From 8a0eee6538ffdab727aaad7d66980d94d9e00b69 Mon Sep 17 00:00:00 2001
From: ivan <ivan@MacBook-Air-som-tillhor-ivan.local>
Date: Mon, 3 Aug 2026 20:41:38 +0500
Subject: [PATCH] ++

---
 .../istio-ingress/certificate.yaml            |  3 ++-
 .../camunda/d8-ugmk-prod/camunda.yaml         | 10 ++++----
 .../d8-ugmk-prod/istio-config.yaml            | 24 +++++++++----------
 3 files changed, 19 insertions(+), 18 deletions(-)

diff --git a/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml b/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml
index d95d380..6fb5625 100644
--- a/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml
+++ b/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml
@@ -4,8 +4,9 @@ metadata:
   name: sarex-wildcard
   namespace: d8-ingress-istio
 spec:
-  commonName: "*.uralmine.com"
+  commonName: "*.sarex-k8s.uralmine.com"
   dnsNames:
+    - "*.sarex-k8s.uralmine.com"
     - "*.uralmine.com"
   issuerRef:
     group: cert-manager.io
diff --git a/infrastructure/camunda/d8-ugmk-prod/camunda.yaml b/infrastructure/camunda/d8-ugmk-prod/camunda.yaml
index 2601400..30d0764 100644
--- a/infrastructure/camunda/d8-ugmk-prod/camunda.yaml
+++ b/infrastructure/camunda/d8-ugmk-prod/camunda.yaml
@@ -164,15 +164,15 @@ spec:
           - name: regcred
       identity:
         auth:
-          publicIssuerUrl: "https://sarex-camunda-keycloak.uralmine.com/auth/realms/camunda-platform"
+          publicIssuerUrl: "https://camunda-keycloak.sarex-k8s.uralmine.com/auth/realms/camunda-platform"
           identity:
-            redirectUrl: "https://sarex-camunda-identity.uralmine.com"
+            redirectUrl: "https://camunda-identity.sarex-k8s.uralmine.com"
           operate:
-            redirectUrl: "https://sarex-camunda-operate.uralmine.com"
+            redirectUrl: "https://camunda-operate.sarex-k8s.uralmine.com"
           tasklist:
-            redirectUrl: "https://sarex-camunda-tasklist.uralmine.com"
+            redirectUrl: "https://camunda-tasklist.sarex-k8s.uralmine.com"
           optimize:
-            redirectUrl: "https://sarex-camunda-optimize.uralmine.com"
+            redirectUrl: "https://camunda-optimize.sarex-k8s.uralmine.com"
           webModeler:
             redirectUrl: "https://camunda-web-modeler.contour.infra.sarex.tech"
           console:
diff --git a/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml b/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
index f50c455..b181dd6 100644
--- a/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
+++ b/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
@@ -23,12 +23,12 @@ spec:
                 - hosts:
                     - sarex.uralmine.com
                     - sarex-login.uralmine.com
-                    - sarex-rabbitmq.uralmine.com
-                    - sarex-camunda-keycloak.uralmine.com
-                    - sarex-camunda-identity.uralmine.com
-                    - sarex-camunda-operate.uralmine.com
-                    - sarex-camunda-tasklist.uralmine.com
-                    - sarex-camunda-optimize.uralmine.com
+                    - rabbitmq.sarex-k8s.uralmine.com
+                    - camunda-keycloak.sarex-k8s.uralmine.com
+                    - camunda-identity.sarex-k8s.uralmine.com
+                    - camunda-operate.sarex-k8s.uralmine.com
+                    - camunda-tasklist.sarex-k8s.uralmine.com
+                    - camunda-optimize.sarex-k8s.uralmine.com
                   tls:
                     credentialName: istio-ingress-tls
           virtualServices:
@@ -383,7 +383,7 @@ spec:
             camunda-keycloak:
               namespace: default
               hosts:
-                - sarex-camunda-keycloak.uralmine.com
+                - camunda-keycloak.sarex-k8s.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -394,7 +394,7 @@ spec:
             camunda-identity:
               namespace: default
               hosts:
-                - sarex-camunda-identity.uralmine.com
+                - camunda-identity.sarex-k8s.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -405,7 +405,7 @@ spec:
             camunda-operate:
               namespace: default
               hosts:
-                - sarex-camunda-operate.uralmine.com
+                - camunda-operate.sarex-k8s.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -416,7 +416,7 @@ spec:
             camunda-tasklist:
               namespace: default
               hosts:
-                - sarex-camunda-tasklist.uralmine.com
+                - camunda-tasklist.sarex-k8s.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -427,7 +427,7 @@ spec:
             camunda-optimize:
               namespace: default
               hosts:
-                - sarex-camunda-optimize.uralmine.com
+                - camunda-optimize.sarex-k8s.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -438,7 +438,7 @@ spec:
             rabbitmq:
               namespace: default
               hosts:
-                - sarex-rabbitmq.uralmine.com
+                - rabbitmq.sarex-k8s.uralmine.com
               gateways:
                 - default/platform-gateway
               routes: