From 198c44b8abe88b487b0e39f79d5cf50b7dbc1ecb Mon Sep 17 00:00:00 2001
From: Arik Kfir <arik@kfirs.com>
Date: Tue, 5 Sep 2023 17:02:11 +0300
Subject: [PATCH] feat: switch to Telepresence based developer story (#37)

This change changes the codebase to be Telepresence-friendly by:
- creating IntelliJ IDEA modules and run configurations
- moving the deployment manifests to the arikkfir/delivery repository
- removing Skaffold usage (replaced by Telepresence)
---
 README.md                              | 135 ++++-----------------
 deploy/base/app/backend.yaml           | 114 ------------------
 deploy/base/app/frontend.yaml          |  97 ---------------
 deploy/base/app/kustomization.yaml     |  10 --
 deploy/base/app/kustomizeconfig.yaml   |  29 -----
 deploy/base/app/migrations.yaml        |  41 -------
 deploy/base/kustomization.yaml         |   9 --
 deploy/base/neo4j/deployment.yaml      | 137 ---------------------
 deploy/base/neo4j/kustomization.yaml   |  11 --
 deploy/base/neo4j/kustomizeconfig.yaml |  29 -----
 deploy/base/neo4j/persistence.yaml     |  25 ----
 deploy/base/neo4j/rbac.yaml            |   4 -
 deploy/base/neo4j/service.yaml         |  49 --------
 deploy/base/redis/deployment.yaml      |  73 -----------
 deploy/base/redis/kustomization.yaml   |  11 --
 deploy/base/redis/kustomizeconfig.yaml |  29 -----
 deploy/base/redis/persistence.yaml     |  12 --
 deploy/base/redis/rbac.yaml            |   4 -
 deploy/base/redis/service.yaml         |  28 -----
 deploy/cluster/certificate.yaml        |  47 --------
 deploy/cluster/dnsrecord.yaml          |  14 ---
 deploy/cluster/gcp-iam.yaml            |  74 ------------
 deploy/cluster/kustomization.yaml      | 129 --------------------
 deploy/cluster/secrets.yaml            |  31 -----
 deploy/etc/kind-cluster-config.yaml    |  18 ---
 deploy/etc/skaffold-traefik.yaml       |  17 ---
 deploy/etc/traefik-values.yaml         |  77 ------------
 deploy/local/backend-config.env        |   3 -
 deploy/local/frontend-config.env       |   0
 deploy/local/kustomization.yaml        | 160 -------------------------
 skaffold.yaml                          |  61 ----------
 31 files changed, 26 insertions(+), 1452 deletions(-)
 delete mode 100644 deploy/base/app/backend.yaml
 delete mode 100644 deploy/base/app/frontend.yaml
 delete mode 100644 deploy/base/app/kustomization.yaml
 delete mode 100644 deploy/base/app/kustomizeconfig.yaml
 delete mode 100644 deploy/base/app/migrations.yaml
 delete mode 100644 deploy/base/kustomization.yaml
 delete mode 100644 deploy/base/neo4j/deployment.yaml
 delete mode 100644 deploy/base/neo4j/kustomization.yaml
 delete mode 100644 deploy/base/neo4j/kustomizeconfig.yaml
 delete mode 100644 deploy/base/neo4j/persistence.yaml
 delete mode 100644 deploy/base/neo4j/rbac.yaml
 delete mode 100644 deploy/base/neo4j/service.yaml
 delete mode 100644 deploy/base/redis/deployment.yaml
 delete mode 100644 deploy/base/redis/kustomization.yaml
 delete mode 100644 deploy/base/redis/kustomizeconfig.yaml
 delete mode 100644 deploy/base/redis/persistence.yaml
 delete mode 100644 deploy/base/redis/rbac.yaml
 delete mode 100644 deploy/base/redis/service.yaml
 delete mode 100644 deploy/cluster/certificate.yaml
 delete mode 100644 deploy/cluster/dnsrecord.yaml
 delete mode 100644 deploy/cluster/gcp-iam.yaml
 delete mode 100644 deploy/cluster/kustomization.yaml
 delete mode 100644 deploy/cluster/secrets.yaml
 delete mode 100644 deploy/etc/kind-cluster-config.yaml
 delete mode 100644 deploy/etc/skaffold-traefik.yaml
 delete mode 100644 deploy/etc/traefik-values.yaml
 delete mode 100644 deploy/local/backend-config.env
 delete mode 100644 deploy/local/frontend-config.env
 delete mode 100644 deploy/local/kustomization.yaml
 delete mode 100644 skaffold.yaml

diff --git a/README.md b/README.md
index 8168a441..05292998 100644
--- a/README.md
+++ b/README.md
@@ -2,135 +2,52 @@
 
 GreenSTAR is an accounting application built for the new generation.
 
-- https://app.admin.greenstar.kfirs.com
-- https://app.greenstar.kfirs.com
-- https://app.operations.greenstar.kfirs.com
-
-(the above do not work yet)
-
 ## Local development environment
 
 ### Prerequisite tools
 
 ```shell
-$ brew install jq yq                                # JSON and YAML manipulation
-$ brew install go node                              # Programming languages 
-$ brew install kubernetes-cli kustomize helm kind   # Kubernetes tools
-$ brew install skaffold                             # Kubernetes development tool
-$ brew install dnsmasq mkcert                       # For local TLS domains
+$ brew install jq yq          # Just useful tools for JSON and YAML manipulation
+$ brew install go node        # Programming languages
+$ brew install kubernetes-cli # Kubernetes CLI
 ```
 
-### Local testing domains
-
-Given that the application has multiple components, and each needs to be addressable separately via a separate domain,
-we need to use the same convention even when running locally.
-
-To do that, we will utilize `dnsmasq` to resolve the `greenstar.test` domain to localhost. To do that, perform the
-following actions (once):
+### Telepresence setup
 
-```shell
-$ cat >> /opt/homebrew/etc/dnsmasq.conf <<EOF
-address=/.greenstar.test/127.0.0.1
-server=8.8.8.8
-server=8.8.4.4
-EOF
-$ sudo brew services restart dnsmasq
-$ dig @127.0.0.1 foobar.greenstar.test # sanity test
-$ sudo mkdir /etc/resolver
-$ cat <<EOF | sudo tee /etc/resolver/greenstar
-domain greenstar.test
-search greenstar.test
-nameserver 127.0.0.1
-EOF
-$ sudo killall -HUP mDNSResponder
-$ scutil --dns # sanity test; verify resolver for "greenstar.test" appears and working
-
-... replace DNS server with 127.0.0.1 in macOS network manager...
-
-$ dig foobar.greenstar.test # sanity test (notice it's not the same sanity as above)
-```
+Install Telepresence by following [this guide](https://www.getambassador.io/docs/telepresence-oss/latest/install).
 
-See [this blog post](https://mjpitz.com/blog/2020/10/21/local-ingress-domains-kind/) for more information.
+It's also possible you'll need to [apply these changes](https://www.getambassador.io/docs/telepresence-oss/latest/troubleshooting#volume-mounts-are-not-working-on-macos)
+if you need to have volume mounts working on macOS.
 
-### Local TLS
-
-It is not sufficient to just resolve the `*.greenstar.test` domain to localhost, we also need it to work with TLS, since
-we are utilizing Auth0 which uses cryptographic APIs, which require secure hosts. To do that, follow the following
-actions:
+You'll also need to connect to the cluster once with a durable connection, like so:
 
 ```shell
-$ mkcert -install
-$ cd deploy/local
-$ mkcert '*.greenstar.test'
-```
-
-See [this blog post](https://web.dev/how-to-use-local-https/) for more information.
-
-### Setup cluster
-
-Replace the relevant values with something representing you, e.g. your local username, or something similar. The app
-(when in dev mode) will create a few transient resources (e.g. Cloud Pub/Sub topics, subscriptions, etc) in the GCP
-project associated with this ID, to differentiate it from similar resources used by other developers. Make sure you
-don't use something secret - a name or nickname is perfectly fine here.
-
-```shell
-$ kind create cluster --name=greenstar --config=deploy/etc/kind-cluster-config.yaml
-```
-
-### Personal secrets & values
-
-Some values needed during local development are not shared, and are personally related to the development team. To make
-those available while running, perform the following (assuming you have access to the secrets, or use your own):
-
-```shell
-$ touch frontend/apply-patches.sh
-$ cat > deploy/local/backend-secrets.env <<EOF
-AUTH_DESCOPE_PROJECT_ID=descope_project_id
-AUTH_DESCOPE_MANAGEMENT_KEY=descope_management_key
-DEV_MODE_ID=your_own_made_up_id
-EOF
-$ cat > deploy/local/frontend-secrets.env <<EOF
-EOF
+$ telepresence connect
 ```
 
 ### Running
 
-#### Traefik
-
-Greenstar is relying on Traefik as an ingress controller, and thus needs it to be deployed in the cluster. Since there's
-no need to redeploy it on every change, you can deploy it once to your local cluster and forget about it, like so:
-
-```shell
-$ skaffold run -f deploy/etc/skaffold-traefik.yaml
-```
+The developer story for GreenSTAR is architected on the following principals:
 
-This will install Traefik to the `default` namespace of the `kind` cluster you just set up. It will start responding to
-requests to `*.greenstar.test` though it will not have any backends to route to (see below).
+1. Every change is done in a feature or bugfix branch
+2. This branch is pushed to GitHub and a pull request is created for it (PR creation has been automated)
+3. PR creation triggers a dedicated environment to be created for the PR
+    1. This environment is deployed to a dedicated namespace in the cluster
+    2. The environment is accessible via a dedicated URL
+4. Telepresence is then used to run the backend or frontend locally yet replacing their counterpart in the remote
+   namespace. For instance, the backend can be run locally, but traffic arriving to the dedicated environment's backend
+   will reach the locally-running process of the backend (thanks to Telepresence).
+5. Once the PR is merged, the dedicated environment is deleted
 
-#### Application
+The IntelliJ IDEA project is stored in the repository (the parts that should be shared across engineers) and it contains
+run configurations for the backend and frontend. These run configurations are configured to run the application locally.
 
-To run the application in a dev-loop mode, so that changes you make will get redeployed to the local cluster, simply
-run this:
+However, you need to first start a Telepresence intercept, like so:
 
 ```shell
-$ skaffold dev
-```
-
-This will build all container images, deploy them to the `default` namespace of the `kind` cluster you just set up, and
-then make the following URLs available:
-
-- https://api.greenstar.test - application backend (tenant agnostic)
-- https://neo4j.greenstar.test - neo4j console
-- https://global.greenstar.test - administration frontend (no tenant)
-- [https://*.greenstar.test](https://*.greenstar.test) - tenant frontend (replace `*` with the tenant ID)
-
-#### Application & Traefik together
+# If you want to intercept the backend locally:
+$ telepresence intercept --namespace=MY-ENV greenstar-frontend --port 8080:http --env-file ./frontend/intercept.env
 
-You can also deploy both Traefik and the application in one dev-loop command, so that they are both redeployed on
-changes you make, like so:
-
-```shell
-$ skaffold dev -p traefik
+# If you want to intercept the frontend locally:
+$ telepresence intercept --namespace=MY-ENV greenstar-backend --port 8000:http --env-file ./backend/intercept.env
 ```
-
-This activates the `traefik` Skaffold profile, which simply includes the Traefik skaffold module as a dependency.
