From 55c9f573c309f5742aebd0f626bd6a73b3508934 Mon Sep 17 00:00:00 2001
From: ivan <ivan@MacBook-Air-som-tillhor-ivan.local>
Date: Mon, 3 Aug 2026 15:30:37 +0500
Subject: [PATCH] ++

---
 apps/iam/base/backend.yaml                    | 21 +++++++++++++++++--
 apps/iam/base/kustomization.yaml              |  1 +
 .../iam/base/zitadel-org-rules-configmap.yaml | 12 +++++++++++
 apps/processing/base/engine-low.yaml          |  3 ++-
 4 files changed, 34 insertions(+), 3 deletions(-)
 create mode 100644 apps/iam/base/zitadel-org-rules-configmap.yaml

diff --git a/apps/iam/base/backend.yaml b/apps/iam/base/backend.yaml
index df0feef..024c62e 100644
--- a/apps/iam/base/backend.yaml
+++ b/apps/iam/base/backend.yaml
@@ -102,6 +102,23 @@ spec:
           name:
             _default: regcred
 
+        volumes:
+          _default:
+            - name: iam-zitadel-org-rules
+              mountPath:
+                _default: /config/zitadel/org-rules-prod.json
+              subPath:
+                _default: org-rules-prod.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: iam-zitadel-org-rules
+                items:
+                  - key: org-rules-prod.json
+                    path:
+                      _default: org-rules-prod.json
+
         labels:
           monitoring: prometheus
 
@@ -132,11 +149,11 @@ spec:
 
           - name: ZITADEL_ENABLED
             value:
-              _default: "false"
+              _default: "true"
 
           - name: ZITADEL_HOST
             value:
-              _default: "https://login.sarex.io"
+              _default: "https://sarex-login.uralmine.com"
 
           - name: ZITADEL_ORG_RULES_FILE
             value:
diff --git a/apps/iam/base/kustomization.yaml b/apps/iam/base/kustomization.yaml
index d99dded..65128fb 100644
--- a/apps/iam/base/kustomization.yaml
+++ b/apps/iam/base/kustomization.yaml
@@ -5,3 +5,4 @@ namespace: iam
 resources:
   - namespace.yaml
   - backend.yaml
+  - zitadel-org-rules-configmap.yaml
diff --git a/apps/iam/base/zitadel-org-rules-configmap.yaml b/apps/iam/base/zitadel-org-rules-configmap.yaml
new file mode 100644
index 0000000..56bfc37
--- /dev/null
+++ b/apps/iam/base/zitadel-org-rules-configmap.yaml
@@ -0,0 +1,12 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: iam-zitadel-org-rules
+  namespace: iam
+data:
+  org-rules-prod.json: |
+    {
+      "default_org_id": "383923292894987370",
+      "rules": []
+    }
diff --git a/apps/processing/base/engine-low.yaml b/apps/processing/base/engine-low.yaml
index de487c9..76ad5bc 100644
--- a/apps/processing/base/engine-low.yaml
+++ b/apps/processing/base/engine-low.yaml
@@ -42,7 +42,8 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/workflows-engine:contour_a03d37da
+            _default: cr.yandex/crp3ccidau046kdj8g9q/workflows-engine:contour_a03d37da-dirty
+
           pullPolicy:
             _default: IfNotPresent