- TLS Refactoring

documentation/Production Setup/cluster-install.md

@@ -467,20 +467,14 @@ kubectl -n tools port-forward svc/pgadmin-pgadmin4 8080:80
 
 ### Phase 9: Enable Scaleway Registry
 
-1) Create docker pull secret via External Secrets (once):
+#### Create Scaleway Registry Secret
+Create docker pull secret via External Secrets (once):
 ```bash
 kubectl apply -f scaleway/manifests/base/secrets/scaleway-registry-secret.yaml
 kubectl -n eveai-staging get secret scaleway-registry-cred -o yaml | grep "type: kubernetes.io/dockerconfigjson"
 ```
-2) Use the staging overlay to deploy apps with registry rewrite and imagePullSecrets:
-```bash
-kubectl apply -k scaleway/manifests/overlays/staging/
-```
-Notes:
-- Base manifests keep generic images (josakola/...). The overlay rewrites them to rg.fr-par.scw.cloud/eveai-staging/josakola/...:staging and adds imagePullSecrets to all Pods.
-- Staging uses imagePullPolicy: Always, so new pushes to :staging are pulled automatically.
 
-### Phase 10: Ops Jobs Invocation (if required)
+#### Ops Jobs Invocation (if required)
 
 Run the DB ops scripts manually in order. Each manifest uses generateName; use kubectl create.
 
@@ -510,9 +504,14 @@ kubectl -n eveai-staging get jobs
 kubectl -n eveai-staging logs job/<created-job-name>
 ```
 
-### Phase 11: Application Services Deployment
-
-
+#### Application Services Deployment
+Use the staging overlay to deploy apps with registry rewrite and imagePullSecrets:
+```bash
+kubectl apply -k scaleway/manifests/overlays/staging/
+```
+Notes:
+- Base manifests keep generic images (josakola/...). The overlay rewrites them to rg.fr-par.scw.cloud/eveai-staging/josakola/...:staging and adds imagePullSecrets to all Pods.
+- Staging uses imagePullPolicy: Always, so new pushes to :staging are pulled automatically.
 
 ## Verification and Testing
 

documentation/generating_codes.md

@@ -0,0 +1,8 @@
+# Generating codes
+
+## API_ENCRYPTION_KEY
+
+```python
+from cryptography.fernet import Fernet; 
+print(Fernet.generate_key().decode())
+```