Add new infra architecture

infrastructure/services/microservices/demo-session/migrations/demo-seed-rbac.yaml

@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: demo-seed-sa
+  namespace: bakery-ia
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: demo-seed-role
+  namespace: bakery-ia
+rules:
+- apiGroups: [""]
+  resources: ["secrets"]
+  verbs: ["get", "list"]
+- apiGroups: [""]
+  resources: ["pods"]
+  verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: demo-seed-rolebinding
+  namespace: bakery-ia
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: demo-seed-role
+subjects:
+- kind: ServiceAccount
+  name: demo-seed-sa
+  namespace: bakery-ia

infrastructure/services/microservices/demo-session/migrations/demo-session-migration-job.yaml

@@ -0,0 +1,56 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: demo-session-migration
+  namespace: bakery-ia
+  labels:
+    app.kubernetes.io/name: demo-session-migration
+    app.kubernetes.io/component: migration
+    app.kubernetes.io/part-of: bakery-ia
+spec:
+  backoffLimit: 3
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: demo-session-migration
+        app.kubernetes.io/component: migration
+    spec:
+      imagePullSecrets:
+      - name: dockerhub-creds
+      initContainers:
+      - name: wait-for-db
+        image: postgres:17-alpine
+        command: ["sh", "-c", "until pg_isready -h demo-session-db-service -p 5432; do sleep 2; done"]
+        resources:
+          requests:
+            memory: "64Mi"
+            cpu: "50m"
+          limits:
+            memory: "128Mi"
+            cpu: "100m"
+      containers:
+      - name: migrate
+        image: bakery/demo-session-service
+        command: ["python", "/app/shared/scripts/run_migrations.py", "demo_session"]
+        env:
+        - name: DEMO_SESSION_DATABASE_URL
+          valueFrom:
+            secretKeyRef:
+              name: database-secrets
+              key: DEMO_SESSION_DATABASE_URL
+        - name: DB_FORCE_RECREATE
+          valueFrom:
+            configMapKeyRef:
+              name: bakery-config
+              key: DB_FORCE_RECREATE
+              optional: true
+        - name: LOG_LEVEL
+          value: "INFO"
+        resources:
+          requests:
+            memory: "256Mi"
+            cpu: "100m"
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+      restartPolicy: OnFailure