From e23783997e1ce66f59349c05c42324c9bd8b4008 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Mon, 28 Sep 2026 10:57:32 +0300
Subject: [PATCH] ++ uralkal istio-config domains

---
 clusters/uralkal/kustomization.yaml           |  1 +
 infrastructure/camunda/uralkal/camunda.yaml   |  2 +-
 .../istio-config/uralkal/istio-config.yaml    | 69 +++++++++++++++++++
 .../istio-config/uralkal/kustomization.yaml   |  6 ++
 4 files changed, 77 insertions(+), 1 deletion(-)
 create mode 100644 infrastructure/istio-config/uralkal/istio-config.yaml
 create mode 100644 infrastructure/istio-config/uralkal/kustomization.yaml

diff --git a/clusters/uralkal/kustomization.yaml b/clusters/uralkal/kustomization.yaml
index fdedcb5..24bab3e 100644
--- a/clusters/uralkal/kustomization.yaml
+++ b/clusters/uralkal/kustomization.yaml
@@ -15,3 +15,4 @@ resources:
   - ../../infrastructure/camunda/uralkal
   - ../../infrastructure/superset/uralkal
   - ../../infrastructure/trino/uralkal
+  - ../../infrastructure/istio-config/uralkal
diff --git a/infrastructure/camunda/uralkal/camunda.yaml b/infrastructure/camunda/uralkal/camunda.yaml
index f647a56..54379b0 100644
--- a/infrastructure/camunda/uralkal/camunda.yaml
+++ b/infrastructure/camunda/uralkal/camunda.yaml
@@ -168,7 +168,7 @@ spec:
           identity:
             redirectUrl: "https://camunda-identity.sarex.local.uralkali.com"
           operate:
-            redirectUrl: "https://camunda.sarex.local.uralkali.com"
+            redirectUrl: "https://camunda-operate.sarex.local.uralkali.com"
           tasklist:
             redirectUrl: "https://camunda-tasklist.sarex.local.uralkali.com"
           optimize:
diff --git a/infrastructure/istio-config/uralkal/istio-config.yaml b/infrastructure/istio-config/uralkal/istio-config.yaml
new file mode 100644
index 0000000..baf1009
--- /dev/null
+++ b/infrastructure/istio-config/uralkal/istio-config.yaml
@@ -0,0 +1,69 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: istio-config
+  namespace: default
+spec:
+  dependsOn: []
+  interval: 5m
+  timeout: 10m
+  values:
+    global:
+      env: uralkal
+    environments:
+      uralkal:
+        istio:
+          gateways:
+            platform:
+              name: platform-gateway
+              namespace: default
+              selector:
+                istio: ingressgateway
+              servers:
+                - hosts:
+                    - sarex.local.uralkali.com
+                    - login.sarex.local.uralkali.com
+                    - bi.sarex.local.uralkali.com
+                    - sarex-stamp-verification.sarex.local.uralkali.com
+                    - s3.sarex.local.uralkali.com
+                    - document-link.sarex.local.uralkali.com
+                  tls:
+                    credentialName: uralkal-sarex-tls
+                - hosts:
+                    - camunda-operate.sarex.local.uralkali.com
+                  tls:
+                    credentialName: uralkal-camunda-operate-tls
+          virtualServices:
+            zitadel:
+              namespace: default
+              hosts:
+                - login.sarex.local.uralkali.com
+              gateways:
+                - default/platform-gateway
+              routes:
+                - path:
+                    prefix: /
+                  service: zitadel-idp-contour.zitadel.svc.cluster.local
+                  port: 8080
+            superset:
+              namespace: default
+              hosts:
+                - bi.sarex.local.uralkali.com
+              gateways:
+                - default/platform-gateway
+              routes:
+                - path:
+                    prefix: /
+                  service: superset.superset.svc.cluster.local
+                  port: 8088
+            camunda-operate:
+              namespace: default
+              hosts:
+                - camunda-operate.sarex.local.uralkali.com
+              gateways:
+                - default/platform-gateway
+              routes:
+                - path:
+                    prefix: /
+                  service: camunda-operate.camunda.svc.cluster.local
+                  port: 80
diff --git a/infrastructure/istio-config/uralkal/kustomization.yaml b/infrastructure/istio-config/uralkal/kustomization.yaml
new file mode 100644
index 0000000..894c51a
--- /dev/null
+++ b/infrastructure/istio-config/uralkal/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: istio-config.yaml