Skip to content
This repository was archived by the owner on Jul 22, 2026. It is now read-only.

chore: sunset — tear down infra + disable deploys#17

Merged
vicw0ng-hk merged 1 commit into
masterfrom
chore/sunset-teardown
Jul 22, 2026
Merged

chore: sunset — tear down infra + disable deploys#17
vicw0ng-hk merged 1 commit into
masterfrom
chore/sunset-teardown

Conversation

@vicw0ng-hk

Copy link
Copy Markdown
Owner

Summary

The app is being sunset. This PR commented out (not deleted) all Terraform-managed resources and the three deploy workflows so the repo stays a readable archive.

  • infra/*.tf — every resource block is #-commented. backend.tf, providers.tf, variables.tf stay live so the destroy run can still authenticate to AWS (OIDC) and Cloudflare. On merge to master, HCP Terraform plans a full destroy — approve it in the HCP workspace UI.
  • .github/workflows/deploy-{web,catalog,api}.yml#-commented so nothing can redeploy the torn-down stack. ci.yml left intact.
  • docs/progress.md — records the sunset state + manual teardown steps.

What the HCP destroy tears down

3 Lambdas + streaming Function URL · ECR repo (force_delete, images go with it) · HTTP API v2 + authorizer + routes + stage · 4 CloudWatch log groups · hipo-pipeline-lambda-exec IAM role + policies · hipo-catalog KV namespace · hipo-filings R2 bucket · hipo-web Pages project + deployments · hipo.vsh852.com Pages domain + CNAME. The vsh852.com zone is a data source — untouched.

⚠️ Manual steps (see docs/progress.md)

  1. Before the destroy applies: empty the hipo-filings R2 bucket — Cloudflare refuses to delete a non-empty bucket.
  2. Delete the catalog Worker (hipo-catalog script + cron) — wrangler-owned, not in Terraform: wrangler delete --name hipo-catalog.
  3. Approve the HCP destroy run.
  4. After destroy: remove GitHub repo secrets, delete the deploy IAM user, rotate/revoke the Cloudflare token + LLM gateway keys + shared api_key, and delete the HCP workspace if done.

Verification

tf fmt + tf validate pass · web:check 55 tests pass · api:test 73 tests pass. lint failed only on a network timeout downloading the ruff binary — changes are comments + markdown, nothing for ruff to flag.

🤖 Generated with Claude Code

App is being decommissioned. Comment out (not delete) every infra/*.tf
resource and the three deploy-* workflows so:

- merging to master makes HCP Terraform plan a full destroy of the
  managed AWS + Cloudflare resources (approve in the HCP UI), and
- the deploy workflows can never redeploy the torn-down stack.

backend.tf / providers.tf / variables.tf stay live so the destroy can
authenticate. Files are commented, not removed, to keep the repo a
readable archive; restore from git history to revive.

docs/progress.md records the sunset state + the manual teardown steps
for resources Terraform never owned (catalog Worker, repo secrets,
deploy IAM user, API keys) and the R2-empty-before-destroy ordering.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@vicw0ng-hk
vicw0ng-hk merged commit fd7b457 into master Jul 22, 2026
5 checks passed
@vicw0ng-hk
vicw0ng-hk deleted the chore/sunset-teardown branch July 22, 2026 07:44
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant