These scripts turn the V2 repo into a repeatable demo-day deployment sequence after the EKS cluster exists.
scripts/platform/00-update-kubeconfig.shscripts/platform/10-install-aws-load-balancer-controller.shscripts/platform/30-install-external-secrets.shscripts/platform/40-install-kube-prometheus-stack.shscripts/platform/20-install-argocd.shscripts/platform/50-post-install-health-checks.sh
scripts/platform/90-bootstrap-demo-platform.sh runs the same sequence end to end.
Do not destroy the Terraform stack immediately after the cluster is still serving tenant Ingress objects.
The safe order is:
- delete ingress-driven resources first
- wait for the AWS Load Balancer Controller to delete its ALBs and target groups
- verify the VPC no longer has ALB-owned ENIs or security groups
- run
terraform destroy
The full teardown procedure is documented in ../../docs/runbook.md.
terraform applyfor the V2 cluster has already completed.- AWS credentials are active for the target account.
- The current repo state is the one you want ArgoCD to sync.
- The cluster is the cost-controlled demo profile: public worker nodes, no NAT, short-lived runtime.
awskubectlhelmterraformeksctlcurl
Optional overrides:
AWS_REGIONCLUSTER_NAMETERRAFORM_DIRALB_CONTROLLER_CHART_VERSIONARGOCD_CHART_VERSIONEXTERNAL_SECRETS_CHART_VERSIONKUBE_PROMETHEUS_STACK_CHART_VERSION
If unset, the scripts derive defaults from terraform/environments/dev/dev.tfvars and Terraform outputs.