Bounty Submission: Universal One-Click Deployment (Docker + K8s + Tilt) for FinMind

[damiehttp]

Universal Deployment System for FinMind

44 new files implementing production-grade deployment across all mandatory platforms.

Kubernetes (Full Stack)

• Helm charts with backend, frontend, PostgreSQL, Redis deployments
• HPA autoscaling (v2) — backend 2-10 pods (CPU+memory), frontend 2-8 pods
• Ingress with TLS-ready config and cert-manager annotation support
• Secret management via K8s Secrets (with secrets.create: false for External Secrets Operator)
• Health probes (liveness + readiness) on all components
• Prometheus annotations + optional ServiceMonitor for Prometheus Operator
• Init container for database migration (init-db)
• PVC for PostgreSQL persistence

Tilt (Local K8s Dev)

• Tiltfile with live-reload for backend and frontend
• Automatic secret creation from .env
• Port-forwarding for all services
• Manual triggers for tests and DB init

PaaS One-Click Deploy

Platform	Config	Type
Railway	railway.toml	Full stack
Heroku	heroku.yml + app.json	Full stack + Deploy button
DigitalOcean	do-app.yaml	Full stack with managed DBs
Render	render.yaml	Blueprint with managed DBs
Fly.io	fly.toml	Full stack with release_command
Netlify	netlify.toml	Frontend (SPA)
Vercel	vercel.json	Frontend (SPA)

Cloud Providers

Provider	Config	Features
AWS ECS Fargate	CloudFormation	ALB, auto-scaling 2-10, CloudWatch, SSM
GCP Cloud Run	Deploy script	Cloud Build, Secret Manager, auto-scaling 0-10
Azure Container Apps	Deploy script	PostgreSQL Flexible Server, Redis Cache

Runtime Verification

All deployments target:

• ✅ Frontend reachable (nginx serving SPA)
• ✅ Backend health at /health
• ✅ DB + Redis connected (health check verifies)
• ✅ Auth flows (JWT + secret management)
• ✅ Core modules (Flask app with full middleware stack)

Closes #144