diff --git a/deploy/base/app/backend.yaml b/deploy/base/app/backend.yaml
deleted file mode 100644
index f79d3901..00000000
--- a/deploy/base/app/backend.yaml
+++ /dev/null
@@ -1,114 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  annotations:
-    iam.gke.io/gcp-service-account: greenstar-backend@arikkfir.iam.gserviceaccount.com
-  labels:
-    app.kubernetes.io/component: backend
-  name: backend
----
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/component: backend
-  name: backend
-spec:
-  ports:
-    - name: http
-      port: 80
-      protocol: TCP
-      targetPort: http
-  selector:
-    app.kubernetes.io/component: backend
-  type: ClusterIP
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: backend-tls
-spec:
-  entryPoints: [ websecure ]
-  routes:
-    - kind: Rule
-      match: Host(`api.greenstar.test`)
-      priority: 100
-      services:
-        - name: backend
-          port: http
-          kind: Service
-  tls:
-    secretName: greenstar-api-tls
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  labels:
-    app.kubernetes.io/component: backend
-  name: backend
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/component: backend
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/component: backend
-    spec:
-      containers:
-        - image: ghcr.io/arikkfir/greenstar/backend
-          args:
-            - --http.access-log-excluded-headers=sec\-.*
-            - --http.access-log-excluded-headers=vary
-            - --http.access-log-excluded-headers=x-request-id
-          name: backend
-          env:
-            - name: POD_NAMESPACE
-              valueFrom:
-                fieldRef:
-                  fieldPath: metadata.namespace
-            - name: NEO4J_HOST
-              value: greenstar-neo4j.$(POD_NAMESPACE)
-            - name: NEO4J_PORT
-              value: "7687"
-            - name: REDIS_HOST
-              value: greenstar-redis.$(POD_NAMESPACE)
-            - name: REDIS_PORT
-              value: "6379"
-          livenessProbe:
-            httpGet:
-              port: health
-              path: /healthz
-            failureThreshold: 3
-            periodSeconds: 5
-            terminationGracePeriodSeconds: 30
-            timeoutSeconds: 3
-          ports:
-            - containerPort: 8000
-              name: http
-            - containerPort: 9000
-              name: health
-          readinessProbe:
-            httpGet:
-              port: health
-              path: /healthz
-            failureThreshold: 3
-            periodSeconds: 1
-            timeoutSeconds: 1
-          resources:
-            limits:
-              cpu: 100m
-              memory: 64Mi
-            requests:
-              cpu: 100m
-              memory: 64Mi
-          startupProbe:
-            httpGet:
-              port: health
-              path: /healthz
-            failureThreshold: 5
-            periodSeconds: 1
-            timeoutSeconds: 1
-      enableServiceLinks: false
-      serviceAccountName: backend
-      volumes: [ ]
diff --git a/deploy/base/app/frontend.yaml b/deploy/base/app/frontend.yaml
deleted file mode 100644
index 3e25890a..00000000
--- a/deploy/base/app/frontend.yaml
+++ /dev/null
@@ -1,97 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  annotations:
-    iam.gke.io/gcp-service-account: greenstar-frontend@arikkfir.iam.gserviceaccount.com
-  labels:
-    app.kubernetes.io/component: frontend
-  name: frontend
----
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/component: frontend
-  name: frontend
-spec:
-  ports:
-    - name: http
-      port: 80
-      protocol: TCP
-      targetPort: http
-  selector:
-    app.kubernetes.io/component: frontend
-  type: ClusterIP
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: frontend-tls
-spec:
-  entryPoints: [ websecure ]
-  routes:
-    - kind: Rule
-      match: HostRegexp(`{tenant:[a-zA-Z][a-zA-Z0-9_-]*}.greenstar.test`)
-      services:
-        - name: frontend
-          port: http
-          kind: Service
-  tls:
-    secretName: greenstar-wildcard-tls
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  labels:
-    app.kubernetes.io/component: frontend
-  name: frontend
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/component: frontend
-  strategy:
-    type: RollingUpdate
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/component: frontend
-    spec:
-      containers:
-        - image: ghcr.io/arikkfir/greenstar/frontend
-          name: frontend
-          env: [ ]
-          livenessProbe:
-            httpGet:
-              port: http
-              path: /
-            failureThreshold: 3
-            periodSeconds: 30
-            terminationGracePeriodSeconds: 30
-            timeoutSeconds: 5
-          ports:
-            - containerPort: 80
-              name: http
-          readinessProbe:
-            httpGet:
-              port: http
-              path: /
-            failureThreshold: 3
-            periodSeconds: 1
-            timeoutSeconds: 1
-          resources:
-            limits:
-              cpu: 200m
-              memory: 64Gi
-            requests:
-              cpu: 200m
-              memory: 32Mi
-          startupProbe:
-            httpGet:
-              port: http
-              path: /
-            failureThreshold: 3
-            initialDelaySeconds: 5
-            periodSeconds: 1
-            timeoutSeconds: 1
-      enableServiceLinks: false
-      serviceAccountName: frontend
diff --git a/deploy/base/app/kustomization.yaml b/deploy/base/app/kustomization.yaml
deleted file mode 100644
index 93fa0efd..00000000
--- a/deploy/base/app/kustomization.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-commonLabels:
-  app.kubernetes.io/name: app
-resources:
-  - backend.yaml
-  - frontend.yaml
-  - migrations.yaml
-configurations:
-  - kustomizeconfig.yaml
diff --git a/deploy/base/app/kustomizeconfig.yaml b/deploy/base/app/kustomizeconfig.yaml
deleted file mode 100644
index 65f61c6b..00000000
--- a/deploy/base/app/kustomizeconfig.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-nameReference:
-  - kind: Secret
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRoute
-        path: spec/tls/secretName
-  - kind: Secret
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRouteTCP
-        path: spec/tls/secretName
-  - kind: Service
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRoute
-        path: spec/routes/services/name
-  - kind: Service
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRouteTCP
-        path: spec/routes/services/name
diff --git a/deploy/base/app/migrations.yaml b/deploy/base/app/migrations.yaml
deleted file mode 100644
index 7e8dde1b..00000000
--- a/deploy/base/app/migrations.yaml
+++ /dev/null
@@ -1,41 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  labels:
-    app.kubernetes.io/component: migrations
-  name: migrations
----
-apiVersion: batch/v1
-kind: Job
-metadata:
-  annotations:
-    kustomize.toolkit.fluxcd.io/force: Enabled
-  labels:
-    app.kubernetes.io/component: migrations
-  name: migrations
-spec:
-  backoffLimit: 10
-  activeDeadlineSeconds: 600
-  completions: 1
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/component: migrations
-    spec:
-      containers:
