Zo leest u een echt StackToIT-migratieassessment

StackToIT Assess
────────────────────────────────────────────
Source:                 terraform/ecs/default
Source files:           105
Resources scanned:      282  (0 in the root module · 282 inside 23 module calls)
  support resources:    34  (+12 Terraform helpers, out of scope; 34 + 12 = the 46 support nodes of summary.support.nodes in assessment.json)
Migration units:        44 known-present (44 instances) · 8 conditional  (+41 switched off — see Not in a wave)
Unit dependencies:      109
Modules:                23 module calls (13 external, 10 local): 23 loaded, 0 not downloaded, 0 invalid
  module.dependencies    ../../lib/dependencies  11 units (RECONFIGURE 7 · REPLATFORM 3 · REDESIGN 1) · 13 switched off · 77 resources (+10 nested calls)
  module.retail_app_ecs  ../../lib/ecs           30 known-present units (RECONFIGURE 24 · REPLATFORM 6) · 3 conditional · 3 switched off · 126 resources (+8 nested calls)
  module.tags            ../../lib/tags          0 units · 0 resources
  module.vpc             ../../lib/vpc           3 known-present units (RECONFIGURE 3) · 5 conditional · 25 switched off · 79 resources (+1 nested call)
Source checks:          Built-in source checks passed — OpenTofu validation of the source did not run (LOCK_FILE)
Source completeness:    RUNTIME_TOPOLOGY_PARTIAL — 8 unit(s) have a count/for_each that is not known statically; whether and how often they exist is decided at plan time

STACKIT mapping
────────────────────────────────────────────
DIRECT              0  
RECONFIGURE        34  ███████████████████████ 77%
REPLATFORM          9  ██████ 20%
CONTAINERIZE        0  
REDESIGN            1  █ 2%
MANUAL_REVIEW       0  
BLOCKED             0    (the mapping class BLOCKED, not the execution blockers, which Migration readiness counts)

Confidence  HIGH 0 · MEDIUM 35 · LOW 9

Validation matrix (what has been established; nothing here approves the draft)
  Source completeness: PARTIAL (source status RUNTIME_TOPOLOGY_PARTIAL)
  Draft generation: GENERATED (the draft is in terraform/)
  StackToIT draft checks: PASSED (100 checks, none found a violation)
  Global invariants: PASSED (12 of 12 invariants PASS)
  OpenTofu validation: PASSED (tofu init -backend=false and tofu validate accepted the draft; tofu 1.13.1)
  Output schema validation: PASSED (verified at publish: every JSON file that has a schema is validated against it (see run_verification in manifest.json))
  STACKIT plan: NOT RUN (this build runs no plan against a STACKIT project)
  Architect approval: NOT PROVIDED (no review decision is recorded for this run)
  Semantic equivalence: NOT ASSESSED (this build has no measure for it)
  Safe to apply: NOT ASSERTED (StackToIT never asserts it)

{
  "id": "module.dependencies.module.dynamodb_carts.aws_dynamodb_table.this",
  "result": {
    "class": "REDESIGN",
    "confidence": "MEDIUM",
    "target": {
      "service": "STACKIT MongoDB Flex (alternative — data-model redesign; PostgreSQL Flex JSONB is the other option)",
      "resources": [
        "stackit_mongodbflex_instance"
      ]
    },
    "reason": "There is no DynamoDB-compatible service on STACKIT. The access layer is rewritten against a document store (MongoDB Flex) or relational JSONB (PostgreSQL Flex); key design, capacity modes and conditional writes do not carry over. The draft is an alternative, not an equivalent: one MongoDB Flex instance for the estate's tables, each table a collection with its keys and secondary indexes named as MongoDB indexes.",
    "review": [
      "Rewrite the data access layer against the MongoDB API (queries, conditional writes, transactions).",
      "Size the instance from the tables' data volume and request load; capacity units do not translate."
    ]
  }
}

resource "stackit_mongodbflex_instance" "dynamodb_tables" {
  project_id = var.project_id
  name       = "dynamodb-tables"
  acl        = var.dynamodb_tables_allowed_cidrs
  version    = var.dynamodb_tables_version
  flavor = {
    cpu = var.dynamodb_tables_cpu
    ram = var.dynamodb_tables_ram
  }
  replicas = 3
  storage = {
    class = var.mongodbflex_storage_class
    size  = var.dynamodb_tables_storage_gb
  }
  backup_schedule = "0 2 * * *"
  options = {
    type                       = "Replica"
    point_in_time_window_hours = var.dynamodb_tables_pitr_hours
  }
}

{
  "id": "DEC-NET-STACKITROUTE-NAT-FIXED-EGRESS-ADDRESS-LOST",
  "kind": "NAT_FIXED_EGRESS_ADDRESS_LOST",
  "status": "OPEN",
  "owner_role": "Network Architect",
  "required_by_phase": "BEFORE_PILOT",
  "options": [
    {
      "id": "accept-the-platform-egress-address",
      "execution_effect": "ACK_CURRENT_ARTIFACT"
    },
    {
      "id": "reserve-a-public-ip-per-server",
      "execution_effect": "REGENERATE_REQUIRED"
    }
  ]
}

  # DEC-NET-STACKITROUTE-NAT-FIXED-EGRESS-ADDRESS-LOST
  # NAT_FIXED_EGRESS_ADDRESS_LOST (PLAN_DECISION, status OPEN, 1 member)
  # affects: module.vpc.module.vpc.aws_route_table.private
  # options (name one in chosen_option):
  #   accept-the-platform-egress-address: the draft already carries it out: a review frees the steps that wait for it
  #   reserve-a-public-ip-per-server: changes the draft, and no answer of this build writes it: change the source (or the draft by hand) and run again; a review frees nothing
  - id: DEC-NET-STACKITROUTE-NAT-FIXED-EGRESS-ADDRESS-LOST
    resolution: ""
    # An option above that changes the draft frees no step by a review alone: its line says how the draft comes to carry it. A review that names none of the options frees nothing either.
    # chosen_option: <one of the options above>
    rationale: ""
    evidence_refs: []
    reviewed_by: Network Architect
    reviewed_at: "<YYYY-MM-DD>"
    members_sha256: sha256:cbfcbf1e12e98cb3608485caffc5de82e33e3517a0845fc9ca14cbcf7e207d0e
    artifact_sha256: sha256:37a4992d7cb1b57ebe73b1567f6fec7b6f2f3de527370a9ba50c9d2e600bccea

{
  "id": "DEC/routing/stackitroute:module.vpc.module.vpc.aws_route_table.private:NAT_FIXED_EGRESS_ADDRESS_LOST",
  "mode": "MANUAL",
  "phase": "PREPARE",
  "capability": "decision",
  "operation": {
    "manual": {
      "owner_role": "Network Architect",
      "when": "BEFORE_PILOT",
      "success_condition": "the decision DEC-NET-STACKITROUTE-NAT-FIXED-EGRESS-ADDRESS-LOST is answered (accepted or rejected, with its evidence) in the inputs of the run and is no longer open when the run is repeated"
    }
  },
  "runs_as_written": false
}