Automate Deleting Environment/Account from TF management

[richgreen-moj]

User Story

As a MP Engineer
I want to automate the steps needed to remove an account from TF management
So that the account deletion process can be quicker and more robust

Value / Purpose

To automate the manual steps required in the Deleting an Environment process.

This process requires many manual steps where you need to delete resources and workspaces in the MP and MP Env repos. If we could automate these it would make the process more efficient.

Useful Contacts

@richgreen-moj

Additional Information

Certain workflows such as Terraform: New environment will re-create accounts/workspaces which you are trying to delete if it runs mid-way through your progress.

Making the process quicker would stop the need for us having to warn others not to merge PRs while we carry out the process.

Proposal / Unknowns

Some steps will not be possible to automate e.g. the actions required as a root user.

Definition of Done

• Github Action (or agreed solution) has been developed which automates the deletion steps
• Dummy account or environment created for testing
• Solution has been tested on the dummy account
• User docs have been updated
• Another team member has reviewed
• Tests are green

[richgreen-moj]

We are going to create a bash script that can be run locally to automate some of the manual steps required for account deletion. To start with we'll generate a script for each of these stages:

• https://user-guide.modernisation-platform.service.justice.gov.uk/runbooks/deleting-an-environment.html#removing-the-environment-definition (@richgreen-moj)
• https://user-guide.modernisation-platform.service.justice.gov.uk/runbooks/deleting-an-environment.html#delete-terraform-resources-for-the-environment (@Kudzai-moj)
• https://user-guide.modernisation-platform.service.justice.gov.uk/runbooks/deleting-an-environment.html#delete-terraform-workspaces-for-the-environment (@ep-93)

Then next week we aim to bring it together in to one script. To begin with we shall concentrate on the deletion of a single existing environment, e.g. not all the environments for an application.

[richgreen-moj]

New account called delete-account has been created for the purpose of testing our account deletion scripts:
https://github.com/ministryofjustice/modernisation-platform/blob/main/environments/delete-account.jsone

[richgreen-moj]

#6799 closes this issue.
A demo of us running the scripts can be found here