Add new infra architecture 13

infrastructure/environments/prod/k8s-manifests/kustomization.yaml

@@ -207,141 +207,160 @@ patches:
 images:
   # Application services
   - name: bakery/auth-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/auth-service
+    newName: registry.bakewise.ai/bakery-admin/auth-service
     newTag: latest
   - name: bakery/tenant-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/tenant-service
+    newName: registry.bakewise.ai/bakery-admin/tenant-service
     newTag: latest
   - name: bakery/training-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/training-service
+    newName: registry.bakewise.ai/bakery-admin/training-service
     newTag: latest
   - name: bakery/forecasting-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/forecasting-service
+    newName: registry.bakewise.ai/bakery-admin/forecasting-service
     newTag: latest
   - name: bakery/sales-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/sales-service
+    newName: registry.bakewise.ai/bakery-admin/sales-service
     newTag: latest
   - name: bakery/external-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/external-service
+    newName: registry.bakewise.ai/bakery-admin/external-service
     newTag: latest
   - name: bakery/notification-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/notification-service
+    newName: registry.bakewise.ai/bakery-admin/notification-service
     newTag: latest
   - name: bakery/inventory-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/inventory-service
+    newName: registry.bakewise.ai/bakery-admin/inventory-service
     newTag: latest
   - name: bakery/recipes-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/recipes-service
+    newName: registry.bakewise.ai/bakery-admin/recipes-service
     newTag: latest
   - name: bakery/suppliers-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/suppliers-service
+    newName: registry.bakewise.ai/bakery-admin/suppliers-service
     newTag: latest
   - name: bakery/pos-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/pos-service
+    newName: registry.bakewise.ai/bakery-admin/pos-service
     newTag: latest
   - name: bakery/orders-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/orders-service
+    newName: registry.bakewise.ai/bakery-admin/orders-service
     newTag: latest
   - name: bakery/production-service
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/production-service
+    newName: registry.bakewise.ai/bakery-admin/production-service
     newTag: latest
   - name: bakery/alert-processor
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/alert-processor
+    newName: registry.bakewise.ai/bakery-admin/alert-processor
     newTag: latest
   - name: bakery/gateway
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/gateway
+    newName: registry.bakewise.ai/bakery-admin/gateway
     newTag: latest
   - name: bakery/dashboard
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/dashboard
+    newName: registry.bakewise.ai/bakery-admin/dashboard
+    newTag: latest
+  # Missing services (added to fix ImagePullBackOff errors)
+  - name: bakery/ai-insights-service
+    newName: registry.bakewise.ai/bakery-admin/ai-insights-service
+    newTag: latest
+  - name: bakery/demo-session-service
+    newName: registry.bakewise.ai/bakery-admin/demo-session-service
+    newTag: latest
+  - name: bakery/distribution-service
+    newName: registry.bakewise.ai/bakery-admin/distribution-service
+    newTag: latest
+  - name: bakery/orchestrator-service
+    newName: registry.bakewise.ai/bakery-admin/orchestrator-service
+    newTag: latest
+  - name: bakery/procurement-service
+    newName: registry.bakewise.ai/bakery-admin/procurement-service
     newTag: latest
   # =============================================================================
   # Database images (cached in gitea registry for consistency)
   - name: postgres
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/postgres
+    newName: registry.bakewise.ai/bakery-admin/postgres
     newTag: "17-alpine"
   - name: redis
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/redis
+    newName: registry.bakewise.ai/bakery-admin/redis
     newTag: "7.4-alpine"
   - name: rabbitmq
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/rabbitmq
+    newName: registry.bakewise.ai/bakery-admin/rabbitmq
     newTag: "4.1-management-alpine"
   # Utility images
   - name: busybox
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/busybox
+    newName: registry.bakewise.ai/bakery-admin/busybox
     newTag: "1.36"
   - name: curlimages/curl
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/curlimages-curl
+    newName: registry.bakewise.ai/bakery-admin/curlimages_curl
     newTag: latest
   - name: bitnami/kubectl
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/bitnami-kubectl
+    newName: registry.bakewise.ai/bakery-admin/bitnami_kubectl
     newTag: latest
 
   # Alpine variants
   - name: alpine
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/alpine
+    newName: registry.bakewise.ai/bakery-admin/alpine
     newTag: "3.19"
   - name: alpine/git
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/alpine-git
+    newName: registry.bakewise.ai/bakery-admin/alpine_git
     newTag: 2.43.0
   # CI/CD images (cached in gitea registry for consistency)
   - name: gcr.io/kaniko-project/executor
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/gcr.io-kaniko-project-executor
+    newName: registry.bakewise.ai/bakery-admin/gcr.io_kaniko-project_executor
     newTag: v1.23.0
   - name: gcr.io/go-containerregistry/crane
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/gcr.io-go-containerregistry-crane
+    newName: registry.bakewise.ai/bakery-admin/gcr.io_go-containerregistry_crane
     newTag: latest
   - name: registry.k8s.io/kustomize/kustomize
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/registry.k8s.io-kustomize-kustomize
+    newName: registry.bakewise.ai/bakery-admin/registry.k8s.io_kustomize_kustomize
     newTag: v5.3.0
   # Storage images
   - name: minio/minio
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/minio-minio
+    newName: registry.bakewise.ai/bakery-admin/minio_minio
     newTag: RELEASE.2024-11-07T00-52-20Z
   - name: minio/mc
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/minio-mc
+    newName: registry.bakewise.ai/bakery-admin/minio_mc
     newTag: RELEASE.2024-11-17T19-35-25Z
   # NOTE: nominatim image override removed - nominatim is now deployed via Helm
   # Python base image
   - name: python
-    newName: gitea-http.gitea.svc.cluster.local:3000/bakery-admin/python
+    newName: registry.bakewise.ai/bakery-admin/python
     newTag: 3.11-slim
 
+# Replica counts for single-node VPS deployment (8 CPU cores)
+# Set to 1 replica per service to fit resource constraints
+# Scale up when adding more nodes to the cluster
 replicas:
   - name: auth-service
-    count: 3
+    count: 1
   - name: tenant-service
-    count: 2
+    count: 1
   - name: training-service
-    count: 3  # Safe with MinIO storage - no PVC conflicts
+    count: 1
   - name: forecasting-service
-    count: 3
+    count: 1
   - name: sales-service
-    count: 2
+    count: 1
   - name: external-service
-    count: 2
+    count: 1
   - name: notification-service
-    count: 3
+    count: 1
   - name: inventory-service
-    count: 2
+    count: 1
   - name: recipes-service
-    count: 2
+    count: 1
   - name: suppliers-service
-    count: 2
+    count: 1
   - name: pos-service
-    count: 2
+    count: 1
   - name: orders-service
-    count: 3
+    count: 1
   - name: production-service
-    count: 2
+    count: 1
   - name: alert-processor
-    count: 3
+    count: 1
   - name: procurement-service
-    count: 2
+    count: 1
   - name: orchestrator-service
-    count: 2
+    count: 1
   - name: ai-insights-service
-    count: 2
+    count: 1
   - name: gateway
-    count: 3
+    count: 1
   - name: frontend
-    count: 2
+    count: 1