Commit graph

11 commits

Author SHA1 Message Date
Adam Moussa
5464d66d19
chore(infra): tag legacy WO tables pending PLAT-11 destroy (#177)
Force an in-place DynamoDB update so HCP state records
prevent_destroy=false before the post-soak resource removal.
2026-08-07 14:44:16 -04:00
Adam Moussa
7d0f272901
chore(infra): lift prevent_destroy on legacy WO tables for PLAT-11 (#176)
Writers already use kebab tables. Allow HCP to destroy PascalCase
WorkOrders / WorkOrderComments after the ≥24h kebab soak. Docs scrub
to kebab as the live physical names; GitHub #24 noted superseded.
2026-08-07 14:26:44 -04:00
Adam Moussa
ebd5c40a34
fix(infra): import kebab-stream SHOC emitter ESMs after cutover recovery (#175)
Cutover apply updated Lambda env/IAM but ESM recreate failed until the
lambda execution boundary included kebab table ARNs. Import the
out-of-band Enabled mappings so HCP state matches live.
2026-08-07 14:20:01 -04:00
Adam Moussa
419293b8ed
feat(infra): retarget WO writers and ESMs to kebab tables (PLAT-11) (#174)
* feat(infra): retarget WO writers and ESMs to kebab Dynamo tables

Point Lambda env, IAM, emitter streams, and DDB alarms at work-orders /
work-order-comments for the PLAT-11 freeze cutover. Legacy PascalCase
tables remain in state until the decommission soak.

* style(infra): terraform fmt wo_ddb alarm map alignment
2026-08-07 14:07:57 -04:00
Adam Moussa
2e7cdc64e6
fix(infra): import PLAT-11 kebab WO Dynamo tables into HCP state (#173)
Tables were created in seahaven-prod after hcptf-procurement-ingest lacked
CreateTable on kebab ARNs; import blocks bring work-orders and
work-order-comments under Terraform ownership.
2026-08-07 13:49:27 -04:00
Adam Moussa
13efee9682
feat(infra): add kebab WO tables and PLAT-11 cutover tooling (PLAT-11) (#172)
* feat(infra): add kebab WO tables and PLAT-11 cutover tooling

Create empty work-orders/work-order-comments under Terraform while writers
stay on PascalCase; make emitter table classification env-driven and add
same-account migrate/verify plus cutover runbook.

* style(test): ruff-format shoc emitter envelope tests
2026-08-07 13:42:35 -04:00
Adam Moussa
5a3729c583
chore(infra): remove cdk tree after hcp cutover (PLAT-89) (#164)
* chore(infra): remove cdk tree after hcp cutover

Delete retired CDK sources, retarget bundle/principal contract tests to
Terraform packaging, disable CDK synth in CI, and scrub deploy-adjacent docs.

* fix(test): restore exact SHOC principal pin in terraform

Pin shoc_consumer_role_arn's Terraform default and example to the trusted
ARN, and require grant sites to consume local.shoc_consumer_role_arn only.
2026-08-07 12:20:29 -04:00
6ac10f125e
fix(infra): hash live API GW attrs for redeploy triggers 2026-08-06 20:13:06 -04:00
21e939e8e1
fix(infra): bind SES bucket policies to receipt rule ARNs 2026-08-06 19:58:19 -04:00
dd07bb973b
fix(infra): import SHOC secret policy; guard S3 cutover 2026-08-06 19:58:19 -04:00
0ba3600177
feat(infra): add HCP Terraform for procurement-ingest import-in-place 2026-08-06 17:07:40 -04:00