Merge remote-tracking branch 'origin/master'

infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml

@@ -22,7 +22,7 @@ spec:
               servers:
                 - hosts:
                     - sarex.uralmine.com
-                    - bi.sarex-k8s.uralmine.com
+                    - sarex-bi.uralmine.com
                     - sarex-login.uralmine.com
                     - rabbitmq.sarex-k8s.uralmine.com
                     - camunda-keycloak.sarex-k8s.uralmine.com
@@ -522,7 +522,7 @@ spec:
             superset:
               namespace: default
               hosts:
-                - bi.sarex-k8s.uralmine.com
+                - sarex-bi.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:

infrastructure/superset/d8-ugmk-prod/superset.yaml

@@ -116,13 +116,13 @@ spec:
                 "object-src": ["'none'"],
                 "style-src": ["'self'", "'unsafe-inline'"],
                 "script-src": ["'self'", "'strict-dynamic'"],
-                "frame-ancestors": ["'self'", "https://sarex.uralmine.com", "https://*.uralmine.com", "https://*.sarex-k8s.uralmine.com"],
+                "frame-ancestors": ["'self'", "https://sarex.uralmine.com", "https://*.uralmine.com", "https://sarex-bi.uralmine.com"],
             },
             "content_security_policy_nonce_in": ["script-src"],
         }
         X_FRAME_OPTIONS = None
         HTTP_HEADERS = {
-            "Content-Security-Policy": "frame-ancestors 'self' https://sarex.uralmine.com https://*.uralmine.com https://*.sarex-k8s.uralmine.com",
+            "Content-Security-Policy": "frame-ancestors 'self' https://sarex.uralmine.com https://*.uralmine.com https://sarex-bi.uralmine.com",
         }
       extend_timeout: |
         SQLLAB_ASYNC_TIME_LIMIT_SEC = 300

infrastructure/trino/d8-ugmk-prod/trino.yaml

@@ -10,6 +10,26 @@ spec:
     spec:
       chart: trino-contour
       version: "0.33.1"
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: apps
+              version: v1
+              kind: Deployment
+              name: trino-worker
+            patch: |
+              - op: replace
+                path: /spec/template/spec/nodeSelector
+                value:
+                  kubernetes.io/hostname: um-sarex-k8s-worker-04
+              - op: add
+                path: /spec/template/spec/tolerations
+                value:
+                  - key: dedicated.processing
+                    operator: Equal
+                    value: processing
+                    effect: NoExecute
   values:
     nameOverride: trino
     coordinatorNameOverride: trino-coordinator