Skip to content

chore: remove CDK, Elastic Beanstalk and SOPS deploy bits (DO NOT MERGE yet) - #10

Draft
Alexanderamiri wants to merge 1 commit into
platform/5-cutoverfrom
platform/6-cleanup
Draft

Alexanderamiri wants to merge 1 commit into
platform/5-cutoverfrom
platform/6-cleanup

Conversation

@Alexanderamiri

@Alexanderamiri Alexanderamiri commented Oct 24, 2026 •

Copy link
Copy Markdown
Member

Part 6 of 6. DO NOT MERGE until 14 days after the cutover (PR 5, #8) AND after the old stack has been deleted. For review; the platform team will not merge it.

Why

Once the platform serves production, the old deploy paths are dead code. They are also a risk: cdk deploy would recreate a second production service, and the SOPS file holds production credentials.

What

Removes:

  • cdk/, .github/workflows/cdk-deploy.yml, Dockerfile.cdk
  • conf/.enc.env and run-local.sh, which decrypted it
  • Procfile, deploy.sh, package.sh (Elastic Beanstalk packaging)
  • docker/app/ (unused image)
  • .github/workflows/maven.yaml (ghcr edge image; deploy.yml builds and tests now)

Also updates README.md, docs/platform.md and .dockerignore.

How the platform piece works

After this, the whole deployment of moresleep is app.yaml + Dockerfile + a 10-line deploy.yml. Everything else (VPC, load balancer, certificates, cluster, IAM, state, alarms, budget) is shared platform infrastructure owned by javaBin/platform.

Human decommission before merging (outside Terraform, needs an admin)

  1. aws cloudformation delete-stack --stack-name moresleepstack. This deletes the moresleep-test cluster and service, the target group, listener rule 15 on Default-ALB, the roles and the log group. The database is not in this stack.
  2. Terminate the Elastic Beanstalk environment Moresleep-prod-11. Delete the EB application moresleep and its S3 application versions, which contain decrypted config.properties.
  3. Check that the CloudFront alias for test-sleepingpill.javazone.no is gone.
  4. Keep the SOPS KMS key while cakeredux still uses it.
  5. Rotate the DB password and the ALLACCESS/READ credentials, since they lived in EB bundles and image layers. Update them with javabin secret set, and change the DB password with ALTER USER.

How verified

grep finds no remaining references to sops, .enc.env, cdk or Procfile outside history and the guide. mvn verify and the Dockerfile are unaffected.

🤖 Generated with Claude Code

@Alexanderamiri
Alexanderamiri added this pull request to stack #9 October 24, 2026 13:32
@Alexanderamiri Alexanderamiri changed the title chore: remove CDK, Elastic Beanstalk and SOPS deploy bits chore: remove CDK, Elastic Beanstalk and SOPS deploy bits (DO NOT MERGE yet) Oct 24, 2026
@Alexanderamiri
Alexanderamiri marked this pull request as draft October 24, 2026 13:33
After the cutover the platform pipeline is the only deploy path. Remove the
CDK stack (cdk/, cdk-deploy.yml, Dockerfile.cdk), the SOPS env file and
run-local.sh that decrypted it, the Elastic Beanstalk packaging (Procfile,
deploy.sh, package.sh), the unused docker/app image and the ghcr edge
build (maven.yaml), which deploy.yml replaces.

Do not merge until 14 days after the cutover and after the old
CloudFormation stack and Elastic Beanstalk app have been deleted.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant