AWS: drop windows readiness account

[ameukam]

Unused for more than 365 days and owners are no longer involved in the
project contribution

Signed-off-by: Arnaud Meukam [email protected]

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ameukam

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• infra/aws/OWNERS [ameukam]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ameukam]

/label tide/merge-method-squash

[ameukam]

/hold
@upodroid looks like some resources are not pushed ?

[upodroid]

yes, 8686 should fix it

[upodroid]

atlantis unlock

[upodroid]

atlantis plan

[k8s-infra-ci-robot]

Ran Plan for dir: infra/aws/terraform/management-account workspace: default

Show Output

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
- destroy

Terraform will perform the following actions:

  # module.windows_operational_readiness.aws_organizations_account.this will be destroyed
  # (because aws_organizations_account.this is not in configuration)
- resource "aws_organizations_account" "this" {
      - arn                        = "arn:aws:organizations::348685125169:account/o-kz4vlkihvy/610906833592" -> null
      - close_on_deletion          = false -> null
      - create_govcloud            = false -> null
      - email                      = "[email protected]" -> null
      - iam_user_access_to_billing = "DENY" -> null
      - id                         = "610906833592" -> null
      - joined_method              = "CREATED" -> null
      - joined_timestamp           = "2023-09-20T17:05:40Z" -> null
      - name                       = "windows_operational_readiness" -> null
      - parent_id                  = "ou-unv1-0h3hebxm" -> null
      - status                     = "ACTIVE" -> null
      - tags                       = {
          - "group"      = "sig-windows"
          - "owners"     = "jayunit100"
          - "production" = "false"
        } -> null
      - tags_all                   = {
          - "group"      = "sig-windows"
          - "owners"     = "jayunit100"
          - "production" = "false"
        } -> null
        # (1 unchanged attribute hidden)
    }

  # module.windows_operational_readiness.aws_ssoadmin_account_assignment.this["aws-readonly.ReadOnlyAccess"] will be destroyed
  # (because aws_ssoadmin_account_assignment.this is not in configuration)
- resource "aws_ssoadmin_account_assignment" "this" {
      - id                 = "04882488-a021-7066-420c-a0255a95800e,GROUP,610906833592,AWS_ACCOUNT,arn:aws:sso:::permissionSet/ssoins-7223259e1ca869d2/ps-ba93849a881f98a6,arn:aws:sso:::instance/ssoins-7223259e1ca869d2" -> null
      - instance_arn       = "arn:aws:sso:::instance/ssoins-7223259e1ca869d2" -> null
      - permission_set_arn = "arn:aws:sso:::permissionSet/ssoins-7223259e1ca869d2/ps-ba93849a881f98a6" -> null
      - principal_id       = "04882488-a021-7066-420c-a0255a95800e" -> null
      - principal_type     = "GROUP" -> null
      - region             = "us-east-1" -> null
      - target_id          = "610906833592" -> null
      - target_type        = "AWS_ACCOUNT" -> null
    }

  # module.windows_operational_readiness.aws_ssoadmin_account_assignment.this["sig-k8s-infra-leads.AdministratorAccess"] will be destroyed
  # (because aws_ssoadmin_account_assignment.this is not in configuration)
- resource "aws_ssoadmin_account_assignment" "this" {
      - id                 = "246874d8-4001-705b-f43f-b9c52840da03,GROUP,610906833592,AWS_ACCOUNT,arn:aws:sso:::permissionSet/ssoins-7223259e1ca869d2/ps-ead9194c16498408,arn:aws:sso:::instance/ssoins-7223259e1ca869d2" -> null
      - instance_arn       = "arn:aws:sso:::instance/ssoins-7223259e1ca869d2" -> null
      - permission_set_arn = "arn:aws:sso:::permissionSet/ssoins-7223259e1ca869d2/ps-ead9194c16498408" -> null
      - principal_id       = "246874d8-4001-705b-f43f-b9c52840da03" -> null
      - principal_type     = "GROUP" -> null
      - region             = "us-east-1" -> null
      - target_id          = "610906833592" -> null
      - target_type        = "AWS_ACCOUNT" -> null
    }

Plan: 0 to add, 0 to change, 3 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -d infra/aws/terraform/management-account

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -d infra/aws/terraform/management-account

Plan: 0 to add, 0 to change, 3 to destroy.
🔀 Upstream was modified, a new merge was performed.

---

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock

[upodroid]

atlantis apply

[k8s-infra-ci-robot]

Ran Apply for dir: infra/aws/terraform/management-account workspace: default

Apply Error

Show Output

running 'sh -c' '/atlantis/bin/terraform1.13.4 apply -input=false "/atlantis/repos/kubernetes/k8s.io/8685/default/infra/aws/terraform/management-account/default.tfplan"' in '/atlantis/repos/kubernetes/k8s.io/8685/default/infra/aws/terraform/management-account': exit status 1
module.windows_operational_readiness.aws_ssoadmin_account_assignment.this["sig-k8s-infra-leads.AdministratorAccess"]: Destroying... [id=246874d8-4001-705b-f43f-b9c52840da03,GROUP,610906833592,AWS_ACCOUNT,arn:aws:sso:::permissionSet/ssoins-7223259e1ca869d2/ps-ead9194c16498408,arn:aws:sso:::instance/ssoins-7223259e1ca869d2]
module.windows_operational_readiness.aws_ssoadmin_account_assignment.this["aws-readonly.ReadOnlyAccess"]: Destroying... [id=04882488-a021-7066-420c-a0255a95800e,GROUP,610906833592,AWS_ACCOUNT,arn:aws:sso:::permissionSet/ssoins-7223259e1ca869d2/ps-ba93849a881f98a6,arn:aws:sso:::instance/ssoins-7223259e1ca869d2]
module.windows_operational_readiness.aws_ssoadmin_account_assignment.this["sig-k8s-infra-leads.AdministratorAccess"]: Still destroying... [id=246874d8-4001-705b-f43f-b9c52840da03,GR...sso:::instance/ssoins-7223259e1ca869d2, 00m10s elapsed]
module.windows_operational_readiness.aws_ssoadmin_account_assignment.this["aws-readonly.ReadOnlyAccess"]: Still destroying... [id=04882488-a021-7066-420c-a0255a95800e,GR...sso:::instance/ssoins-7223259e1ca869d2, 00m10s elapsed]
module.windows_operational_readiness.aws_ssoadmin_account_assignment.this["sig-k8s-infra-leads.AdministratorAccess"]: Destruction complete after 10s
module.windows_operational_readiness.aws_ssoadmin_account_assignment.this["aws-readonly.ReadOnlyAccess"]: Destruction complete after 10s
module.windows_operational_readiness.aws_organizations_account.this: Destroying... [id=610906833592]
╷
│ Error: deleting AWS Organizations Account (610906833592): operation error Organizations: RemoveAccountFromOrganization, https response error StatusCode: 400, RequestID: 67030c65-a006-411a-8e54-1f266f0577b2, ConstraintViolationException: The member account is missing one or more of the prerequisites required to operate as a standalone account. To add what is missing, sign-in to the member account using the AWS Organizations console, then select to leave the organization. You will then be prompted to enter any missing information.
│ 
│ 
╵

[upodroid]

I'll delete the account via the console.

[k8s-infra-ci-robot]

Locks and plans deleted for the projects and workspaces modified in this pull request:

• dir: infra/aws/terraform/management-account workspace: default