-        - image: ghcr.io/arikkfir/greenstar/migrations
-          env:
-            - name: NEO4J_ADDRESS
-              value: "neo4j://greenstar-neo4j"
-          name: migrations
-          resources:
-            limits:
-              cpu: "1"
-              memory: 512Mi
-            requests:
-              cpu: 500m
-              memory: 256Mi
-      enableServiceLinks: false
-      restartPolicy: OnFailure
-      serviceAccountName: migrations
-  ttlSecondsAfterFinished: 1200
diff --git a/deploy/base/kustomization.yaml b/deploy/base/kustomization.yaml
deleted file mode 100644
index f80ee988..00000000
--- a/deploy/base/kustomization.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-commonLabels:
-  app.kubernetes.io/part-of: greenstar
-namePrefix: greenstar-
-resources:
-  - redis
-  - neo4j
-  - app
diff --git a/deploy/base/neo4j/deployment.yaml b/deploy/base/neo4j/deployment.yaml
deleted file mode 100644
index 888e86e6..00000000
--- a/deploy/base/neo4j/deployment.yaml
+++ /dev/null
@@ -1,137 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: neo4j
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: neo4j
-  replicas: 1
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: neo4j
-    spec:
-      containers:
-        - image: ghcr.io/arikkfir/greenstar/neo4j
-          name: neo4j
-          env:
-            - name: NEO4J_ACCEPT_LICENSE_AGREEMENT
-              value: "yes"
-            - name: NEO4J_db_import_csv_legacy__quote__escaping
-              value: "true"
-            - name: NEO4J_db_lock_acquisition_timeout
-              value: 10s
-            - name: NEO4J_db_logs_query_enabled
-              value: "INFO"
-            - name: NEO4J_db_logs_query_plan__description__enabled
-              value: "true"
-            - name: NEO4J_db_logs_query_threshold
-              value: "3s"
-            - name: NEO4J_db_logs_query_transaction_enabled
-              value: "INFO"
-            - name: NEO4J_db_logs_query_transaction_threshold
-              value: "5s"
-            - name: NEO4J_db_track__query__cpu__time
-              value: "true"
-            - name: NEO4J_db_transaction_timeout
-              value: "60s"
-            - name: NEO4J_db_transaction_tracing_level
-              value: "ALL"
-            - name: NEO4J_dbms_cypher_render__plan__description
-              value: "true"
-            - name: NEO4J_dbms_security_auth__enabled
-              value: "false"
-            - name: NEO4J_dbms_security_allow__csv__import__from__file__urls
-              value: "true"
-            - name: NEO4J_server_backup_enabled
-              value: "false"
-            - name: NEO4J_server_logs_debug_enabled
-              value: "false"
-            - name: NEO4J_server_logs_gc_enabled
-              value: "false"
-            - name: NEO4J_server_memory_heap_initial__size
-              value: 512MiB
-            - name: NEO4J_server_memory_heap_max__size
-              value: 512MiB
-            - name: NEO4J_server_memory_off__heap_block__cache__size
-              value: "128"
-            - name: NEO4J_server_memory_off__heap_max__cacheable__block__size
-              value: "512KiB"
-            - name: NEO4J_server_memory_pagecache_size
-              value: 128MiB
-            - name: NEO4J_server_metrics_csv_enabled
-              value: "false"
-            - name: NEO4J_server_metrics_jmx_enabled
-              value: "false"
-            - name: NEO4J_server_metrics_prometheus_enabled
-              value: "true"
-            - name: NEO4J_server_panic_shutdown__on__panic
-              value: "true"
-          livenessProbe:
-            exec:
-              command:
-                - /var/lib/neo4j/bin/cypher-shell
-                - --non-interactive
-                - SHOW DATABASES
-            successThreshold: 1
-            failureThreshold: 3
-            periodSeconds: 60
-            terminationGracePeriodSeconds: 60
-            timeoutSeconds: 30
-          ports:
-            - containerPort: 2004
-              name: metrics
-            - containerPort: 7687
-              name: client-nontls
-            - containerPort: 7474
-              name: http
-          readinessProbe:
-            exec:
-              command:
-                - /var/lib/neo4j/bin/cypher-shell
-                - --non-interactive
-                - SHOW DATABASES
-            successThreshold: 1
-            failureThreshold: 1
-            periodSeconds: 5
-            timeoutSeconds: 25
-          resources:
-            limits:
-              cpu: "2"
-              memory: 2Gi
-            requests:
-              cpu: "1"
-              memory: 1Gi
-          startupProbe:
-            exec:
-              command:
-                - /var/lib/neo4j/bin/cypher-shell
-                - --non-interactive
-                - SHOW DATABASES
-            failureThreshold: 3
-            initialDelaySeconds: 30
-            periodSeconds: 5
-            successThreshold: 1
-            terminationGracePeriodSeconds: 300
-            timeoutSeconds: 60
-          volumeMounts:
-            - mountPath: /data
-              name: data
-              readOnly: false
-            - mountPath: /logs
-              name: logs
-              readOnly: false
-      enableServiceLinks: false
-      serviceAccountName: neo4j
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: neo4j-data
-            readOnly: false
-        - name: logs
-          persistentVolumeClaim:
-            claimName: neo4j-logs
-            readOnly: false
diff --git a/deploy/base/neo4j/kustomization.yaml b/deploy/base/neo4j/kustomization.yaml
deleted file mode 100644
index 51258549..00000000
--- a/deploy/base/neo4j/kustomization.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-commonLabels:
-  app.kubernetes.io/name: neo4j
-resources:
-  - rbac.yaml
-  - persistence.yaml
-  - service.yaml
-  - deployment.yaml
-configurations:
-  - kustomizeconfig.yaml
diff --git a/deploy/base/neo4j/kustomizeconfig.yaml b/deploy/base/neo4j/kustomizeconfig.yaml
deleted file mode 100644
index 65f61c6b..00000000
--- a/deploy/base/neo4j/kustomizeconfig.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-nameReference:
-  - kind: Secret
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRoute
-        path: spec/tls/secretName
-  - kind: Secret
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRouteTCP
-        path: spec/tls/secretName
-  - kind: Service
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRoute
-        path: spec/routes/services/name
-  - kind: Service
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRouteTCP
-        path: spec/routes/services/name
diff --git a/deploy/base/neo4j/persistence.yaml b/deploy/base/neo4j/persistence.yaml
deleted file mode 100644
index bdfb6107..00000000
--- a/deploy/base/neo4j/persistence.yaml
+++ /dev/null
@@ -1,25 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: neo4j-data
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-    limits:
-      storage: 1Gi
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: neo4j-logs
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-    limits:
-      storage: 1Gi
diff --git a/deploy/base/neo4j/rbac.yaml b/deploy/base/neo4j/rbac.yaml
deleted file mode 100644
