Feat/production refactor - #1

Open

daringanitch wants to merge 23 commits into

mainfrom

feat/production-refactor

Commits on May 17, 2026

Add production refactor design spec

daringanitch
and
claude
committed
6c5bc44
Add production refactor implementation plan

daringanitch
and
claude
committed
3f89b14

Commits on May 18, 2026

chore: add .gitignore with .worktrees/ and .DS_Store
daringanitch
committed
e3a6eb0
feat: add bootstrap module for S3 + DynamoDB remote state
daringanitch
committed
58383be
fix: bootstrap module — add S3 sub-resource ordering and DynamoDB prevent_destroy
daringanitch
committed
e9550db
feat: add providers.tf with version constraints and Helm/K8s config
daringanitch
committed
5edb77c
refactor: variables.tf is now single source of truth; add cluster_version, datadog, flux vars
daringanitch
committed
00a41ea
fix: correct EKS arg names (subnet_ids, desired_size); wire all child modules; remove duplicate vars
daringanitch
committed
a4b3695
refactor: cert_manager module — add variables.tf and outputs.tf
daringanitch
committed
89dc46c
refactor: istio module — add variables.tf and outputs.tf
daringanitch
committed
69d0e03
refactor: postgres module — add variables.tf and outputs.tf
daringanitch
committed
fa30f38
fix: vault module — replace broken kubernetes_manifest with native k8s resources; add variables.tf + outputs.tf
daringanitch
committed
44dc8ea
feat: flux module — wire GitRepository + Kustomization; add variables.tf + outputs.tf
daringanitch
committed
153aaae
feat: add Datadog module — APM, logs, cluster metrics, IRSA
daringanitch
committed
b089e64
chore: remove komodor module — replaced by Datadog
daringanitch
committed
d8ed063
feat: add bootstrap.sh — runs bootstrap/ and writes backend.tf automatically
daringanitch
committed
4acbe99
fix: rewrite one-shot-deploy.sh — correct paths, single root apply, idempotent bootstrap
daringanitch
committed
0b96c9a
feat: add GitHub Actions terraform-plan workflow (PR: fmt + validate + tfsec + plan comment)
daringanitch
committed
37a869d
feat: add GitHub Actions terraform-apply workflow (merge to main: plan + auto-apply)
daringanitch
committed
967b372
docs: add terraform.tfvars.example, update .gitignore and README with full onboarding guide
daringanitch
committed
89bd075
fix: use OIDC auth, -backend-config for state, and plan artifact in CI workflows

daringanitch
and
claude
committed
e8ab455
fix: parameterize postgres credentials, cert-manager email, and fix bootstrap idempotency

daringanitch
and
claude
committed
74f3158

Commits on May 20, 2026

fix(ci): switch AWS auth to access key secrets; guard PR comment against missing plan file
daringanitch
committed
2d351ac