diff --git a/apps/control-interface/base/admin-frontend.yaml b/apps/control-interface/base/admin-frontend.yaml
new file mode 100644
index 0000000..67cd18f
--- /dev/null
+++ b/apps/control-interface/base/admin-frontend.yaml
@@ -0,0 +1,113 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: admin-frontend
+  namespace: control-interface
+
+spec:
+  interval: 10m
+
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+
+  install:
+    remediation:
+      retries: 3
+
+  upgrade:
+    remediation:
+      retries: 3
+
+  values:
+    global:
+      env: _default
+
+    services:
+      admin-frontend:
+        enabled: true
+
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/admin-frontend:contour_9dc27b40
+          pullPolicy:
+            _default: IfNotPresent
+
+        deployment:
+          enabled: true
+
+          name:
+            _default: admin-frontend
+
+          replicaCount:
+            _default: 1
+
+          port:
+            _default: 80
+
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 100Mi
+
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+
+        service:
+          enabled: true
+
+          name:
+            _default: admin-frontend-svc
+
+          type:
+            _default: ClusterIP
+
+          port:
+            _default: 8080
+
+          targetPort:
+            _default: 80
+
+          portName:
+            _default: http
+
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+
+        podAnnotations:
+          _default:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411"
+            proxy.istio.io/config: |-
+              tracing:
+                sampling: 100
+                zipkin:
+                  address: signoz-otel-collector-external.signoz.svc.cluster.local:9411
+                custom_tags:
+                  k8s.pod.name:
+                    environment:
+                      name: POD_NAME
+                  k8s.namespace.name:
+                    environment:
+                      name: POD_NAMESPACE
+                  k8s.pod.ip:
+                    environment:
+                      name: INSTANCE_IP
+
+        commitSha: ""
+        gitlabUri: ""
+        gitlabJobUrl: ""
+        owner: ""
diff --git a/apps/control-interface/base/kustomization.yaml b/apps/control-interface/base/kustomization.yaml
index b60836b..1e267f3 100644
--- a/apps/control-interface/base/kustomization.yaml
+++ b/apps/control-interface/base/kustomization.yaml
@@ -4,4 +4,5 @@ kind: Kustomization
 namespace: control-interface
 resources:
   - helmrelease.yaml
+  - admin-frontend.yaml
 
diff --git a/infrastructure/istio-config/vad/istio-config.yaml b/infrastructure/istio-config/vad/istio-config.yaml
index 52cb7fa..db39d94 100644
--- a/infrastructure/istio-config/vad/istio-config.yaml
+++ b/infrastructure/istio-config/vad/istio-config.yaml
@@ -399,6 +399,19 @@ spec:
                   rewrite: /
                   service: frontend-svc.control-interface.svc.cluster.local
                   port: 8080
+            admin-frontend:
+              name: admin-frontend-virt-service
+              namespace: default
+              hosts:
+                - sarex.vadroad.ru
+              gateways:
+                - default/platform-gateway
+              routes:
+                - path:
+                    prefix: /admin-frontend/static/
+                  rewrite: /
+                  service: admin-frontend-svc.control-interface.svc.cluster.local
+                  port: 8080
             s3-proxy-media:
               name: s3-proxy-media-virt-service
               namespace: default