basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

chore(DEV-460): delete orphan apps/platform-prod #2

Merged
forgejoadmin merged 1 commit from chore/DEV-460-delete-platform-prod into main 2026-08-08 16:37:02 +00:00
Conversation 0 Commits 1 Files changed 4 -67
forgejoadmin commented 2026-08-08 16:36:19 +00:00
Owner
Copy link

Deletes the orphan apps/platform-prod/ (three sealed secrets) and the wrapping apps/app-platform-prod.yaml ArgoCD Application.

Why

  • Approved cleanup path per DEV-459.
  • The three sealed secrets are pre-consolidation-era leftovers from DEV-203. The values live in apps/paperclip/paperclip-secrets-sealed.yaml today; Paperclip reads them from the paperclip namespace.
  • paperclip.basicstack.de traffic already routes to paperclip/paperclip:3100 via pangolin/1-paperclip-service.
  • Pocket ID OIDC client stays registered (non-destructive, ready for when Paperclip PR #3040 ships).

Live cluster note (found during verification)

platform-prod currently has an orphan paperclip Deployment (2 replicas) that references the three sealed secrets. It is:

  • Not in this repo — untracked orphan applied manually.
  • Not routed traffic — traefik points at paperclip/paperclip.
  • Stateless — no PVCs, no volume mounts. Local backup writes are ephemeral.

Deleting the namespace afterwards removes this dead-weight deployment along with the ns.

Post-merge plan

  1. Argo prunes the SealedSecret CRs.
  2. kubectl delete namespace platform-prod (removes derived Secrets + orphan Deployment).
  3. Verify kubectl get ns platform-prod → NotFound; kubectl -n argocd get application platform-prod → NotFound.

DEV-460 tracks execution.

Deletes the orphan `apps/platform-prod/` (three sealed secrets) and the wrapping `apps/app-platform-prod.yaml` ArgoCD Application. ## Why - Approved cleanup path per [DEV-459](https://paperclip.home.imicros.de/DEV/issues/DEV-459). - The three sealed secrets are pre-consolidation-era leftovers from DEV-203. The values live in `apps/paperclip/paperclip-secrets-sealed.yaml` today; Paperclip reads them from the `paperclip` namespace. - `paperclip.basicstack.de` traffic already routes to `paperclip/paperclip:3100` via `pangolin/1-paperclip-service`. - Pocket ID OIDC client stays registered (non-destructive, ready for when Paperclip PR #3040 ships). ## Live cluster note (found during verification) `platform-prod` currently has an orphan `paperclip` Deployment (2 replicas) that references the three sealed secrets. It is: - **Not in this repo** — untracked orphan applied manually. - **Not routed traffic** — traefik points at `paperclip/paperclip`. - **Stateless** — no PVCs, no volume mounts. Local backup writes are ephemeral. Deleting the namespace afterwards removes this dead-weight deployment along with the ns. ## Post-merge plan 1. Argo prunes the SealedSecret CRs. 2. `kubectl delete namespace platform-prod` (removes derived Secrets + orphan Deployment). 3. Verify `kubectl get ns platform-prod` → NotFound; `kubectl -n argocd get application platform-prod` → NotFound. DEV-460 tracks execution.
forgejoadmin added 1 commit 2026-08-08 16:36:20 +00:00 
The three sealed secrets under apps/platform-prod/ and the
apps/app-platform-prod.yaml ArgoCD Application are the
pre-consolidation era from DEV-203. The values live in
apps/paperclip/paperclip-secrets-sealed.yaml today, and Paperclip
reads them from the paperclip namespace. Approved cleanup path
per DEV-459.

Pocket ID OIDC client stays registered; harmless if PR #3040
lands upstream.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
forgejoadmin merged commit ee56681f86 into main 2026-08-08 16:37:02 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: basicstack/stack.basicstack.de#2
No description provided.
Delete branch "chore/DEV-460-delete-platform-prod"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?