From 9f582bdc841e48ef5ba93a0dd133723a709f1fd1 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Mon, 13 Jul 2026 21:11:55 +0300
Subject: [PATCH] fuhrer fixes

---
 .../infrastructure/patches/camunda.yaml       | 98 +++++++++++++++++++
 .../infrastructure/patches/rabbitmq.yaml      | 39 ++++++++
 .../infrastructure/patches/vault.yaml         | 17 ++++
 3 files changed, 154 insertions(+)

diff --git a/clusters/d8-ugmk-prod/infrastructure/patches/camunda.yaml b/clusters/d8-ugmk-prod/infrastructure/patches/camunda.yaml
index abe0424..bb3f593 100644
--- a/clusters/d8-ugmk-prod/infrastructure/patches/camunda.yaml
+++ b/clusters/d8-ugmk-prod/infrastructure/patches/camunda.yaml
@@ -49,6 +49,104 @@ spec:
               - op: add
                 path: /spec/template/spec/tolerations
                 value: []
+          - target:
+              group: apps
+              version: v1
+              kind: Deployment
+              namespace: camunda
+              name: camunda-connectors
+            patch: |-
+              - op: add
+                path: /spec/template/spec/nodeSelector
+                value:
+                  node.deckhouse.io/group: generic
+              - op: add
+                path: /spec/template/spec/tolerations
+                value: []
+          - target:
+              group: apps
+              version: v1
+              kind: Deployment
+              namespace: camunda
+              name: camunda-identity
+            patch: |-
+              - op: add
+                path: /spec/template/spec/nodeSelector
+                value:
+                  node.deckhouse.io/group: generic
+              - op: add
+                path: /spec/template/spec/tolerations
+                value: []
+          - target:
+              group: apps
+              version: v1
+              kind: Deployment
+              namespace: camunda
+              name: camunda-operate
+            patch: |-
+              - op: add
+                path: /spec/template/spec/nodeSelector
+                value:
+                  node.deckhouse.io/group: generic
+              - op: add
+                path: /spec/template/spec/tolerations
+                value: []
+          - target:
+              group: apps
+              version: v1
+              kind: Deployment
+              namespace: camunda
+              name: camunda-optimize
+            patch: |-
+              - op: add
+                path: /spec/template/spec/nodeSelector
+                value:
+                  node.deckhouse.io/group: generic
+              - op: add
+                path: /spec/template/spec/tolerations
+                value: []
+          - target:
+              group: apps
+              version: v1
+              kind: Deployment
+              namespace: camunda
+              name: camunda-tasklist
+            patch: |-
+              - op: add
+                path: /spec/template/spec/nodeSelector
+                value:
+                  node.deckhouse.io/group: generic
+              - op: add
+                path: /spec/template/spec/tolerations
+                value: []
+          - target:
+              group: apps
+              version: v1
+              kind: Deployment
+              namespace: camunda
+              name: camunda-zeebe-gateway
+            patch: |-
+              - op: add
+                path: /spec/template/spec/nodeSelector
+                value:
+                  node.deckhouse.io/group: generic
+              - op: add
+                path: /spec/template/spec/tolerations
+                value: []
+          - target:
+              group: apps
+              version: v1
+              kind: StatefulSet
+              namespace: camunda
+              name: camunda-zeebe
+            patch: |-
+              - op: add
+                path: /spec/template/spec/nodeSelector
+                value:
+                  node.deckhouse.io/group: generic
+              - op: add
+                path: /spec/template/spec/tolerations
+                value: []
   values:
     global:
       vault:
diff --git a/clusters/d8-ugmk-prod/infrastructure/patches/rabbitmq.yaml b/clusters/d8-ugmk-prod/infrastructure/patches/rabbitmq.yaml
index c1da47c..d9e3ee6 100644
--- a/clusters/d8-ugmk-prod/infrastructure/patches/rabbitmq.yaml
+++ b/clusters/d8-ugmk-prod/infrastructure/patches/rabbitmq.yaml
@@ -22,6 +22,45 @@ spec:
               - op: add
                 path: /spec/template/spec/tolerations
                 value: []
+          - target:
+              group: cert-manager.io
+              version: v1
+              kind: Certificate
+              namespace: gateway
+              name: rmq-tls
+            patch: |-
+              $patch: delete
+              apiVersion: cert-manager.io/v1
+              kind: Certificate
+              metadata:
+                name: rmq-tls
+                namespace: gateway
+          - target:
+              group: networking.istio.io
+              version: v1beta1
+              kind: Gateway
+              namespace: gateway
+              name: rmq-gateway
+            patch: |-
+              $patch: delete
+              apiVersion: networking.istio.io/v1beta1
+              kind: Gateway
+              metadata:
+                name: rmq-gateway
+                namespace: gateway
+          - target:
+              group: networking.istio.io
+              version: v1
+              kind: VirtualService
+              namespace: rabbitmq
+              name: rmq-virt-service
+            patch: |-
+              $patch: delete
+              apiVersion: networking.istio.io/v1
+              kind: VirtualService
+              metadata:
+                name: rmq-virt-service
+                namespace: rabbitmq
   values:
     global:
       security:
diff --git a/clusters/d8-ugmk-prod/infrastructure/patches/vault.yaml b/clusters/d8-ugmk-prod/infrastructure/patches/vault.yaml
index 6fe5725..437a7f8 100644
--- a/clusters/d8-ugmk-prod/infrastructure/patches/vault.yaml
+++ b/clusters/d8-ugmk-prod/infrastructure/patches/vault.yaml
@@ -6,6 +6,23 @@ metadata:
 spec:
   interval: 5m
   timeout: 10m
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: apps
+              version: v1
+              kind: StatefulSet
+              namespace: vault
+              name: vault-vault-contour
+            patch: |-
+              - op: replace
+                path: /spec/template/spec/nodeSelector
+                value:
+                  node.deckhouse.io/group: generic
+              - op: replace
+                path: /spec/template/spec/tolerations
+                value: []
   values:
     imagePullSecrets:
       - name: regcred