From c45150bc98d42b77792de39615b8cdd054ce379b Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Thu, 20 Aug 2026 14:25:23 +0300
Subject: [PATCH 1/2] ++ fix trino worker node selector render

---
 infrastructure/trino/d8-ugmk-prod/trino.yaml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/infrastructure/trino/d8-ugmk-prod/trino.yaml b/infrastructure/trino/d8-ugmk-prod/trino.yaml
index b49b28f..adda700 100644
--- a/infrastructure/trino/d8-ugmk-prod/trino.yaml
+++ b/infrastructure/trino/d8-ugmk-prod/trino.yaml
@@ -10,6 +10,26 @@ spec:
     spec:
       chart: trino-contour
       version: "0.33.1"
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: apps
+              version: v1
+              kind: Deployment
+              name: trino-worker
+            patch: |
+              - op: replace
+                path: /spec/template/spec/nodeSelector
+                value:
+                  kubernetes.io/hostname: um-sarex-k8s-worker-04
+              - op: add
+                path: /spec/template/spec/tolerations
+                value:
+                  - key: dedicated.processing
+                    operator: Equal
+                    value: processing
+                    effect: NoExecute
   values:
     nameOverride: trino
     coordinatorNameOverride: trino-coordinator

From fb1a36c2fd645cae1b43dca72c1ebd31270fb392 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Thu, 20 Aug 2026 15:48:28 +0300
Subject: [PATCH 2/2] ++ switch superset domain to sarex-bi.uralmine.com

---
 infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml | 4 ++--
 infrastructure/superset/d8-ugmk-prod/superset.yaml         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml b/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
index 39cdd66..dc525fc 100644
--- a/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
+++ b/infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
@@ -22,7 +22,7 @@ spec:
               servers:
                 - hosts:
                     - sarex.uralmine.com
-                    - bi.sarex-k8s.uralmine.com
+                    - sarex-bi.uralmine.com
                     - sarex-login.uralmine.com
                     - rabbitmq.sarex-k8s.uralmine.com
                     - camunda-keycloak.sarex-k8s.uralmine.com
@@ -522,7 +522,7 @@ spec:
             superset:
               namespace: default
               hosts:
-                - bi.sarex-k8s.uralmine.com
+                - sarex-bi.uralmine.com
               gateways:
                 - default/platform-gateway
               routes:
diff --git a/infrastructure/superset/d8-ugmk-prod/superset.yaml b/infrastructure/superset/d8-ugmk-prod/superset.yaml
index af067e7..8426125 100644
--- a/infrastructure/superset/d8-ugmk-prod/superset.yaml
+++ b/infrastructure/superset/d8-ugmk-prod/superset.yaml
@@ -116,13 +116,13 @@ spec:
                 "object-src": ["'none'"],
                 "style-src": ["'self'", "'unsafe-inline'"],
                 "script-src": ["'self'", "'strict-dynamic'"],
-                "frame-ancestors": ["'self'", "https://sarex.uralmine.com", "https://*.uralmine.com", "https://*.sarex-k8s.uralmine.com"],
+                "frame-ancestors": ["'self'", "https://sarex.uralmine.com", "https://*.uralmine.com", "https://sarex-bi.uralmine.com"],
             },
             "content_security_policy_nonce_in": ["script-src"],
         }
         X_FRAME_OPTIONS = None
         HTTP_HEADERS = {
-            "Content-Security-Policy": "frame-ancestors 'self' https://sarex.uralmine.com https://*.uralmine.com https://*.sarex-k8s.uralmine.com",
+            "Content-Security-Policy": "frame-ancestors 'self' https://sarex.uralmine.com https://*.uralmine.com https://sarex-bi.uralmine.com",
         }
       extend_timeout: |
         SQLLAB_ASYNC_TIME_LIMIT_SEC = 300