Fix/cluster vm deployment

[raphael-frank]

I fixed the deployment issues we had and moved our vm to fabians account.

Summary by CodeRabbit

• New Features

  • Production and local environment settings now target the Poland Central region, including updated service URLs and authentication endpoints.
  • Deployment settings now include configurable rollout timing and a revised VM size default.

• Bug Fixes

  • Improved Kubernetes deployment checks to fail fast when cluster credentials are invalid or expired.
  • Updated Terraform behavior to avoid unintended subnet changes during applies.
  • Made the AI helper load resources lazily, improving startup reliability and reducing test/setup requirements.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: facb0006-b66e-4645-80fd-a341d868cadc

📥 Commits

Reviewing files that changed from the base of the PR and between 70055b1 and 2dec3c0.

📒 Files selected for processing (10)

• .github/workflows/cd.yml
• README.md
• infra/docker-compose.yml
• infra/helm/team-devoops/files/realm-config.json
• infra/helm/team-devoops/templates/deployment.yaml
• infra/keycloak/realm-config.json
• infra/terraform/main.tf
• infra/terraform/variables.tf
• services/py-genai-helper/conftest.py
• services/py-genai-helper/rag.py

---

📝 Walkthrough

Walkthrough

This PR migrates Azure infrastructure from UAE North to Poland Central across Terraform, docker-compose, Keycloak realm configs, and README, adds a Terraform lifecycle rule for the virtual network subnet, sets a Helm deployment progressDeadlineSeconds default, hardens the CD workflow with a cluster auth check, and switches RAG vector store initialization to lazy/cached loading.

Changes

Azure Region Migration and Infra Adjustments

Layer / File(s)	Summary
Terraform region, VM size, and state backend infra/terraform/variables.tf, infra/terraform/main.tf	location defaults to polandcentral, vm_size defaults to Standard_D2as_v4, remote state storage_account_name updated, and a lifecycle { ignore_changes = [subnet] } block added to the virtual network resource.
Docker Compose service hostnames and issuer URLs infra/docker-compose.yml	Keycloak issuer URLs, OIDC settings, and Traefik Host(...) rules updated across py-genai-helper, organization/member/event/feedback/finance/letter services, api-docs, web-client, traefik-forward-auth, and keycloak to use the polandcentral domain.
Keycloak realm redirect URIs and web origins infra/helm/team-devoops/files/realm-config.json, infra/keycloak/realm-config.json	Client redirect URIs and web origins updated from uaenorth to polandcentral domain in both realm config files.
Helm deployment progressDeadlineSeconds infra/helm/team-devoops/templates/deployment.yaml	Adds progressDeadlineSeconds to each rendered Deployment spec, defaulting to 600.
README updates for Poland Central README.md	Updates production live URL, region, Terraform storage account name, required Azure permissions, and admin console URL.

CD Workflow Hardening and RAG Lazy Initialization

Layer / File(s)	Summary
CD workflow auth verification and secret apply .github/workflows/cd.yml	Adds a cluster authentication pre-flight check and applies the genai-env secret with --validate=false.
Lazy cached vector store initialization services/py-genai-helper/rag.py, services/py-genai-helper/conftest.py	Introduces a memoized _get_vector_store() deferring FAISS index construction until first use; updates get_rag_agent() and the test docstring accordingly.

Estimated code review effort: 2 (Simple) | ~15 minutes

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/cluster-vm-deployment

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}