strip cluster bootstraps

.tofu/platforms/aks/dev/.terraform.tfstate.lock.info

@@ -1 +0,0 @@
-{"ID":"7c7a5ed8-5425-abc4-53ed-9cbf76e65e05","Operation":"OperationTypePlan","Info":"","Who":"danijels@PF44RC05","Version":"1.11.6","Created":"2026-04-27T19:11:57.353171472Z","Path":"terraform.tfstate"}

.tofu/platforms/aks/dev/main.tf

@@ -1,33 +1,14 @@
 module "cluster" {
   source = "../modules/cluster"
 
-  prefix              = "devhub-dev"
+  prefix              = "clst-dev"
   location            = "norwayeast"
-  resource_group_name = "devhub-dev-rg"
+  resource_group_name = "clst-dev-rg"
 
   # AKS — small dev nodes
   aks_node_vm_size = "Standard_B2s"
   aks_node_count   = 2
 
-  # PostgreSQL — burstable tier for dev
-  pg_sku_name              = "B_Standard_B1ms"
-  pg_version               = "16"
-  pg_storage_mb            = 32768
-  pg_backup_retention_days = 7
-  pg_ha_mode               = "Disabled"
-
-  # Redis — Basic C0 (250 MB) for dev
-  redis_sku_name = "Basic"
-  redis_family   = "C"
-  redis_capacity = 0
-
-  # Blob storage — locally-redundant for dev
-  storage_replication = "LRS"
-
-  # DNS — must match an existing Azure DNS zone
-  domain = "dev.example.com" # TODO: set to your actual domain
-  # dns_zone_resource_group = "my-dns-rg"  # uncomment if DNS zone is in a separate RG
-
   enable_delete_lock = false
 
   tags = {

.tofu/platforms/aks/dev/outputs.tf

@@ -16,76 +16,11 @@ output "location" {
   value = module.cluster.location
 }
 
-# ─── PostgreSQL ───────────────────────────────────────────────────────
-
-output "pg_host" {
-  value = module.cluster.pg_host
+output "oidc_issuer_url" {
+  value = module.cluster.oidc_issuer_url
 }
 
-output "pg_port" {
-  value = module.cluster.pg_port
-}
-
-output "pg_admin_login" {
-  value = module.cluster.pg_admin_login
-}
-
-output "pg_admin_password" {
-  value     = module.cluster.pg_admin_password
-  sensitive = true
-}
-
-output "pg_keycloak_password" {
-  value     = module.cluster.pg_keycloak_password
-  sensitive = true
-}
-
-output "pg_gitlab_password" {
-  value     = module.cluster.pg_gitlab_password
-  sensitive = true
-}
-
-# ─── Redis ────────────────────────────────────────────────────────────
-
-output "redis_host" {
-  value = module.cluster.redis_host
-}
-
-output "redis_port" {
-  value = module.cluster.redis_port
-}
-
-output "redis_password" {
-  value     = module.cluster.redis_password
-  sensitive = true
-}
-
-# ─── Blob Storage ─────────────────────────────────────────────────────
-
-output "storage_account_name" {
-  value = module.cluster.storage_account_name
-}
-
-output "storage_primary_access_key" {
-  value     = module.cluster.storage_primary_access_key
-  sensitive = true
-}
-
-output "gitlab_identity_client_id" {
-  value = module.cluster.gitlab_identity_client_id
-}
-
-# ─── Entra ID ────────────────────────────────────────────────────────
-
-output "entra_tenant_id" {
-  value = module.cluster.entra_tenant_id
-}
-
-output "entra_keycloak_client_id" {
-  value = module.cluster.entra_keycloak_client_id
-}
-
-output "entra_keycloak_client_secret" {
-  value     = module.cluster.entra_keycloak_client_secret
+output "kubeconfig" {
+  value     = module.cluster.kubeconfig
   sensitive = true
 }

.tofu/platforms/aks/dev/providers.tf

@@ -6,14 +6,6 @@ terraform {
       source  = "hashicorp/azurerm"
       version = "~> 4.0"
     }
-    azuread = {
-      source  = "hashicorp/azuread"
-      version = "~> 3.0"
-    }
-    random = {
-      source  = "hashicorp/random"
-      version = "~> 3.0"
-    }
   }
 }
 
@@ -23,7 +15,3 @@ provider "azurerm" {
   #   ARM_SUBSCRIPTION_ID, ARM_TENANT_ID, ARM_CLIENT_ID, ARM_CLIENT_SECRET
   # Or: az login (uses your Azure CLI session)
 }
-
-provider "azuread" {
-  # Uses same Azure CLI session or ARM_TENANT_ID env var
-}