adam/seahaven-org-baseline
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git synced 2026-10-03 23:33:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

chore(backup): drop retired file-share volumes from phase 2 (PLAT-77)

Browse source 
The 20 GiB volume is already gone and the 500 GiB volume is only a rollback hold, so the backup selection should not include either one.
This commit is contained in:
Adam Moussa 2026-09-29 19:28:26 -04:00
parent 7e706aef2f
commit b91da96690
No known key found for this signature in database
1 changed files with 8 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
lib/backup-stack.ts
View file

@ -253,13 +253,14 @@ export class BackupStack extends cdk.Stack {
// the locked offsite vault ("offsite for everything"). Same role and rule
// as phase-1; a separate selection keeps the phase-1 critical set readable.
//
// Still EXPLICIT-ARN (not tag-based) on purpose: the file-share volumes are
// standalone CDK-managed (RETAIN) and the DynamoDB tables are owned by other
// stacks, so tagging them here would drift those stacks — the same reason
// phase-1 avoided tags. Tradeoff: if a volume is replaced (new vol-id) it
// silently drops from this selection; scheduled drift detection + the audit
// re-run are the backstop. Identifiers verified against the live account
// 2026-06-03.
// Still EXPLICIT-ARN (not tag-based) on purpose: the DynamoDB tables are
// owned by other stacks, so tagging them here would drift those stacks.
// File-share left this account on 2026-09-29 (PLAT-77). Both of its volume
// ARNs are out of this selection so a later delete of the retained volume
// does not fail the backup job. Tradeoff: if a volume is replaced (new
// vol-id) it silently drops from this selection; scheduled drift detection
// and the audit re-run are the backstop. Identifiers verified against the
// live account 2026-06-03.
//
// Excluded by intent: the ledgerflow tables — the whole LedgerFlow stack
// was decommissioned 2026-06-03 (audit Day 4), so they no longer exist.
@ -290,9 +291,7 @@ export class BackupStack extends cdk.Stack {
// the vault CMK, as the C-7 database-1 smoke-test confirmed)
...[
"vol-05cb0eb5c145d799b", // SeaHavenIndustries-dev
"vol-054cf918f227d88f6", // file-share (20 GiB)
"vol-00f05a5a809697ce5", // forgejo
"vol-04d951cccacc435b5", // file-share NAS (500 GiB)
"vol-07094902194638fff", // syslog-server
"vol-0c2cbe9e71517a517", // Mutual Aid Data
"vol-0fe224f13812f47e7", // jump box