index aac1834e..00000000
--- a/deploy/base/neo4j/rbac.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: neo4j
diff --git a/deploy/base/neo4j/service.yaml b/deploy/base/neo4j/service.yaml
deleted file mode 100644
index 767232c0..00000000
--- a/deploy/base/neo4j/service.yaml
+++ /dev/null
@@ -1,49 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: neo4j
-spec:
-  ports:
-    - name: client-nontls
-      port: 7687
-      protocol: TCP
-      targetPort: client-nontls
-    - name: http
-      port: 7474
-      protocol: TCP
-      targetPort: http
-  selector:
-    app.kubernetes.io/name: neo4j
-  type: ClusterIP
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: neo4j-tls
-spec:
-  entryPoints: [ websecure ]
-  routes:
-    - kind: Rule
-      priority: 100
-      match: Host(`neo4j.greenstar.test`)
-      services:
-        - name: neo4j
-          port: http
-          kind: Service
-  tls:
-    secretName: greenstar-neo4j-tls
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRouteTCP
-metadata:
-  name: neo4j-tls-tcp
-spec:
-  entryPoints: [ bolt ]
-  routes:
-    - match: HostSNI(`neo4j.greenstar.test`)
-      priority: 999
-      services:
-        - name: neo4j
-          port: client-nontls
-  tls:
-    secretName: greenstar-neo4j-tls
diff --git a/deploy/base/redis/deployment.yaml b/deploy/base/redis/deployment.yaml
deleted file mode 100644
index dc75b087..00000000
--- a/deploy/base/redis/deployment.yaml
+++ /dev/null
@@ -1,73 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: redis
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: redis
-  replicas: 1
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: redis
-    spec:
-      containers:
-        - image: redis/redis-stack-server:7.2.0-v0
-          name: redis
-          env: []
-          ports:
-            - containerPort: 6379
-              name: client-nontls
-          livenessProbe:
-            exec:
-              command:
-                - bash
-                - -c
-                - '[[ "$(redis-cli PING)" == "PONG" ]]'
-            successThreshold: 1
-            failureThreshold: 3
-            periodSeconds: 10
-            terminationGracePeriodSeconds: 60
-            timeoutSeconds: 5
-          readinessProbe:
-            exec:
-              command:
-                - bash
-                - -c
-                - '[[ "$(redis-cli PING)" == "PONG" ]]'
-            successThreshold: 1
-            failureThreshold: 3
-            periodSeconds: 1
-            timeoutSeconds: 1
-          resources:
-            limits:
-              cpu: 500m
-              memory: 64Mi
-            requests:
-              cpu: 500m
-              memory: 64Mi
-          startupProbe:
-            exec:
-              command:
-                - bash
-                - -c
-                - '[[ "$(redis-cli PING)" == "PONG" ]]'
-            failureThreshold: 5
-            initialDelaySeconds: 2
-            periodSeconds: 1
-            terminationGracePeriodSeconds: 60
-            timeoutSeconds: 5
-          volumeMounts:
-            - mountPath: /data
-              name: data
-              readOnly: false
-      enableServiceLinks: false
-      serviceAccountName: redis
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: redis
-            readOnly: false
diff --git a/deploy/base/redis/kustomization.yaml b/deploy/base/redis/kustomization.yaml
deleted file mode 100644
index 755c2891..00000000
--- a/deploy/base/redis/kustomization.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-commonLabels:
-  app.kubernetes.io/name: redis
-resources:
-  - rbac.yaml
-  - persistence.yaml
-  - service.yaml
-  - deployment.yaml
-configurations:
-  - kustomizeconfig.yaml
diff --git a/deploy/base/redis/kustomizeconfig.yaml b/deploy/base/redis/kustomizeconfig.yaml
deleted file mode 100644
index 65f61c6b..00000000
--- a/deploy/base/redis/kustomizeconfig.yaml
+++ /dev/null
@@ -1,29 +0,0 @@
-nameReference:
-  - kind: Secret
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRoute
-        path: spec/tls/secretName
-  - kind: Secret
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRouteTCP
-        path: spec/tls/secretName
-  - kind: Service
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRoute
-        path: spec/routes/services/name
-  - kind: Service
-    version: v1
-    fieldSpecs:
-      - group: traefik.io
-        version: v1alpha1
-        kind: IngressRouteTCP
-        path: spec/routes/services/name
diff --git a/deploy/base/redis/persistence.yaml b/deploy/base/redis/persistence.yaml
deleted file mode 100644
index 3c3becb1..00000000
--- a/deploy/base/redis/persistence.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: redis
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
-    limits:
-      storage: 1Gi
diff --git a/deploy/base/redis/rbac.yaml b/deploy/base/redis/rbac.yaml
deleted file mode 100644
index 458747b6..00000000
--- a/deploy/base/redis/rbac.yaml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: redis
diff --git a/deploy/base/redis/service.yaml b/deploy/base/redis/service.yaml
deleted file mode 100644
index 402533cf..00000000
--- a/deploy/base/redis/service.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: redis
-spec:
-  ports:
-    - name: client-nontls
-      port: 6379
-      protocol: TCP
-      targetPort: client-nontls
-  selector:
-    app.kubernetes.io/name: redis
-  type: ClusterIP
----
-apiVersion: traefik.io/v1alpha1
-kind: IngressRouteTCP
-metadata:
-  name: redis-tls-tcp
-spec:
-  entryPoints: [ redis ]
-  routes:
-    - match: HostSNI(`redis.greenstar.test`)
-      priority: 100
-      services:
-        - name: redis
-          port: client-nontls
-  tls:
-    secretName: greenstar-redis-tls
diff --git a/deploy/cluster/certificate.yaml b/deploy/cluster/certificate.yaml
deleted file mode 100644
index 6d785337..00000000
--- a/deploy/cluster/certificate.yaml
+++ /dev/null
@@ -1,47 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: greenstar-redis
-spec:
-  secretName: greenstar-redis-tls
-  issuerRef:
-    kind: ClusterIssuer
-    name: google-clouddns
-  dnsNames:
-    - redis.${flux_environment}.greenstar.kfirs.com
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: greenstar-neo4j
-spec:
-  secretName: greenstar-neo4j-tls
-  issuerRef:
-    kind: ClusterIssuer
-    name: google-clouddns
-  dnsNames:
-    - neo4j.${flux_environment}.greenstar.kfirs.com
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: greenstar-api
-spec:
-  secretName: greenstar-api-tls
-  issuerRef:
-    kind: ClusterIssuer
-    name: google-clouddns
-  dnsNames:
-    - api.${flux_environment}.greenstar.kfirs.com
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: greenstar-wildcard
-spec:
-  secretName: greenstar-wildcard-tls
-  issuerRef:
-    kind: ClusterIssuer
-    name: google-clouddns
-  dnsNames:
-    - "*.${flux_environment}.greenstar.kfirs.com"
diff --git a/deploy/cluster/dnsrecord.yaml b/deploy/cluster/dnsrecord.yaml
deleted file mode 100644
index 077e142b..00000000
--- a/deploy/cluster/dnsrecord.yaml
+++ /dev/null
@@ -1,14 +0,0 @@
-apiVersion: dns.cnrm.cloud.google.com/v1beta1
-kind: DNSRecordSet
-metadata:
-  name: greenstar-wildcard-cname-record
-spec:
-  name: "*.${flux_environment}.greenstar.kfirs.com."
