Make bootstrap and prod setup configurable

[WhiteRow33]

Summary

• Document fresh AWS/GitHub setup flow from OIDC bootstrap to Terraform prod apply
• Make Terraform backend, region, project/env, namespace, Helm release, and Plane host configurable through GitHub vars
• Remove hardcoded ALB/S3/doc-store/Plane namespace defaults from Helm values and workflows
• Let prod workflow adopt generated ALB hostname when PLANE_APP_HOST is unset
• Relax IAM policy account/region hardcoding while keeping tag/resource-name scoping

Validation

• Parsed GitHub workflow YAML
• Ran terraform fmt -recursive terraform
• Ran terraform validate for bootstrap and prod with backend disabled
• Validated IAM policy JSON with AWS Access Analyzer: no errors
• Local Helm lint/template validation passed

[Copilot]

Pull request overview

This PR makes the AWS/Terraform/Helm production setup configurable through GitHub repository variables and updates the deployment docs for a fresh bootstrap-to-prod flow.

Changes:

• Converts Terraform prod backend and Plane naming defaults to configurable inputs.
• Updates GitHub Actions workflows to derive AWS, Terraform, Kubernetes, and Helm settings from repo vars.
• Removes hardcoded Helm values and expands setup documentation.

Reviewed changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
terraform/environments/prod/versions.tf	Switches prod backend to partial S3 backend config.
terraform/environments/prod/variables.tf	Adds configurable Plane release/service account/namespace inputs.
terraform/environments/prod/main.tf	Derives Plane Kubernetes naming locals for IRSA trust.
terraform/environments/bootstrap/variables.tf	Adds configurable Terraform state bucket prefix.
terraform/environments/bootstrap/main.tf	Uses the configurable state bucket prefix.
README.md	Documents configurable setup and zero-to-deploy flow.
helm/plane/values/dev.yaml	Removes hardcoded Plane/S3/ALB defaults.
helm/plane/templates/doc-store-secret.yaml	Renders the doc-store secret only when explicitly configured.
.github/workflows/terraform-prod.yml	Wires repo vars into Terraform init/apply and Helm deploy.
.github/workflows/terraform-bootstrap.yml	Wires repo vars into bootstrap workflow and expands path filters.
.github/README-OIDC.md	Updates OIDC setup documentation for configurable deployment.
.github/iam/terraform-prod-policy.json	Relaxes account/region/name hardcoding in Terraform IAM permissions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.