Method deprovisionWarehouse

controlplane/provisioning/api.go:374–403

(c *gin.Context)

	req.DatabaseName = strings.TrimSpace(req.DatabaseName)

	// database_name becomes the org's managed hostname label
	// (<database_name>.<managed-suffix>) and the dbname clients connect with,
	// so a new or CHANGED name must be a routable single DNS label — a name
	// with spaces or dots would store fine but leave the tenant reachable by
	// no hostname. Grandfather exception: re-provisioning an existing org with
	// its STORED name (the deprovision→re-provision recovery loop) sends a
	// value that predates this rule — rejecting it would orphan a flow that
	// worked until now and write nothing new anyway. The break-glass rename
	// lives in the admin API (PUT /api/v1/orgs/:id).
	if existing, err := h.store.GetOrg(orgID); err == nil && existing.DatabaseName == req.DatabaseName {
		// Existing org re-provisioning with its stored (possibly
		// pre-validation-rule) database name: nothing changes, allow it.
	} else if err := configstore.ValidateDatabaseName(req.DatabaseName); err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}

	if req.MetadataStore == nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": "metadata_store is required"})
		return
	}

	// Resolve the transitional default_team_id alias and team_id into one
	// effective team. Both fields keep working — the alias goes away once the
	// PostHog backend sends team_id — but disagreement is a caller bug.
	if req.TeamID != 0 && req.DefaultTeamID != 0 && req.TeamID != req.DefaultTeamID {
		c.JSON(http.StatusBadRequest, gin.H{"error": fmt.Sprintf("team_id (%d) and default_team_id (%d) disagree; send one, or the same value in both", req.TeamID, req.DefaultTeamID)})
		return
	}
	effectiveTeamID := req.DefaultTeamID
	if req.TeamID != 0 {
		effectiveTeamID = req.TeamID
	}