diff --git a/infrastructure/istio-config/vk-infra/istio-config.yaml b/infrastructure/istio-config/vk-infra/istio-config.yaml
index fa0fe1b..8dba9b1 100644
--- a/infrastructure/istio-config/vk-infra/istio-config.yaml
+++ b/infrastructure/istio-config/vk-infra/istio-config.yaml
@@ -25,7 +25,7 @@ spec:
                 acme:
                   email: pavel@sarex.io
                   privateKeySecretRef:
-                    name: letsencrypt-secret-key
+                    name: letsencrypt-istio-account-key
                   server: https://acme-v02.api.letsencrypt.org/directory
                   solvers:
                     - http01:
diff --git a/infrastructure/zitadel/vk-infra/zitadel.yaml b/infrastructure/zitadel/vk-infra/zitadel.yaml
index 88b89d5..e85bc62 100644
--- a/infrastructure/zitadel/vk-infra/zitadel.yaml
+++ b/infrastructure/zitadel/vk-infra/zitadel.yaml
@@ -40,6 +40,11 @@ spec:
               matchLabels:
                 app.kubernetes.io/name: idp
                 app.kubernetes.io/instance: idp
+    setupJob:
+      machinekeyWriter:
+        image:
+          repository: cr.yandex/crp3ccidau046kdj8g9q/contour/zitadel/kubectl
+          tag: "1.33.4"
     env:
       - name: ZITADEL_DEFAULTINSTANCE_FEATURES_LOGINV2_REQUIRED
         value: 'false'