From a4f1424403cb4e6fdadffef6e54dc57c9944bece Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Mon, 3 Aug 2026 10:56:18 +0300
Subject: [PATCH] ++ move uralmine service domains up one level

---
 .../istio-ingress/certificate.yaml            |  3 +--
 .../camunda/d8-ugmk-prod/camunda.yaml         | 10 ++++----
 .../d8-ugmk-prod/istio-config.yaml            | 24 +++++++++----------
 3 files changed, 18 insertions(+), 19 deletions(-)

diff --git a/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml b/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml
index 6fb5625..d95d380 100644
--- a/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml
+++ b/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml
@@ -4,9 +4,8 @@ metadata:
   name: sarex-wildcard
   namespace: d8-ingress-istio
 spec:
-  commonName: "*.sarex-k8s.uralmine.com"
+  commonName: "*.uralmine.com"
   dnsNames:
-    - "*.sarex-k8s.uralmine.com"
     - "*.uralmine.com"
   issuerRef:
     group: cert-manager.io
diff --git a/infrastructure/camunda/d8-ugmk-prod/camunda.yaml b/infrastructure/camunda/d8-ugmk-prod/camunda.yaml
index 30d0764..19a4cf5 100644
--- a/infrastructure/camunda/d8-ugmk-prod/camunda.yaml
+++ b/infrastructure/camunda/d8-ugmk-prod/camunda.yaml
@@ -164,15 +164,15 @@ spec:
           - name: regcred
       identity:
         auth:
-          publicIssuerUrl: "https://camunda-keycloak.sarex-k8s.uralmine.com/auth/realms/camunda-platform"
+          publicIssuerUrl: "https://camunda-keycloak.uralmine.com/auth/realms/camunda-platform"
           identity:
-            redirectUrl: "https://camunda-identity.sarex-k8s.uralmine.com"
+            redirectUrl: "https://camunda-identity.uralmine.com"
           operate:
-            redirectUrl: "https://camunda-operate.sarex-k8s.uralmine.com"
+            redirectUrl: "https://camunda-operate.uralmine.com"
           tasklist:
-            redirectUrl: "https://camunda-tasklist.sarex-k8s.uralmine.com"
+            redirectUrl: "https://camunda-tasklist.uralmine.com"
           optimize:
-            redirectUrl: "https://camunda-optimize.sarex-k8s.uralmine.com"
+            redirectUrl: "https://camunda-optimize.uralmine.com"
           webModeler:
             redirectUrl: "https://camunda-web-modeler.contour.infra.sarex.tech"
           console:
diff --git a/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml b/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
index b181dd6..7acc76b 100644
--- a/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
+++ b/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
@@ -23,12 +23,12 @@ spec:
                 - hosts:
                     - sarex.uralmine.com
                     - sarex-login.uralmine.com
-                    - rabbitmq.sarex-k8s.uralmine.com
-                    - camunda-keycloak.sarex-k8s.uralmine.com
-                    - camunda-identity.sarex-k8s.uralmine.com
-                    - camunda-operate.sarex-k8s.uralmine.com
-                    - camunda-tasklist.sarex-k8s.uralmine.com
-                    - camunda-optimize.sarex-k8s.uralmine.com
+                    - rabbitmq.uralmine.com
+                    - camunda-keycloak.uralmine.com
+                    - camunda-identity.uralmine.com
+                    - camunda-operate.uralmine.com
+                    - camunda-tasklist.uralmine.com
+                    - camunda-optimize.uralmine.com
                   tls:
                     credentialName: istio-ingress-tls
           virtualServices:
@@ -383,7 +383,7 @@ spec:
             camunda-keycloak:
               namespace: default
               hosts:
-                - camunda-keycloak.sarex-k8s.uralmine.com
+                - camunda-keycloak.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -394,7 +394,7 @@ spec:
             camunda-identity:
               namespace: default
               hosts:
-                - camunda-identity.sarex-k8s.uralmine.com
+                - camunda-identity.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -405,7 +405,7 @@ spec:
             camunda-operate:
               namespace: default
               hosts:
-                - camunda-operate.sarex-k8s.uralmine.com
+                - camunda-operate.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -416,7 +416,7 @@ spec:
             camunda-tasklist:
               namespace: default
               hosts:
-                - camunda-tasklist.sarex-k8s.uralmine.com
+                - camunda-tasklist.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -427,7 +427,7 @@ spec:
             camunda-optimize:
               namespace: default
               hosts:
-                - camunda-optimize.sarex-k8s.uralmine.com
+                - camunda-optimize.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
@@ -438,7 +438,7 @@ spec:
             rabbitmq:
               namespace: default
               hosts:
-                - rabbitmq.sarex-k8s.uralmine.com
+                - rabbitmq.uralmine.com
               gateways:
                 - default/platform-gateway
               routes: