlantis?
• Is it possible to add gpg cmd to the Atlantis image so we can use a custom workflow to decrypt it?

[FernandoMiguel]

you can bake your own docker image using atlantis as a base image.
we have been doing this for years