From 802f0b44fc27e5788a07e8172a1881c67b4b2a3d Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Tue, 11 Aug 2026 12:29:04 +0300
Subject: [PATCH] pin wb vault to generic node group, chart default
 nodeSelector targets a dedicated STS pool that does not exist in this
 cluster, same fix as d8-ugmk-prod

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 clusters/wb/infrastructure/patches/vault.yaml | 24 +++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/clusters/wb/infrastructure/patches/vault.yaml b/clusters/wb/infrastructure/patches/vault.yaml
index bbf62a3..17cc7a1 100644
--- a/clusters/wb/infrastructure/patches/vault.yaml
+++ b/clusters/wb/infrastructure/patches/vault.yaml
@@ -6,9 +6,33 @@ metadata:
 spec:
   interval: 5m
   timeout: 10m
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: apps
+              version: v1
+              kind: StatefulSet
+              namespace: vault
+              name: vault-vault-contour
+            patch: |-
+              - op: replace
+                path: /spec/template/spec/nodeSelector
+                value:
+                  type: generic
+              - op: replace
+                path: /spec/template/spec/tolerations
+                value: []
   values:
     imagePullSecrets:
       - name: regcred
+    injector:
+      nodeSelector:
+        type: generic
+      tolerations: []
     server:
+      nodeSelector:
+        type: generic
+      tolerations: []
       dataStorage:
         storageClass: local-path