feat: replace terraform github actions with atlantis

atlantis.yaml

@@ -0,0 +1,11 @@
+version: 3
+automerge: false
+projects:
+  - name: dev
+    dir: infra/environments/dev
+    terraform_version: v1.15.5
+    autoplan:
+      when_modified:
+        - "**/*.tf"
+        - ".terraform.lock.hcl"
+        - "../../modules/**/*.tf"

infra/environments/dev/backend.tf

@@ -0,0 +1,37 @@
+# Dev environment root — resources land in the Gaucho Racing Development
+# member account (104050870528) via assume-role; state stays in the shared
+# tfstate bucket in the management account under its own key.
+terraform {
+  required_version = ">= 1.10"
+
+  backend "s3" {
+    bucket       = "gaucho-racing-tfstate"
+    key          = "environments/dev/terraform.tfstate"
+    region       = "us-west-2"
+    encrypt      = true
+    use_lockfile = true
+  }
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 6.0"
+    }
+  }
+}
+
+provider "aws" {
+  region = "us-west-2"
+
+  assume_role {
+    role_arn = "arn:aws:iam::104050870528:role/OrganizationAccountAccessRole"
+  }
+
+  default_tags {
+    tags = {
+      Environment = "dev"
+      ManagedBy   = "terraform"
+      Repo        = "gaucho-racing/infrastructure"
+    }
+  }
+}

kubernetes/gr-foundry/apps/atlantis.yaml

@@ -0,0 +1,23 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: atlantis
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: https://github.com/Gaucho-Racing/infrastructure.git
+    targetRevision: main
+    path: kubernetes/gr-foundry/manifests/atlantis
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: atlantis
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true