prod fixes

deploy/k8s/base/gateway-ingress.yaml

@@ -4,14 +4,9 @@ kind: Ingress
 metadata:
   name: gateway-ingress
   annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
     nginx.ingress.kubernetes.io/rewrite-target: /$1
 spec:
   ingressClassName: nginx
-  tls:
-  - hosts:
-    - dexorder.ai
-    secretName: gateway-tls
   rules:
   - host: dexorder.ai
     http:

deploy/k8s/prod/configs/flink-config.yaml

@@ -26,5 +26,5 @@ iceberg_table_prefix: "market"
 hadoop_conf_dir: "/etc/hadoop/conf"
 
 # Flink configuration
-flink_parallelism: 2
+flink_parallelism: 1
 flink_checkpoint_interval_ms: 60000

deploy/k8s/prod/configs/gateway-config.yaml

@@ -33,6 +33,7 @@ data:
       sandbox_image: git.dxod.org/dexorder/dexorder/ai-sandbox:latest
       sidecar_image: git.dxod.org/dexorder/dexorder/ai-lifecycle-sidecar:latest
       image_pull_policy: Always
+      storage_class: ceph-block
 
     # DragonflyDB (Redis-compatible, for hot storage and session management)
     redis:

deploy/k8s/prod/configs/relay-config.yaml

@@ -12,7 +12,7 @@ ingestor_work_port: 5555           # PUB - Distribute work with exchange prefix
 ingestor_response_port: 5556       # ROUTER - Receive responses from ingestors
 
 # Flink connection
-flink_market_data_endpoint: "tcp://flink-jobmanager:5557"  # XSUB - Subscribe to Flink market data
+flink_market_data_endpoint: "tcp://flink-jobmanager:5558"  # XSUB - Subscribe to Flink market data
 
 # Timeouts and limits
 request_timeout_secs: 30           # Timeout for pending client requests

deploy/k8s/prod/infrastructure.yaml

@@ -140,6 +140,8 @@ spec:
       labels:
         app: kafka
     spec:
+      securityContext:
+        fsGroup: 1001
       containers:
       - name: kafka
         image: apache/kafka:3.9.0
@@ -153,7 +155,7 @@ spec:
         - -c
         - |
           CLUSTER_ID="dexorder-prod-cluster"
-          LOG_DIR="/var/lib/kafka/data"
+          LOG_DIR="/var/lib/kafka/data/kraft-logs"
 
           # Ensure log directory exists
           mkdir -p $LOG_DIR
@@ -240,6 +242,8 @@ spec:
               key: password
         - name: POSTGRES_DB
           value: iceberg
+        - name: PGDATA
+          value: /var/lib/postgresql/data/pgdata
         volumeMounts:
         - name: postgres-data
           mountPath: /var/lib/postgresql/data