Skip to content

DISTMYSQL-622: Let allowlist-set run unattended - #401

Open
nogueiraanderson wants to merge 1 commit into
mainfrom
DISTMYSQL-622-allowlist-set-unattended
Open

DISTMYSQL-622: Let allowlist-set run unattended#401
nogueiraanderson wants to merge 1 commit into
mainfrom
DISTMYSQL-622-allowlist-set-unattended

Conversation

@nogueiraanderson

Copy link
Copy Markdown
Collaborator

Feature

  • just allowlist-set overwrites without the interactive confirm, so it runs from automation and non-TTY sessions

Why

  • The read -p prompt exits non-zero under set -e in any non-interactive caller, making the recipe unusable outside a terminal
  • The previous value is still echoed before the write, every PutParameter is CloudTrail-audited, and the terraform/allowlists.tf guards (no 0.0.0.0/0, at least one valid CIDR) keep gating the apply

Tickets

- Drop the interactive overwrite confirm: read -p dies under set -e in
  any non-TTY caller, so the recipe could not run from automation
- The previous value is still echoed before the write, PutParameter is
  CloudTrail-audited, and the terraform/allowlists.tf guards keep gating
  the apply
@nogueiraanderson
nogueiraanderson requested a review from vorsel August 7, 2026 19:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant