release: pre steps switch from vercel to aws (#5030)

.github/workflows/terrafrom-plan-and-apply.yml

@@ -2,12 +2,13 @@ name: 'Terraform'
 
 on:
   workflow_dispatch:
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - main
+# TODO: enable it back when migration is completed.
+#  push:
+#    branches:
+#      - main
+#  pull_request:
+#    branches:
+#      - main
 
 permissions:
   id-token: write
@@ -57,18 +58,18 @@ jobs:
         run: terraform plan -out .planfile
         working-directory: infra/terraform
 
-      - name: Post PR comment
-        uses: borchero/terraform-plan-comment@3399d8dbae8b05185e815e02361ede2949cd99c4 # v2.4.0
-        if: always() && github.ref != 'refs/heads/main' && (steps.validate.outcome == 'success' || steps.validate.outcome == 'failure')
-        with:
-          token: ${{ github.token }}
-          planfile: .planfile
-          working-directory: "infra/terraform"
-          skip-comment: true
+#      - name: Post PR comment
+#        uses: borchero/terraform-plan-comment@3399d8dbae8b05185e815e02361ede2949cd99c4 # v2.4.0
+#        if: always() && github.ref != 'refs/heads/main' && (steps.validate.outcome == 'success' || steps.validate.outcome == 'failure')
+#        with:
+#          token: ${{ github.token }}
+#          planfile: .planfile
+#          working-directory: "infra/terraform"
+#          skip-comment: true
 
       - name: Terraform Apply
         id: apply
-        if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+#        if: github.ref == 'refs/heads/main' && github.event_name == 'push'
         run: terraform apply .planfile
         working-directory: "infra/terraform"
 

infra/terraform/main.tf

@@ -476,7 +476,7 @@ resource "helm_release" "formbricks" {
   namespace   = "formbricks"
   repository  = "oci://ghcr.io/formbricks/helm-charts"
   chart       = "formbricks"
-  version     = "3.5.0"
+  version     = "3.5.1"
   max_history = 5
 
   values = [
@@ -514,21 +514,19 @@ resource "helm_release" "formbricks" {
         eks.amazonaws.com/role-arn: ${module.formkey-aws-access.iam_role_arn}
   serviceMonitor:
     enabled: true
-  reloadOnChange: true
   deployment:
+    reloadOnChange: true
     nodeSelector:
       karpenter.sh/capacity-type: "on-demand"
     env:
       S3_BUCKET_NAME:
-        value: "formbricks-20250311043609595200000002"
+        value: "formbricks-cloud-uploads"
       RATE_LIMITING_DISABLED:
         value: "1"
     envFrom:
       app-env:
         type: secret
         nameSuffix: app-env
-    annotations:
-      last_updated_at: ${timestamp()}
   externalSecret:
     enabled: true  # Enable/disable ExternalSecrets
     secretStore:

infra/terraform/secrets.tf

@@ -6,7 +6,7 @@ resource "aws_secretsmanager_secret" "formbricks_app_secrets" {
 resource "aws_secretsmanager_secret_version" "formbricks_app_secrets" {
   secret_id = aws_secretsmanager_secret.formbricks_app_secrets.id
   secret_string = jsonencode({
-    DATABASE_URL = "postgres://formbricks:${random_password.postgres.result}@${module.rds-aurora.cluster_endpoint}/formbricks"
+#    DATABASE_URL = "postgres://formbricks:${random_password.postgres.result}@${module.rds-aurora.cluster_endpoint}/formbricks"
     REDIS_URL    = "rediss://formbricks:${random_password.valkey.result}@${module.valkey_serverless.serverless_cache_endpoint[0].address}:6379"
   })
 }