Skip to content

Fix/own account cleanup - #962

Merged
ybezsonov merged 3 commits into
mainfrom
fix/own-account-cleanup
Nov 10, 2026
Merged

ybezsonov merged 3 commits into
mainfrom
fix/own-account-cleanup

Conversation

@ybezsonov

Copy link
Copy Markdown
Contributor

Issue #, if available:

Description of changes:

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

java-performance.sh and java-on-amazon-eks.sh stop every StatefulSet and Deployment that
mounts a PersistentVolumeClaim, delete the claims and wait until their PersistentVolumes
are gone. Without this, the gp3 volumes of Prometheus, Grafana and Pyroscope (28 GiB)
stayed billed as `available` after the stack was deleted. Stopping Pyroscope also ends its
writes into the workshop bucket, which failed the bucket's deletion. The plan shows the
claim count.

All three cleanup scripts define log_success: the final report_stack_retained called it
and exited 127 after a successful cleanup.
…n the enforce block

The reports controller of Kyverno v1.19.1 can stop producing reports without an error
(kyverno#17848; the counter fix kyverno#17085 is only in the 1.20 release candidates).
The enforce block of the content now restarts it after 90 s without a PolicyReport. The
comment at the chart pin says to bump it and drop the restart once a stable release has
the fix. ws-test regenerated from the content (the own-account setup blocks are
test=false and only shift line numbers).
Every Lambda function, the CodeBuild project and the IDE bootstrap log to a log group the
stack owns (Lambda.stackLogGroup: generated name, 7 days, RemovalPolicy.DESTROY). Before,
Lambda, CodeBuild and the CloudWatch agent created their own groups (/aws/lambda/...,
/aws/codebuild/..., workshop-ide-bootstrap-<date>), and nine of them outlived the stack.
CloudFormation deletes each group after the resource that writes to it, so the logs of the
custom resources' Delete calls go too. A generated name keeps a group left by an earlier
deployment from blocking the create.

Only the java-performance stack is regenerated (GIT_BRANCH=main); the other workshops
pick this up at their next generation.
@ybezsonov
ybezsonov merged commit 1e5fcb5 into main Nov 10, 2026
48 checks passed
@ybezsonov
ybezsonov deleted the fix/own-account-cleanup branch November 10, 2026 06:24
ybezsonov added a commit that referenced this pull request Nov 10, 2026
…nc with java-performance (#963)

The CON405 content gets the same changes as java-performance: the own-account setup tab,
the cleanup page and the enforce block's restart of a stalled Kyverno reports controller
(kyverno#17848). Here: the comment at the Kyverno pin, the ws-test regenerated from the
content, and the stack regenerated (GIT_BRANCH=main) with the stack-owned log groups of
#962. The two workshops' deploy scripts, stacks and ws-tests differ only in the name again.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant