Imporve the infra

Tiltfile

@@ -6,8 +6,20 @@
 #   - Strong 32-character passwords with PersistentVolumeClaims
 #   - PostgreSQL pgcrypto extension and audit logging
 #   - Organized resource dependencies and live-reload capabilities
+#   - Local registry for faster image builds and deployments
 # =============================================================================
 
+# =============================================================================
+# TILT CONFIGURATION
+# =============================================================================
+
+# Ensure we're running in the correct context
+allow_k8s_contexts('kind-bakery-ia-local')
+
+# Use local registry for faster builds and deployments
+# This registry is created by kubernetes_restart.sh script
+default_registry('localhost:5001')
+
 # =============================================================================
 # SECURITY & INITIAL SETUP
 # =============================================================================
@@ -94,6 +106,32 @@ local_resource(
     labels=['00-security']
 )
 
+# Install and verify cert-manager
+local_resource(
+    'cert-manager-install',
+    cmd='''
+        echo "📦 Installing cert-manager..."
+
+        # Check if cert-manager CRDs already exist
+        if kubectl get crd certificates.cert-manager.io >/dev/null 2>&1; then
+            echo "  ✅ cert-manager CRDs already installed"
+        else
+            echo "  Installing cert-manager v1.13.2..."
+            kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.13.2/cert-manager.yaml
+
+            echo "  Waiting for cert-manager to be ready..."
+            kubectl wait --for=condition=available --timeout=120s deployment/cert-manager -n cert-manager
+            kubectl wait --for=condition=available --timeout=120s deployment/cert-manager-webhook -n cert-manager
+
+            echo "  ✅ cert-manager installed and ready"
+        fi
+
+        echo "✅ cert-manager verification complete"
+    ''',
+    labels=['00-security'],
+    auto_init=True
+)
+
 # =============================================================================
 # LOAD KUBERNETES MANIFESTS
 # =============================================================================