Add signoz

infrastructure/kubernetes/README.md

@@ -4,7 +4,7 @@ This directory contains Kubernetes manifests for deploying the Bakery IA platfor
 
 ## Quick Start
 
-Deploy the entire platform with these 5 commands:
+Deploy the entire platform with these 4 commands:
 
 ```bash
 # 1. Start Colima with adequate resources
@@ -17,15 +17,14 @@ kind create cluster --config kind-config.yaml
 kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
 kubectl wait --namespace ingress-nginx --for=condition=ready pod --selector=app.kubernetes.io/component=controller --timeout=300s
 
-# 4. Configure permanent localhost access
-kubectl patch svc ingress-nginx-controller -n ingress-nginx -p '{"spec":{"type":"NodePort","ports":[{"name":"http","port":80,"targetPort":"http","nodePort":30080},{"name":"https","port":443,"targetPort":"https","nodePort":30443}]}}'
+# 4. Deploy with Tilt
+tilt up
 
-# 5. Deploy with Skaffold
-skaffold dev --profile=dev
-
-# 🎉 Access at: https://localhost
+# 🎉 Access at: http://localhost (or see Tilt for individual service ports)
 ```
 
+> **Note**: The kind-config.yaml already configures port mappings (30080→80, 30443→443) for localhost access, so no additional service patching is needed. The NGINX Ingress for Kind uses NodePort by default on those exact ports.
+
 ## Prerequisites
 
 Install the following tools on macOS:
@@ -100,11 +99,11 @@ Then access via:
 
 ### Start Development Environment
 ```bash
-# Start development mode with hot-reload
-skaffold dev --profile=dev
+# Start development mode with hot-reload using Tilt
+tilt up
 
-# Or one-time deployment
-skaffold run --profile=dev
+# Or start in background
+tilt up --stream
 ```
 
 ### Key Features
@@ -246,13 +245,39 @@ colima stop --profile k8s-local
 
 ### Restart Sequence
 ```bash
-# Post-restart startup
+# Post-restart startup (or use kubernetes_restart.sh script)
 colima start --cpu 6 --memory 12 --disk 120 --runtime docker --profile k8s-local
 kind create cluster --config kind-config.yaml
-skaffold dev --profile=dev
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
+kubectl wait --namespace ingress-nginx --for=condition=ready pod --selector=app.kubernetes.io/component=controller --timeout=300s
+tilt up
 ```
 
-## Production Considerations
+## Production Deployment
+
+### Production URLs
+
+The production environment uses the following domains:
+
+- **Main Application**: https://bakewise.ai
+  - Frontend application and all public pages
+  - API endpoints: https://bakewise.ai/api/v1/...
+
+- **Monitoring Stack**: https://monitoring.bakewise.ai
+  - Grafana: https://monitoring.bakewise.ai/grafana
+  - Prometheus: https://monitoring.bakewise.ai/prometheus
+  - Jaeger: https://monitoring.bakewise.ai/jaeger
+  - AlertManager: https://monitoring.bakewise.ai/alertmanager
+
+### Production Configuration
+
+The production overlay (`overlays/prod/`) includes:
+- **Domain Configuration**: bakewise.ai with Let's Encrypt certificates
+- **High Availability**: Multi-replica deployments (2-3 replicas per service)
+- **Enhanced Security**: Rate limiting, CORS restrictions, security headers
+- **Monitoring**: Full observability stack with Prometheus, Grafana, Jaeger
+
+### Production Considerations
 
 For production deployment:
 
@@ -263,6 +288,7 @@ For production deployment:
 - **External Secrets**: Use managed secret services
 - **TLS**: Production Let's Encrypt certificates
 - **CI/CD**: Automated deployment pipelines
+- **DNS**: Configure DNS A/CNAME records pointing to your cluster's load balancer
 
 ## Next Steps