Add new infra architecture 12

Tiltfile

@@ -818,12 +818,54 @@ local_resource(
         if [ "$CURRENT_FORWARD" != "$UNBOUND_IP" ]; then
             echo "Updating CoreDNS to forward to Unbound ($UNBOUND_IP)..."
 
-            # Patch CoreDNS ConfigMap
-            kubectl patch configmap coredns -n kube-system --type merge -p "{
-              \"data\": {
-                \"Corefile\": \".:53 {\\n    errors\\n    health {\\n       lameduck 5s\\n    }\\n    ready\\n    kubernetes cluster.local in-addr.arpa ip6.arpa {\\n       pods insecure\\n       fallthrough in-addr.arpa ip6.arpa\\n       ttl 30\\n    }\\n    prometheus :9153\\n    forward . $UNBOUND_IP {\\n       max_concurrent 1000\\n    }\\n    cache 30 {\\n       disable success cluster.local\\n       disable denial cluster.local\\n    }\\n    loop\\n    reload\\n    loadbalance\\n}\\n\"
-              }
-            }"
+            # Change to project root to ensure correct file paths
+            cd /Users/urtzialfaro/Documents/bakery-ia
+
+            # Create a temporary Corefile with the forwarding configuration
+            TEMP_COREFILE=$(mktemp)
+            cat > "$TEMP_COREFILE" << EOF
+.:53 {
+    errors
+    health {
+       lameduck 5s
+    }
+    ready
+    kubernetes cluster.local in-addr.arpa ip6.arpa {
+       pods insecure
+       fallthrough in-addr.arpa ip6.arpa
+       ttl 30
+    }
+    prometheus :9153
+    forward . $UNBOUND_IP {
+       max_concurrent 1000
+    }
+    cache 30 {
+       disable success cluster.local
+       disable denial cluster.local
+    }
+    loop
+    reload
+    loadbalance
+}
+EOF
+
+            # Create a complete new configmap YAML with the updated Corefile content
+            cat > /tmp/coredns_updated.yaml << EOF
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: coredns
+  namespace: kube-system
+data:
+  Corefile: |
+$(sed 's/^/    /' "$TEMP_COREFILE")
+EOF
+
+            # Apply the updated configmap
+            kubectl apply -f /tmp/coredns_updated.yaml
+
+            # Clean up the temporary file
+            rm "$TEMP_COREFILE"
 
             # Restart CoreDNS
             kubectl rollout restart deployment coredns -n kube-system
@@ -887,6 +929,9 @@ local_resource(
             echo "Environment detected: $ENVIRONMENT"
 
             # Install Mailu with appropriate values
+            # Ensure we're in the project root directory for correct file paths
+            cd /Users/urtzialfaro/Documents/bakery-ia
+
             if [ "$ENVIRONMENT" = "dev" ]; then
                 helm upgrade --install mailu mailu/mailu \
                     -n bakery-ia \
@@ -912,6 +957,7 @@ local_resource(
         # =====================================================
         echo ""
         echo "Applying Mailu ingress configuration..."
+        cd /Users/urtzialfaro/Documents/bakery-ia
         kubectl apply -f infrastructure/platform/mail/mailu-helm/mailu-ingress.yaml
         echo "Mailu ingress applied for mail.bakery-ia.dev"
 
@@ -934,7 +980,7 @@ local_resource(
         echo "   IMAP:        mail.bakery-ia.dev:993 (SSL/TLS)"
         echo ""
         echo "To create admin user:"
-        echo "   kubectl exec -it -n bakery-ia deployment/mailu-admin -- flask mailu admin admin bakery-ia.local 'YourPassword123!'"
+        echo "   Admin user created automatically via initialAccount feature in Helm values"
         echo ""
         echo "To check pod status: kubectl get pods -n bakery-ia | grep mailu"
     ''',