Add role-based filtering and imporve code

infrastructure/kubernetes/overlays/dev/kustomization.yaml

@@ -4,13 +4,101 @@ kind: Kustomization
 metadata:
   name: bakery-ia-dev
 
-namespace: bakery-ia
+# Note: Removed global namespace to prevent monitoring namespace conflict
+# All base resources already have namespace: bakery-ia defined
 
 resources:
   - ../../base
+  # Monitoring disabled for dev to save resources
+  # - ../../base/components/monitoring
   - dev-ingress.yaml
 
+# Exclude nominatim from dev to save resources
+# Using scale to 0 for StatefulSet to prevent pod creation
 patches:
+  # Override specific ConfigMap values for development
+  - target:
+      kind: ConfigMap
+      name: bakery-config
+    patch: |-
+      - op: replace
+        path: /data/ENVIRONMENT
+        value: "development"
+      - op: replace
+        path: /data/DEBUG
+        value: "true"
+      - op: replace
+        path: /data/LOG_LEVEL
+        value: "DEBUG"
+      - op: replace
+        path: /data/AUTO_RELOAD
+        value: "true"
+      - op: replace
+        path: /data/PROFILING_ENABLED
+        value: "true"
+      - op: replace
+        path: /data/MOCK_EXTERNAL_APIS
+        value: "true"
+      - op: replace
+        path: /data/TESTING
+        value: "false"
+      - op: replace
+        path: /data/DOMAIN
+        value: "localhost"
+      - op: replace
+        path: /data/API_DOCS_ENABLED
+        value: "true"
+      - op: replace
+        path: /data/CORS_ORIGINS
+        value: "http://frontend-service:3000,http://localhost:3000,http://localhost:3001,http://localhost,http://127.0.0.1:3000,http://127.0.0.1:3001,http://bakery-ia.local,https://localhost,https://127.0.0.1"
+      - op: replace
+        path: /data/VITE_ENVIRONMENT
+        value: "development"
+      - op: replace
+        path: /data/VITE_API_URL
+        value: "/api"
+      - op: replace
+        path: /data/STRIPE_PUBLISHABLE_KEY
+        value: "pk_test_your_stripe_publishable_key_here"
+      - op: replace
+        path: /data/SQUARE_ENVIRONMENT
+        value: "sandbox"
+      - op: replace
+        path: /data/TOAST_ENVIRONMENT
+        value: "sandbox"
+      - op: replace
+        path: /data/LIGHTSPEED_ENVIRONMENT
+        value: "sandbox"
+      - op: replace
+        path: /data/RATE_LIMIT_ENABLED
+        value: "false"
+      - op: replace
+        path: /data/DB_FORCE_RECREATE
+        value: "false"
+      - op: add
+        path: /data/DEVELOPMENT_MODE
+        value: "true"
+      - op: add
+        path: /data/DEBUG_LOGGING
+        value: "true"
+      - op: add
+        path: /data/SKIP_MIGRATION_VERSION_CHECK
+        value: "false"
+  - target:
+      kind: StatefulSet
+      name: nominatim
+    patch: |-
+      - op: replace
+        path: /spec/replicas
+        value: 0
+  # Suspend nominatim-init job in dev (not needed when nominatim is scaled to 0)
+  - target:
+      kind: Job
+      name: nominatim-init
+    patch: |-
+      - op: replace
+        path: /spec/suspend
+        value: true
   - target:
       group: apps
       version: v1
@@ -485,43 +573,6 @@ patches:
             memory: "1Gi"
             cpu: "500m"
 
-configMapGenerator:
-  - name: bakery-config
-    behavior: merge
-    literals:
-      # Environment & Build Settings
-      - ENVIRONMENT=development
-      - DEBUG=true
-      - LOG_LEVEL=DEBUG
-      - AUTO_RELOAD=true
-      - PROFILING_ENABLED=true
-      - MOCK_EXTERNAL_APIS=true
-      - TESTING=false
-      - DOMAIN=localhost
-      - API_DOCS_ENABLED=true
-
-      # CORS Configuration for Development
-      - CORS_ORIGINS=http://frontend-service:3000,http://localhost:3000,http://localhost:3001,http://localhost,http://127.0.0.1:3000,http://127.0.0.1:3001,http://bakery-ia.local,https://localhost,https://127.0.0.1
-
-      # Frontend Development Configuration
-      - VITE_ENVIRONMENT=development
-      - VITE_API_URL=/api
-
-      # Payment Configuration (Sandbox for dev)
-      - STRIPE_PUBLISHABLE_KEY=pk_test_your_stripe_publishable_key_here
-      - SQUARE_ENVIRONMENT=sandbox
-      - TOAST_ENVIRONMENT=sandbox
-      - LIGHTSPEED_ENVIRONMENT=sandbox
-
-      # Rate Limiting (Disabled for dev)
-      - RATE_LIMIT_ENABLED=false
-
-      # Database (Development mode)
-      - DB_FORCE_RECREATE=false
-      - DEVELOPMENT_MODE=true
-      - DEBUG_LOGGING=true
-      - SKIP_MIGRATION_VERSION_CHECK=false
-
 secretGenerator:
   - name: dev-secrets
     literals: