From 3b5a6ddcc0380cfbe9629cb65907f81158690f23 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Thu, 20 Aug 2026 13:54:58 +0300
Subject: [PATCH 1/3] ++ fix ugmk superset trino contour charts

---
 .../superset/d8-ugmk-prod/superset.yaml       |  8 ++++++--
 infrastructure/trino/d8-ugmk-prod/trino.yaml  | 20 +++++++++++++++++++
 2 files changed, 26 insertions(+), 2 deletions(-)

diff --git a/infrastructure/superset/d8-ugmk-prod/superset.yaml b/infrastructure/superset/d8-ugmk-prod/superset.yaml
index bde759f..ffc2bef 100644
--- a/infrastructure/superset/d8-ugmk-prod/superset.yaml
+++ b/infrastructure/superset/d8-ugmk-prod/superset.yaml
@@ -6,6 +6,10 @@ metadata:
 spec:
   interval: 5m
   timeout: 20m
+  chart:
+    spec:
+      chart: superset-contour
+      version: "0.13.4"
   values:
     fullnameOverride: superset
     serviceAccount:
@@ -68,8 +72,8 @@ spec:
     redis:
       enabled: true
       image:
-        registry: docker.io
-        repository: bitnamilegacy/redis
+        registry: cr.yandex
+        repository: crp3ccidau046kdj8g9q/contour/superset/redis
         tag: 7.0.10-debian-11-r4
       architecture: standalone
       auth:
diff --git a/infrastructure/trino/d8-ugmk-prod/trino.yaml b/infrastructure/trino/d8-ugmk-prod/trino.yaml
index 68add67..006fba1 100644
--- a/infrastructure/trino/d8-ugmk-prod/trino.yaml
+++ b/infrastructure/trino/d8-ugmk-prod/trino.yaml
@@ -6,6 +6,10 @@ metadata:
 spec:
   interval: 5m
   timeout: 20m
+  chart:
+    spec:
+      chart: trino-contour
+      version: "0.33.1"
   values:
     nameOverride: trino
     coordinatorNameOverride: trino-coordinator
@@ -83,6 +87,12 @@ spec:
         connection-user=${ENV:TRINO_POSTGRES_USER}
         connection-password=${ENV:TRINO_POSTGRES_PASSWORD}
         postgresql.array-mapping=AS_JSON
+      resources_db: |
+        connector.name=postgresql
+        connection-url=jdbc:postgresql://${ENV:TRINO_POSTGRES_HOST}:${ENV:TRINO_POSTGRES_PORT}/resources_db?sslmode=disable
+        connection-user=${ENV:TRINO_POSTGRES_USER}
+        connection-password=${ENV:TRINO_POSTGRES_PASSWORD}
+        postgresql.array-mapping=AS_JSON
       pm_db: |
         connector.name=postgresql
         connection-url=jdbc:postgresql://${ENV:TRINO_POSTGRES_HOST}:${ENV:TRINO_POSTGRES_PORT}/pm_db?sslmode=disable
@@ -107,6 +117,12 @@ spec:
         connection-user=${ENV:TRINO_POSTGRES_USER}
         connection-password=${ENV:TRINO_POSTGRES_PASSWORD}
         postgresql.array-mapping=AS_JSON
+      clickhouse_db: |
+        connector.name=tpch
+        tpch.splits-per-node=4
+      hive: |
+        connector.name=tpch
+        tpch.splits-per-node=4
     coordinator:
       jvm:
         maxHeapSize: 6G
@@ -121,6 +137,8 @@ spec:
           memory: 6Gi
         limits:
           memory: 8Gi
+      nodeSelector: null
+      tolerations: []
     worker:
       jvm:
         maxHeapSize: 24G
@@ -135,3 +153,5 @@ spec:
           memory: 24Gi
         limits:
           memory: 32Gi
+      nodeSelector: null
+      tolerations: []

From 327212ea6f9b402621496ef16611918950b409da Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Thu, 20 Aug 2026 14:06:12 +0300
Subject: [PATCH 2/3] ++ use mirrored ugmk superset trino images

---
 infrastructure/superset/d8-ugmk-prod/superset.yaml | 9 +++++++++
 infrastructure/trino/d8-ugmk-prod/trino.yaml       | 4 ++++
 2 files changed, 13 insertions(+)

diff --git a/infrastructure/superset/d8-ugmk-prod/superset.yaml b/infrastructure/superset/d8-ugmk-prod/superset.yaml
index ffc2bef..af067e7 100644
--- a/infrastructure/superset/d8-ugmk-prod/superset.yaml
+++ b/infrastructure/superset/d8-ugmk-prod/superset.yaml
@@ -11,12 +11,21 @@ spec:
       chart: superset-contour
       version: "0.13.4"
   values:
+    global:
+      imagePullSecrets:
+        - regcred
     fullnameOverride: superset
     serviceAccount:
       create: true
     serviceAccountName: superset
     imagePullSecrets:
       - name: regcred
+    image:
+      repository: cr.yandex/crp3ccidau046kdj8g9q/contour/superset/superset
+      tag: 4.1.1
+    initImage:
+      repository: cr.yandex/crp3ccidau046kdj8g9q/contour/superset/superset
+      tag: dockerize
     vault:
       enabled: true
       role: superset
diff --git a/infrastructure/trino/d8-ugmk-prod/trino.yaml b/infrastructure/trino/d8-ugmk-prod/trino.yaml
index 006fba1..cac2bed 100644
--- a/infrastructure/trino/d8-ugmk-prod/trino.yaml
+++ b/infrastructure/trino/d8-ugmk-prod/trino.yaml
@@ -16,6 +16,10 @@ spec:
     workerNameOverride: trino-worker
     imagePullSecrets:
       - name: regcred
+    image:
+      registry: cr.yandex
+      repository: crp3ccidau046kdj8g9q/contour/trino/trino
+      tag: "432"
     serviceAccount:
       create: true
       name: trino

From 1cb049ba9b8f0492dd5e1ed4998b75bceecca4f2 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Thu, 20 Aug 2026 14:16:49 +0300
Subject: [PATCH 3/3] ++ place trino worker on processing node

---
 infrastructure/trino/d8-ugmk-prod/trino.yaml | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/infrastructure/trino/d8-ugmk-prod/trino.yaml b/infrastructure/trino/d8-ugmk-prod/trino.yaml
index cac2bed..b49b28f 100644
--- a/infrastructure/trino/d8-ugmk-prod/trino.yaml
+++ b/infrastructure/trino/d8-ugmk-prod/trino.yaml
@@ -157,5 +157,10 @@ spec:
           memory: 24Gi
         limits:
           memory: 32Gi
-      nodeSelector: null
-      tolerations: []
+      nodeSelector:
+        kubernetes.io/hostname: um-sarex-k8s-worker-04
+      tolerations:
+        - key: dedicated.processing
+          operator: Equal
+          value: processing
+          effect: NoExecute