++

apps/iam/base/backend.yaml

@@ -102,6 +102,23 @@ spec:
           name:
             _default: regcred
 
+        volumes:
+          _default:
+            - name: iam-zitadel-org-rules
+              mountPath:
+                _default: /config/zitadel/org-rules-prod.json
+              subPath:
+                _default: org-rules-prod.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: iam-zitadel-org-rules
+                items:
+                  - key: org-rules-prod.json
+                    path:
+                      _default: org-rules-prod.json
+
         labels:
           monitoring: prometheus
 
@@ -132,11 +149,11 @@ spec:
 
           - name: ZITADEL_ENABLED
             value:
-              _default: "false"
+              _default: "true"
 
           - name: ZITADEL_HOST
             value:
-              _default: "https://login.sarex.io"
+              _default: "https://sarex-login.uralmine.com"
 
           - name: ZITADEL_ORG_RULES_FILE
             value:

apps/iam/base/kustomization.yaml

@@ -5,3 +5,4 @@ namespace: iam
 resources:
   - namespace.yaml
   - backend.yaml
+  - zitadel-org-rules-configmap.yaml

apps/iam/base/zitadel-org-rules-configmap.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: iam-zitadel-org-rules
+  namespace: iam
+data:
+  org-rules-prod.json: |
+    {
+      "default_org_id": "383923292894987370",
+      "rules": []
+    }

apps/processing/base/engine-low.yaml

@@ -42,7 +42,8 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/workflows-engine:contour_a03d37da
+            _default: cr.yandex/crp3ccidau046kdj8g9q/workflows-engine:contour_a03d37da-dirty
+
           pullPolicy:
             _default: IfNotPresent