From 48f7934699bc5df452d78e2d8b0cf50fe9647837 Mon Sep 17 00:00:00 2001
From: ivan <ivan@MacBook-Air-som-tillhor-ivan.local>
Date: Fri, 11 Sep 2026 17:18:05 +0500
Subject: [PATCH] =?UTF-8?q?++=20sarex-contour:=20rabbitmq=20=E2=80=94=20?=
 =?UTF-8?q?=D0=B2=D1=8B=D1=80=D0=B5=D0=B7=D0=B0=D1=82=D1=8C=20Certificate/?=
 =?UTF-8?q?Gateway/VirtualService?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

cert-manager в sarex-contour не раскатан, chart рендерит Certificate/
Gateway/VirtualService для ingress несмотря на values:null (как и в
vad/d8-ugmk-prod) — install падал на "no matches for kind Certificate".
Тот же postRenderer $patch:delete, что у vad.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 .../rabbitmq/sarex-contour/rabbitmq.yaml      | 45 +++++++++++++++++++
 1 file changed, 45 insertions(+)

diff --git a/infrastructure/rabbitmq/sarex-contour/rabbitmq.yaml b/infrastructure/rabbitmq/sarex-contour/rabbitmq.yaml
index ba24e8f..35ebbfd 100644
--- a/infrastructure/rabbitmq/sarex-contour/rabbitmq.yaml
+++ b/infrastructure/rabbitmq/sarex-contour/rabbitmq.yaml
@@ -6,6 +6,51 @@ metadata:
 spec:
   interval: 5m
   timeout: 10m
+  postRenderers:
+    # cert-manager в sarex-contour не раскатан — chart всё равно рендерит
+    # Certificate/Gateway/VirtualService для ingress (values: null это не
+    # гасит, см. те же патчи в overlay vad/d8-ugmk-prod), вырезаем явно.
+    - kustomize:
+        patches:
+          - target:
+              group: cert-manager.io
+              version: v1
+              kind: Certificate
+              namespace: gateway
+              name: rmq-tls
+            patch: |-
+              $patch: delete
+              apiVersion: cert-manager.io/v1
+              kind: Certificate
+              metadata:
+                name: rmq-tls
+                namespace: gateway
+          - target:
+              group: networking.istio.io
+              version: v1beta1
+              kind: Gateway
+              namespace: gateway
+              name: rmq-gateway
+            patch: |-
+              $patch: delete
+              apiVersion: networking.istio.io/v1beta1
+              kind: Gateway
+              metadata:
+                name: rmq-gateway
+                namespace: gateway
+          - target:
+              group: networking.istio.io
+              version: v1
+              kind: VirtualService
+              namespace: rabbitmq
+              name: rmq-virt-service
+            patch: |-
+              $patch: delete
+              apiVersion: networking.istio.io/v1
+              kind: VirtualService
+              metadata:
+                name: rmq-virt-service
+                namespace: rabbitmq
   values:
     global:
       security: