- Definition and Improvements to job-system

- Definition of k8s pods for application services

documentation/Production Setup/cluster-install.md

@@ -465,7 +465,22 @@ kubectl -n tools port-forward svc/pgadmin-pgadmin4 8080:80
 ### Phase 8: RedisInsight Tool Deployment
 
 
-### Phase 9: Ops Jobs Invocation (if required)
+### Phase 9: Enable Scaleway Registry
+
+1) Create docker pull secret via External Secrets (once):
+```bash
+kubectl apply -f scaleway/manifests/base/secrets/scaleway-registry-secret.yaml
+kubectl -n eveai-staging get secret scaleway-registry-cred -o yaml | grep "type: kubernetes.io/dockerconfigjson"
+```
+2) Use the staging overlay to deploy apps with registry rewrite and imagePullSecrets:
+```bash
+kubectl apply -k scaleway/manifests/overlays/staging/
+```
+Notes:
+- Base manifests keep generic images (josakola/...). The overlay rewrites them to rg.fr-par.scw.cloud/eveai-staging/josakola/...:staging and adds imagePullSecrets to all Pods.
+- Staging uses imagePullPolicy: Always, so new pushes to :staging are pulled automatically.
+
+### Phase 10: Ops Jobs Invocation (if required)
 
 Run the DB ops scripts manually in order. Each manifest uses generateName; use kubectl create.
 
@@ -489,9 +504,13 @@ kubectl create -f scaleway/manifests/base/applications/ops/jobs/06-verify-minima
 kubectl wait --for=condition=complete job -n eveai-staging -l job-type=db-verify-minimal --timeout=900s
 ```
 
+View logs (you can see the created job name as a result from the create command):
+```bash
+kubectl -n eveai-staging get jobs
+kubectl -n eveai-staging logs job/<created-job-name>
+```
 
-
-### Phase 10: Application Services Deployment
+### Phase 11: Application Services Deployment