diff --git a/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml b/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml
index d95d380..6fb5625 100644
--- a/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml
+++ b/clusters/d8-ugmk-prod/istio-ingress/certificate.yaml
@@ -4,8 +4,9 @@ metadata:
   name: sarex-wildcard
   namespace: d8-ingress-istio
 spec:
-  commonName: "*.uralmine.com"
+  commonName: "*.sarex-k8s.uralmine.com"
   dnsNames:
+    - "*.sarex-k8s.uralmine.com"
     - "*.uralmine.com"
   issuerRef:
     group: cert-manager.io
diff --git a/infrastructure/camunda/d8-ugmk-prod/camunda.yaml b/infrastructure/camunda/d8-ugmk-prod/camunda.yaml
index 6c10a9e..30d0764 100644
--- a/infrastructure/camunda/d8-ugmk-prod/camunda.yaml
+++ b/infrastructure/camunda/d8-ugmk-prod/camunda.yaml
@@ -164,15 +164,15 @@ spec:
           - name: regcred
       identity:
         auth:
-          publicIssuerUrl: "https://camunda-keycloak.contour.infra.sarex.tech/auth/realms/camunda-platform"
+          publicIssuerUrl: "https://camunda-keycloak.sarex-k8s.uralmine.com/auth/realms/camunda-platform"
           identity:
-            redirectUrl: "https://camunda-identity.contour.infra.sarex.tech"
+            redirectUrl: "https://camunda-identity.sarex-k8s.uralmine.com"
           operate:
-            redirectUrl: "https://camunda-operate.contour.infra.sarex.tech"
+            redirectUrl: "https://camunda-operate.sarex-k8s.uralmine.com"
           tasklist:
-            redirectUrl: "https://camunda-tasklist.contour.infra.sarex.tech"
+            redirectUrl: "https://camunda-tasklist.sarex-k8s.uralmine.com"
           optimize:
-            redirectUrl: "https://camunda-optimize.contour.infra.sarex.tech"
+            redirectUrl: "https://camunda-optimize.sarex-k8s.uralmine.com"
           webModeler:
             redirectUrl: "https://camunda-web-modeler.contour.infra.sarex.tech"
           console:
diff --git a/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml b/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
index 415ef85..04b9e06 100644
--- a/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
+++ b/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
@@ -21,23 +21,23 @@ spec:
                 istio.deckhouse.io/ingress-gateway-class: istio
               servers:
                 - hosts:
-                    - sarex-camunda-keycloak.uralmine.com
+                    - camunda-keycloak.sarex-k8s.uralmine.com
                   tls:
                     credentialName: istio-ingress-tls
                 - hosts:
-                    - sarex-camunda-identity.uralmine.com
+                    - camunda-identity.sarex-k8s.uralmine.com
                   tls:
                     credentialName: istio-ingress-tls
                 - hosts:
-                    - sarex-camunda.uralmine.com
+                    - camunda-operate.sarex-k8s.uralmine.com
                   tls:
                     credentialName: istio-ingress-tls
                 - hosts:
-                    - sarex-camunda-tasklist.uralmine.com
+                    - camunda-tasklist.sarex-k8s.uralmine.com
                   tls:
                     credentialName: istio-ingress-tls
                 - hosts:
-                    - sarex-camunda-optimize.uralmine.com
+                    - camunda-optimize.sarex-k8s.uralmine.com
                   tls:
                     credentialName: istio-ingress-tls
             rabbitmq:
@@ -47,7 +47,7 @@ spec:
                 istio.deckhouse.io/ingress-gateway-class: istio
               servers:
                 - hosts:
-                    - sarex-rabbitmq.uralmine.com
+                    - rabbitmq.sarex-k8s.uralmine.com
                   tls:
                     credentialName: istio-ingress-tls
             zitadel:
@@ -64,7 +64,7 @@ spec:
             camunda-keycloak:
               namespace: default
               hosts:
-                - sarex-camunda-keycloak.uralmine.com
+                - camunda-keycloak.sarex-k8s.uralmine.com
               gateways:
                 - default/camunda-gateway
               routes:
@@ -75,7 +75,7 @@ spec:
             camunda-identity:
               namespace: default
               hosts:
-                - sarex-camunda-identity.uralmine.com
+                - camunda-identity.sarex-k8s.uralmine.com
               gateways:
                 - default/camunda-gateway
               routes:
@@ -86,7 +86,7 @@ spec:
             camunda-operate:
               namespace: default
               hosts:
-                - sarex-camunda.uralmine.com
+                - camunda-operate.sarex-k8s.uralmine.com
               gateways:
                 - default/camunda-gateway
               routes:
@@ -97,7 +97,7 @@ spec:
             camunda-tasklist:
               namespace: default
               hosts:
-                - sarex-camunda-tasklist.uralmine.com
+                - camunda-tasklist.sarex-k8s.uralmine.com
               gateways:
                 - default/camunda-gateway
               routes:
@@ -108,7 +108,7 @@ spec:
             camunda-optimize:
               namespace: default
               hosts:
-                - sarex-camunda-optimize.uralmine.com
+                - camunda-optimize.sarex-k8s.uralmine.com
               gateways:
                 - default/camunda-gateway
               routes:
@@ -119,7 +119,7 @@ spec:
             rabbitmq:
               namespace: default
               hosts:
-                - sarex-rabbitmq.uralmine.com
+                - rabbitmq.sarex-k8s.uralmine.com
               gateways:
                 - default/rabbitmq-gateway
               routes: