chore: cleanup kratos

[rebelchris]

No description provided.

[pulumi]

🍹 The Update (preview) for dailydotdev/api/prod (at da315d3) was successful.

✨ Neo Explanation

This is a standard application version rollout updating all deployments, cron jobs, and migration jobs to the new release, accompanied by a secret update that removes two service origin URLs (`HEIMDALL_ORIGIN` and `KRATOS_ORIGIN`) — confirm those variables are no longer needed by the new code before applying.

Root Cause Analysis

A new version of the application has been built and is being deployed to production. All Kubernetes workloads are being updated to point to the new container image, and the Kubernetes secret has been updated with configuration changes (two environment variables — HEIMDALL_ORIGIN and KRATOS_ORIGIN — are being removed).

Dependency Chain

The new application version cascades across the entire fleet:

• 7 Deployments (API, background workers, WebSocket, private, temporal, worker-job, personalized digest) are being rolled out with the new container image.
• 38 CronJobs are updated to reference the new image so future scheduled runs use the new code.
• 2 migration Jobs (database and ClickHouse) from the previous version are deleted and replaced with new ones that will run against the new image, applying any schema changes included in this release.
• 1 Kubernetes Secret is being replaced because its data changed — specifically, HEIMDALL_ORIGIN and KRATOS_ORIGIN are being removed, suggesting those service dependencies have been retired or consolidated.

Risk analysis

The secret replacement (create-replacement) means the old secret is deleted and a new one is created. If any running pod reads the secret at the moment the old one is deleted and the new one isn't yet available, it could cause a brief config resolution failure — though Kubernetes typically mounts secrets in a way that minimizes this window. The removal of HEIMDALL_ORIGIN and KRATOS_ORIGIN from the secret is worth verifying: any code that still references these variables will silently receive undefined values at runtime.

Resource Changes

    Name                                                       Type                           Operation
~   vpc-native-generate-search-invites-cron                    kubernetes:batch/v1:CronJob    update
~   vpc-native-update-source-tag-view-cron                     kubernetes:batch/v1:CronJob    update
-   vpc-native-api-db-migration-3e3ad855                       kubernetes:batch/v1:Job        delete
~   vpc-native-update-current-streak-cron                      kubernetes:batch/v1:CronJob    update
~   vpc-native-update-views-cron                               kubernetes:batch/v1:CronJob    update
~   vpc-native-worker-job-deployment                           kubernetes:apps/v1:Deployment  update
~   vpc-native-generic-referral-reminder-cron                  kubernetes:batch/v1:CronJob    update
~   vpc-native-update-tag-recommendations-cron                 kubernetes:batch/v1:CronJob    update
~   vpc-native-daily-digest-cron                               kubernetes:batch/v1:CronJob    update
~   vpc-native-bg-deployment                                   kubernetes:apps/v1:Deployment  update
~   vpc-native-personalized-digest-cron                        kubernetes:batch/v1:CronJob    update
~   vpc-native-check-analytics-report-cron                     kubernetes:batch/v1:CronJob    update
+   vpc-native-api-db-migration-c4d23dde                       kubernetes:batch/v1:Job        create
~   vpc-native-post-analytics-clickhouse-cron                  kubernetes:batch/v1:CronJob    update
~   vpc-native-user-profile-updated-sync-cron                  kubernetes:batch/v1:CronJob    update
~   vpc-native-user-profile-analytics-history-clickhouse-cron  kubernetes:batch/v1:CronJob    update
+-  vpc-native-k8s-secret                                      kubernetes:core/v1:Secret      create-replacement
~   vpc-native-update-highlighted-views-cron                   kubernetes:batch/v1:CronJob    update
~   vpc-native-clean-expired-better-auth-sessions-cron         kubernetes:batch/v1:CronJob    update
~   vpc-native-private-deployment                              kubernetes:apps/v1:Deployment  update
~   vpc-native-expire-super-agent-trial-cron                   kubernetes:batch/v1:CronJob    update
~   vpc-native-clean-gifted-plus-cron                          kubernetes:batch/v1:CronJob    update
~   vpc-native-validate-active-users-cron                      kubernetes:batch/v1:CronJob    update
~   vpc-native-clean-zombie-user-companies-cron                kubernetes:batch/v1:CronJob    update
~   vpc-native-clean-zombie-users-cron                         kubernetes:batch/v1:CronJob    update
~   vpc-native-deployment                                      kubernetes:apps/v1:Deployment  update
~   vpc-native-channel-digests-cron                            kubernetes:batch/v1:CronJob    update
~   vpc-native-squad-posts-analytics-refresh-cron              kubernetes:batch/v1:CronJob    update
+   vpc-native-api-clickhouse-migration-c4d23dde               kubernetes:batch/v1:Job        create
~   vpc-native-personalized-digest-deployment                  kubernetes:apps/v1:Deployment  update
~   vpc-native-update-tags-str-cron                            kubernetes:batch/v1:CronJob    update
~   vpc-native-user-profile-analytics-clickhouse-cron          kubernetes:batch/v1:CronJob    update
~   vpc-native-sync-subscription-with-cio-cron                 kubernetes:batch/v1:CronJob    update
~   vpc-native-update-trending-cron                            kubernetes:batch/v1:CronJob    update
~   vpc-native-temporal-deployment                             kubernetes:apps/v1:Deployment  update
~   vpc-native-clean-channel-highlights-cron                   kubernetes:batch/v1:CronJob    update
~   vpc-native-clean-zombie-images-cron                        kubernetes:batch/v1:CronJob    update
~   vpc-native-rotate-weekly-quests-cron                       kubernetes:batch/v1:CronJob    update
~   vpc-native-ws-deployment                                   kubernetes:apps/v1:Deployment  update
-   vpc-native-api-clickhouse-migration-3e3ad855               kubernetes:batch/v1:Job        delete
~   vpc-native-user-posts-analytics-refresh-cron               kubernetes:batch/v1:CronJob    update
... and 11 other changes