From 38b96ebecc8626ae9ebf3b81d368b32173b00ca4 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Mon, 13 Jul 2026 17:26:31 +0300
Subject: [PATCH] ++ patch vault workloads to generic in d8-ugmk-prod

---
 .../infrastructure/patches/vault.yaml         | 46 ++++++++++++++++---
 1 file changed, 39 insertions(+), 7 deletions(-)

diff --git a/clusters/d8-ugmk-prod/infrastructure/patches/vault.yaml b/clusters/d8-ugmk-prod/infrastructure/patches/vault.yaml
index 4972162..a0293e6 100644
--- a/clusters/d8-ugmk-prod/infrastructure/patches/vault.yaml
+++ b/clusters/d8-ugmk-prod/infrastructure/patches/vault.yaml
@@ -6,16 +6,48 @@ metadata:
 spec:
   interval: 5m
   timeout: 10m
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: apps
+              version: v1
+              kind: StatefulSet
+              name: vault-vault-contour
+              namespace: vault
+            patch: |-
+              apiVersion: apps/v1
+              kind: StatefulSet
+              metadata:
+                name: vault-vault-contour
+                namespace: vault
+              spec:
+                template:
+                  spec:
+                    nodeSelector:
+                      node.deckhouse.io/group: generic
+                    tolerations: []
+          - target:
+              group: apps
+              version: v1
+              kind: Deployment
+              name: vault-vault-contour-agent-injector
+              namespace: vault
+            patch: |-
+              apiVersion: apps/v1
+              kind: Deployment
+              metadata:
+                name: vault-vault-contour-agent-injector
+                namespace: vault
+              spec:
+                template:
+                  spec:
+                    nodeSelector:
+                      node.deckhouse.io/group: generic
+                    tolerations: []
   values:
     imagePullSecrets:
       - name: regcred
-    injector:
-      nodeSelector:
-        node.deckhouse.io/group: generic
-      tolerations: []
     server:
       dataStorage:
         storageClass: local-path
-      nodeSelector:
-        node.deckhouse.io/group: generic
-      tolerations: []