From 4ae7a8286b81feda2e1c5e83e7d9789550a9a11b Mon Sep 17 00:00:00 2001
From: emelinda <emelin_d_a@mail.ru>
Date: Mon, 3 Aug 2026 16:08:12 +0300
Subject: [PATCH] feat(fluxcd): add Istio gateway HelmRelease configuration
 with kustomize patching in aero environment

---
 .../istio-gateway/aero/istio-gateway.yaml       | 17 +++++++++++++++++
 .../istio-gateway/aero/kustomization.yaml       |  5 +++++
 2 files changed, 22 insertions(+)
 create mode 100644 infrastructure/istio-gateway/aero/istio-gateway.yaml

diff --git a/infrastructure/istio-gateway/aero/istio-gateway.yaml b/infrastructure/istio-gateway/aero/istio-gateway.yaml
new file mode 100644
index 0000000..62897bc
--- /dev/null
+++ b/infrastructure/istio-gateway/aero/istio-gateway.yaml
@@ -0,0 +1,17 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: ingressgateway
+  namespace: istio-system
+spec:
+  interval: 5m
+  timeout: 10m
+  values:
+    # Ключ _internal_defaults_do_not_set — так значения именует сам чарт
+    # istio-gateway, это не ошибка.
+    _internal_defaults_do_not_set:
+      # Дефолт чарта — 3 реплики, но больше одной не влезает физически:
+      # под занимает hostPort 80/443, а nodeAffinity разрешает только
+      # control-plane, и такая нода в контуре одна (k3s-server). Остальные
+      # реплики висли бы в Pending навсегда. То же значение в yc-k8s-test.
+      replicaCount: 1
diff --git a/infrastructure/istio-gateway/aero/kustomization.yaml b/infrastructure/istio-gateway/aero/kustomization.yaml
index 736651a..6f39db7 100644
--- a/infrastructure/istio-gateway/aero/kustomization.yaml
+++ b/infrastructure/istio-gateway/aero/kustomization.yaml
@@ -3,3 +3,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ../base
+patches:
+  - path: istio-gateway.yaml
+    target:
+      kind: HelmRelease
+      name: ingressgateway