chore(deploy): remove DIND — all execution now via K8s Jobs

Docker-in-Docker is no longer needed since the K8s Job runner
handles all component container execution natively.

- Delete dind-deployment.yaml, dind-pvc.yaml, dind-service.yaml
- Delete values/dind.yaml and values/no-dind.yaml
- Remove execution.dind and workerDockerHost from values.yaml
- Remove execution.dind block from values/cloud-generic.yaml
- Remove workerDockerHost DOCKER_HOST env branch from worker-deployment.yaml

Closes ENG-209

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Signed-off-by: betterclever <paliwal.pranjal83@gmail.com>

Author: betterclever

deploy/helm/shipsec/templates/dind-deployment.yaml

@@ -47,6 +47,11 @@ spec:
             secretKeyRef:
               name: {{ .Values.secrets.name }}
               key: SECRET_STORE_MASTER_KEY
+        - name: INTERNAL_SERVICE_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: {{ .Values.secrets.name }}
+              key: INTERNAL_SERVICE_TOKEN
         {{- if eq .Values.execution.mode "k8s" }}
         - name: EXECUTION_MODE
           value: "k8s"
@@ -66,9 +71,6 @@ spec:
         - name: K8S_JOB_SERVICE_ACCOUNT
           value: {{ .Values.execution.k8s.jobServiceAccount | quote }}
         {{- end }}
-        {{- else if .Values.execution.workerDockerHost }}
-        - name: DOCKER_HOST
-          value: {{ .Values.execution.workerDockerHost | quote }}
         {{- end }}
         {{- range $k, $v := .Values.worker.env }}
         - name: {{ $k }}

deploy/helm/shipsec/templates/dind-pvc.yaml

@@ -107,17 +107,8 @@ ingress:
     secretName: shipsec-tls
 
 execution:
-  # "docker" = use Docker CLI (local dev / DIND), "k8s" = K8s Jobs (GKE / production)
+  # "docker" = use local Docker socket (local dev), "k8s" = K8s Jobs (GKE / production)
   mode: docker
-  dind:
-    enabled: false
-    serviceName: shipsec-dind
-    namespace: shipsec-workloads
-    port: 2375
-    storage:
-      enabled: true
-      size: 20Gi
-  workerDockerHost: ''
   k8s:
     # Namespace where component Jobs are created
     jobNamespace: shipsec-workloads

deploy/helm/shipsec/templates/dind-service.yaml

@@ -8,9 +8,3 @@ backend:
 frontend:
   service:
     type: ClusterIP
-
-execution:
-  dind:
-    enabled: false
-  workerDockerHost: ""
-