++ uralkal istio-config domains

clusters/uralkal/kustomization.yaml

@@ -15,3 +15,4 @@ resources:
   - ../../infrastructure/camunda/uralkal
   - ../../infrastructure/superset/uralkal
   - ../../infrastructure/trino/uralkal
+  - ../../infrastructure/istio-config/uralkal

infrastructure/camunda/uralkal/camunda.yaml

@@ -168,7 +168,7 @@ spec:
           identity:
             redirectUrl: "https://camunda-identity.sarex.local.uralkali.com"
           operate:
-            redirectUrl: "https://camunda.sarex.local.uralkali.com"
+            redirectUrl: "https://camunda-operate.sarex.local.uralkali.com"
           tasklist:
             redirectUrl: "https://camunda-tasklist.sarex.local.uralkali.com"
           optimize:

infrastructure/istio-config/uralkal/istio-config.yaml

@@ -0,0 +1,69 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: istio-config
+  namespace: default
+spec:
+  dependsOn: []
+  interval: 5m
+  timeout: 10m
+  values:
+    global:
+      env: uralkal
+    environments:
+      uralkal:
+        istio:
+          gateways:
+            platform:
+              name: platform-gateway
+              namespace: default
+              selector:
+                istio: ingressgateway
+              servers:
+                - hosts:
+                    - sarex.local.uralkali.com
+                    - login.sarex.local.uralkali.com
+                    - bi.sarex.local.uralkali.com
+                    - sarex-stamp-verification.sarex.local.uralkali.com
+                    - s3.sarex.local.uralkali.com
+                    - document-link.sarex.local.uralkali.com
+                  tls:
+                    credentialName: uralkal-sarex-tls
+                - hosts:
+                    - camunda-operate.sarex.local.uralkali.com
+                  tls:
+                    credentialName: uralkal-camunda-operate-tls
+          virtualServices:
+            zitadel:
+              namespace: default
+              hosts:
+                - login.sarex.local.uralkali.com
+              gateways:
+                - default/platform-gateway
+              routes:
+                - path:
+                    prefix: /
+                  service: zitadel-idp-contour.zitadel.svc.cluster.local
+                  port: 8080
+            superset:
+              namespace: default
+              hosts:
+                - bi.sarex.local.uralkali.com
+              gateways:
+                - default/platform-gateway
+              routes:
+                - path:
+                    prefix: /
+                  service: superset.superset.svc.cluster.local
+                  port: 8088
+            camunda-operate:
+              namespace: default
+              hosts:
+                - camunda-operate.sarex.local.uralkali.com
+              gateways:
+                - default/platform-gateway
+              routes:
+                - path:
+                    prefix: /
+                  service: camunda-operate.camunda.svc.cluster.local
+                  port: 80

infrastructure/istio-config/uralkal/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: istio-config.yaml

infrastructure/superset/uralkal/superset.yaml

@@ -22,7 +22,7 @@ spec:
       - name: regcred
     image:
       repository: cr.yandex/crp3ccidau046kdj8g9q/contour/superset/superset
-      tag: 4.1.1
+      tag: 4.1.1-uralkal-amd64
     initImage:
       repository: cr.yandex/crp3ccidau046kdj8g9q/contour/superset/superset
       tag: dockerize