-  type: CNAME
-  ttl: 300
-  managedZoneRef:
-    name: kfirs-com
-    namespace: dns
-  # noinspection KubernetesDeprecatedKeys
-  rrdatas:
-    - traefik.kfirs.com.
diff --git a/deploy/cluster/gcp-iam.yaml b/deploy/cluster/gcp-iam.yaml
deleted file mode 100644
index dd112512..00000000
--- a/deploy/cluster/gcp-iam.yaml
+++ /dev/null
@@ -1,74 +0,0 @@
-apiVersion: iam.cnrm.cloud.google.com/v1beta1
-kind: IAMServiceAccount
-metadata:
-  name: greenstar-backend
-spec:
-  displayName: GreenSTAR Backend
----
-apiVersion: iam.cnrm.cloud.google.com/v1beta1
-kind: IAMPolicyMember
-metadata:
-  name: greenstar-backend-ksa-link
-spec:
-  member: serviceAccount:arikkfir.svc.id.goog[${flux_environment}/greenstar-backend]
-  role: roles/iam.workloadIdentityUser
-  resourceRef:
-    apiVersion: iam.cnrm.cloud.google.com/v1beta1
-    kind: IAMServiceAccount
-    name: greenstar-backend
----
-apiVersion: iam.cnrm.cloud.google.com/v1beta1
-kind: IAMPolicyMember
-metadata:
-  name: greenstar-backend-descope-project-secret-viewer
-spec:
-  memberFrom:
-    serviceAccountRef:
-      name: greenstar-backend
-  role: roles/secretmanager.viewer
-  resourceRef:
-    apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
-    kind: SecretManagerSecret
-    external: projects/8909046976/secrets/greenstar-descope-project-id
----
-apiVersion: iam.cnrm.cloud.google.com/v1beta1
-kind: IAMPolicyMember
-metadata:
-  name: greenstar-backend-descope-project-secret-accessor
-spec:
-  memberFrom:
-    serviceAccountRef:
-      name: greenstar-backend
-  role: roles/secretmanager.secretAccessor
-  resourceRef:
-    apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
-    kind: SecretManagerSecret
-    external: projects/8909046976/secrets/greenstar-descope-project-id
----
-apiVersion: iam.cnrm.cloud.google.com/v1beta1
-kind: IAMPolicyMember
-metadata:
-  name: greenstar-backend-descope-key-secret-viewer
-spec:
-  memberFrom:
-    serviceAccountRef:
-      name: greenstar-backend
-  role: roles/secretmanager.viewer
-  resourceRef:
-    apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
-    kind: SecretManagerSecret
-    external: projects/8909046976/secrets/greenstar-descope-management-key
----
-apiVersion: iam.cnrm.cloud.google.com/v1beta1
-kind: IAMPolicyMember
-metadata:
-  name: greenstar-backend-descope-key-secret-accessor
-spec:
-  memberFrom:
-    serviceAccountRef:
-      name: greenstar-backend
-  role: roles/secretmanager.secretAccessor
-  resourceRef:
-    apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
-    kind: SecretManagerSecret
-    external: projects/8909046976/secrets/greenstar-descope-management-key
diff --git a/deploy/cluster/kustomization.yaml b/deploy/cluster/kustomization.yaml
deleted file mode 100644
index d2cf4fa5..00000000
--- a/deploy/cluster/kustomization.yaml
+++ /dev/null
@@ -1,129 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: ${flux_environment}
-resources:
-  - ../base
-  - certificate.yaml
-  - dnsrecord.yaml
-  - gcp-iam.yaml
-  - secrets.yaml
-patches:
-  - target:
-      group: apps
-      version: v1
-      kind: Deployment
-      labelSelector: app.kubernetes.io/component=backend
-    patch: |-
-      - op: add
-        path: /spec/template/spec/containers/0/envFrom
-        value:
-          - secretRef:
-              name: greenstar-descope
-              optional: false
-      - op: add
-        path: /spec/template/spec/containers/0/env/-
-        value:
-          name: HTTP_CORS_ALLOWED_ORIGINS
-          value: "https://*.${flux_environment}.greenstar.kfirs.com"
-  - target:
-      group: traefik.io
-      version: v1alpha1
-      kind: IngressRouteTCP
-      name: redis-tls-tcp
-    patch: |-
-      - op: replace
-        path: /spec/routes/0/match
-        value: HostSNI(`redis.${flux_environment}.greenstar.kfirs.com`)
-      - op: add
-        path: /spec/routes/0/middlewares
-        value:
-          - name: ip-whitelist-tcp
-            namespace: traefik
-  - target:
-      group: traefik.io
-      version: v1alpha1
-      kind: IngressRoute
-      name: neo4j-tls
-    patch: |-
-      - op: replace
-        path: /spec/routes/0/match
-        value: Host(`neo4j.${flux_environment}.greenstar.kfirs.com`)
-      - op: add
-        path: /spec/routes/0/middlewares
-        value:
-          - name: ip-whitelist
-            namespace: traefik
-  - target:
-      group: traefik.io
-      version: v1alpha1
-      kind: IngressRouteTCP
-      name: neo4j-tls-tcp
-    patch: |-
-      - op: replace
-        path: /spec/routes/0/match
-        value: HostSNI(`neo4j.${flux_environment}.greenstar.kfirs.com`)
-      - op: add
-        path: /spec/routes/0/middlewares
-        value:
-          - name: ip-whitelist-tcp
-            namespace: traefik
-  - target:
-      group: traefik.io
-      version: v1alpha1
-      kind: IngressRoute
-      name: backend-tls
-    patch: |-
-      - op: replace
-        path: /spec/routes/0/match
-        value: Host(`api.${flux_environment}.greenstar.kfirs.com`)
-      - op: add
-        path: /spec/routes/0/middlewares
-        value:
-          - name: ip-whitelist
-            namespace: traefik
-  - target:
-      group: traefik.io
-      version: v1alpha1
-      kind: IngressRoute
-      name: frontend-tls
-    patch: |-
-      - op: replace
-        path: /spec/routes/0/match
-        value: HostRegexp(`{tenant:[a-zA-Z][a-zA-Z0-9_-]*}.${flux_environment}.greenstar.kfirs.com`)
-      - op: add
-        path: /spec/routes/0/middlewares
-        value:
-          - name: ip-whitelist
-            namespace: traefik
-  - target:
-      group: apps
-      version: v1
-      kind: Deployment
-    patch: |-
-      - op: add
-        path: /spec/template/spec/nodeSelector
-        value:
-          node.kfirs.com/role: work
-      - op: add
-        path: /spec/template/spec/tolerations
-        value:
-          - effect: NoExecute
-            key: node.kfirs.com/role
-            operator: Equal
-            value: work
-  - target:
-      group: apps
-      version: v1
-      kind: Job
-    patch: |-
-      - op: add
-        path: /spec/template/spec/nodeSelector
-        value:
-          node.kfirs.com/role: work
-      - op: add
-        path: /spec/template/spec/tolerations
-        value:
-          - effect: NoExecute
-            key: node.kfirs.com/role
-            operator: Equal
-            value: work
diff --git a/deploy/cluster/secrets.yaml b/deploy/cluster/secrets.yaml
deleted file mode 100644
index 4f6b6286..00000000
--- a/deploy/cluster/secrets.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: SecretStore
-metadata:
-  name: greenstar-gcpsm
-spec:
-  provider:
-    gcpsm:
-      projectID: arikkfir
-      auth:
-        workloadIdentity:
-          clusterLocation: me-west1-a
-          clusterName: main
-          serviceAccountRef:
-            name: greenstar-backend # TODO: use a dedicated SA for secrets instead of the backend SA
----
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: greenstar-descope
-spec:
-  refreshInterval: 30m
-  secretStoreRef:
-    kind: SecretStore
-    name: greenstar-gcpsm
-  data:
-    - secretKey: AUTH_DESCOPE_PROJECT_ID
-      remoteRef:
-        key: greenstar-descope-project-id
-    - secretKey: AUTH_DESCOPE_MANAGEMENT_KEY
-      remoteRef:
-        key: greenstar-descope-management-key
diff --git a/deploy/etc/kind-cluster-config.yaml b/deploy/etc/kind-cluster-config.yaml
deleted file mode 100644
index 9e6870a0..00000000
--- a/deploy/etc/kind-cluster-config.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-# nonk8s
-kind: Cluster
-apiVersion: kind.x-k8s.io/v1alpha4
-nodes:
-  - role: control-plane
-    extraPortMappings:
-      - containerPort: 80
-        hostPort: 80
-        protocol: TCP
-      - containerPort: 443
-        hostPort: 443
-        protocol: TCP
-      - containerPort: 6379
-        hostPort: 6379
-        protocol: TCP
-      - containerPort: 7687
-        hostPort: 7687
-        protocol: TCP
diff --git a/deploy/etc/skaffold-traefik.yaml b/deploy/etc/skaffold-traefik.yaml
deleted file mode 100644
index 58483c0f..00000000
--- a/deploy/etc/skaffold-traefik.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-# nonk8s
-apiVersion: skaffold/v4beta6
-kind: Config
-metadata:
-  name: traefik
-deploy:
-  kubeContext: kind-greenstar
-  helm:
-    releases:
-      - name: greenstar-traefik
-        remoteChart: traefik
-        repo: https://traefik.github.io/charts
-        version: 23.2.0
-        namespace: default
-        wait: true
-        valuesFiles:
-          - deploy/etc/traefik-values.yaml
diff --git a/deploy/etc/traefik-values.yaml b/deploy/etc/traefik-values.yaml
deleted file mode 100644
index 90fcdd74..00000000
--- a/deploy/etc/traefik-values.yaml
+++ /dev/null
@@ -1,77 +0,0 @@
-ingressRoute:
-  dashboard:
-    enabled: false
-
-updateStrategy:
-  rollingUpdate:
-    maxUnavailable: 1
-    maxSurge: 1
-
-providers:
-  kubernetesCRD:
-    enabled: true
-    allowEmptyServices: true
-  kubernetesIngress:
-    allowEmptyServices: true
-
-logs:
-  general:
-    level: INFO
-  access:
-    enabled: false
-    fields:
-      general:
-        defaultmode: keep
-      headers:
-        defaultmode: keep
-
-globalArguments: []
-
-additionalArguments: []
-
-ports:
-  web:
-    containerPort: 8000
-    expose: true
-    exposedPort: 80
-    hostPort: 80
-    port: 8000
-    redirectTo: websecure
-  websecure:
-    containerPort: 8443
-    expose: true
-    exposedPort: 443
-    hostPort: 443
-    port: 8443
-    tls:
-      enabled: true
-  redis:
-    containerPort: 6379
-    expose: true
-    exposedPort: 6379
-    hostPort: 6379
-    port: 6379
-    tls:
-      enabled: true
-  bolt:
-    containerPort: 7687
-    expose: true
-    exposedPort: 7687
-    hostPort: 7687
-    port: 7687
-    tls:
-      enabled: true
-
-service:
-  type: NodePort
-
-rbac:
-  namespaced: true
-
-resources:
-  requests:
-    cpu: 100m
-    memory: 64Mi
-  limits:
-    cpu: 100m
-    memory: 64Mi
diff --git a/deploy/local/backend-config.env b/deploy/local/backend-config.env
deleted file mode 100644
index a2b7df2c..00000000
--- a/deploy/local/backend-config.env
+++ /dev/null
@@ -1,3 +0,0 @@
-DEV_MODE=true
-HTTP_CORS_ALLOWED_ORIGINS=https://*.greenstar.test
-LOG_LEVEL=debug
diff --git a/deploy/local/frontend-config.env b/deploy/local/frontend-config.env
deleted file mode 100644
index e69de29b..00000000
diff --git a/deploy/local/kustomization.yaml b/deploy/local/kustomization.yaml
deleted file mode 100644
index 13c1e3b9..00000000
--- a/deploy/local/kustomization.yaml
+++ /dev/null
@@ -1,160 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-configMapGenerator:
-  - name: greenstar-backend-config
-    behavior: create
-    envs: [ backend-config.env ]
-  - name: greenstar-frontend-config
-    behavior: create
-    envs: [ frontend-config.env ]
-secretGenerator:
-  - name: greenstar-backend-secrets
-    behavior: create
-    envs: [ backend-secrets.env ]
-  - name: greenstar-frontend-secrets
-    behavior: create
-    envs: [ frontend-secrets.env ]
-  - name: greenstar-redis-tls
-    type: kubernetes.io/tls
-    behavior: create
-    files:
-      - tls.crt=_wildcard.greenstar.test.pem
-      - tls.key=_wildcard.greenstar.test-key.pem
-  - name: greenstar-neo4j-tls
-    type: kubernetes.io/tls
-    behavior: create
-    files:
-      - tls.crt=_wildcard.greenstar.test.pem
-      - tls.key=_wildcard.greenstar.test-key.pem
-  - name: greenstar-api-tls
-    type: kubernetes.io/tls
-    behavior: create
-    files:
-      - tls.crt=_wildcard.greenstar.test.pem
-      - tls.key=_wildcard.greenstar.test-key.pem
-  - name: greenstar-wildcard-tls
-    type: kubernetes.io/tls
-    behavior: create
-    files:
-      - tls.crt=_wildcard.greenstar.test.pem
-      - tls.key=_wildcard.greenstar.test-key.pem
-patches:
-
-  # Backend patches
-  - target:
-      group: apps
-      version: v1
-      kind: Deployment
-      labelSelector: app.kubernetes.io/component=backend
-    patch: |-
-
-      # additional environment variables from .env files 
-      - op: add
-        path: /spec/template/spec/containers/0/envFrom
-        value:
-          - configMapRef:
-              name: greenstar-backend-config
-              optional: false
-          - secretRef:
-              name: greenstar-backend-secrets
-              optional: false
-
-      # locally more memory is required when running Go in debug mode
-      - op: replace
-        path: /spec/template/spec/containers/0/resources
-        value:
-          limits:
-            cpu: 500m
-            memory: 128Mi
-          requests:
-            cpu: 500m
-            memory: 128Mi
-
-      # exclude some headers from the access log when running locally
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-exclude-remote-addr
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=accept.*
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=access-control-.*
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=authorization
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=content-.*
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=cookie
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=origin
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=referer
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=user-agent
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=x-forwarded-.*
-      - op: add
-        path: /spec/template/spec/containers/0/args/-
-        value: --http.access-log-excluded-headers=x-real-ip
-
-  # Frontend patches
-  - target:
-      group: apps
-      version: v1
-      kind: Deployment
-      labelSelector: app.kubernetes.io/component=frontend
-    patch: |-
-
-      # disable skaffold debug for frontend (no need to debug node.js)
-      - op: add
-        path: /spec/template/metadata/annotations
-        value:
-          debug.cloud.google.com/config: "{}"
-
-      # additional environment variables from .env files 
-      - op: add
-        path: /spec/template/spec/containers/0/envFrom
-        value:
-          - configMapRef:
-              name: greenstar-frontend-config
-              optional: false
-          - secretRef:
-              name: greenstar-frontend-secrets
-              optional: false
-
-      # locally it takes longer to start, since it compiles it on the fly (and not during image build time)
-      - op: replace
-        path: /spec/template/spec/containers/0/livenessProbe/timeoutSeconds
-        value: 30
-      - op: replace
-        path: /spec/template/spec/containers/0/readinessProbe/timeoutSeconds
-        value: 30
-      - op: replace
-        path: /spec/template/spec/containers/0/startupProbe/timeoutSeconds
-        value: 120
-
-      # locally more memory is required since we run the React server itself instead of NGINX with static files
-      - op: replace
-        path: /spec/template/spec/containers/0/resources
-        value:
-          limits:
-            cpu: 500m
-            memory: 1500Mi
-          requests:
-            cpu: 500m
-            memory: 1500Mi
-      
-      # since we request much more memory, local cluster might not have enough memory to have 2 pods running at once
-      - op: replace
-        path: /spec/strategy/type
-        value: Recreate
diff --git a/skaffold.yaml b/skaffold.yaml
deleted file mode 100644
index 9b66da09..00000000
--- a/skaffold.yaml
+++ /dev/null
@@ -1,61 +0,0 @@
-# nonk8s
-apiVersion: skaffold/v4beta6
-kind: Config
-metadata:
-  name: app
-profiles:
-  - name: traefik
-    patches:
-      - op: add
-        path: /requires
-        value: [ { path: deploy/etc/skaffold-traefik.yaml } ]
-build:
-  local:
-    concurrency: 0
-    useBuildkit: true
-    push: false
-  artifacts:
-    - image: ghcr.io/arikkfir/greenstar/neo4j
-      context: deploy/base/neo4j
-      docker:
-        dockerfile: Dockerfile
-    - image: ghcr.io/arikkfir/greenstar/migrations
-      context: migrations
-      docker:
-        dockerfile: Dockerfile
-    - image: ghcr.io/arikkfir/greenstar/backend
-      context: backend
-      docker:
-        dockerfile: Dockerfile
-    - image: ghcr.io/arikkfir/greenstar/frontend
-      context: frontend
-      docker:
-        dockerfile: Dockerfile.debug
-      sync:
-        manual:
-          - dest: /workspace
-            src: public/**/*
-          - dest: /workspace
-            src: src/**/*
-manifests:
-  kustomize:
-    paths:
-      - deploy/local
-deploy:
-  tolerateFailuresUntilDeadline: true
-  statusCheckDeadlineSeconds: 1200
-  kubeContext: kind-greenstar
-  kubectl:
-    defaultNamespace: default
-    hooks:
-      before:
-        - host:
-            command:
-              - kubectl
-              - delete
-              - job
-              - greenstar-migrations
-              - --cascade=foreground
-              - --ignore-not-found=true
-              - --timeout=30s
-              - --wait=true