From 09d49a334f8a70a0de44b8f13aa0cca93517e822 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Wed, 14 Oct 2026 13:51:19 +0300
Subject: [PATCH] ++ fix issuer key and kubectl image

---
 infrastructure/istio-config/vk-infra/istio-config.yaml | 2 +-
 infrastructure/zitadel/vk-infra/zitadel.yaml           | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/infrastructure/istio-config/vk-infra/istio-config.yaml b/infrastructure/istio-config/vk-infra/istio-config.yaml
index fa0fe1b..8dba9b1 100644
--- a/infrastructure/istio-config/vk-infra/istio-config.yaml
+++ b/infrastructure/istio-config/vk-infra/istio-config.yaml
@@ -25,7 +25,7 @@ spec:
                 acme:
                   email: pavel@sarex.io
                   privateKeySecretRef:
-                    name: letsencrypt-secret-key
+                    name: letsencrypt-istio-account-key
                   server: https://acme-v02.api.letsencrypt.org/directory
                   solvers:
                     - http01:
diff --git a/infrastructure/zitadel/vk-infra/zitadel.yaml b/infrastructure/zitadel/vk-infra/zitadel.yaml
index 88b89d5..e85bc62 100644
--- a/infrastructure/zitadel/vk-infra/zitadel.yaml
+++ b/infrastructure/zitadel/vk-infra/zitadel.yaml
@@ -40,6 +40,11 @@ spec:
               matchLabels:
                 app.kubernetes.io/name: idp
                 app.kubernetes.io/instance: idp
+    setupJob:
+      machinekeyWriter:
+        image:
+          repository: cr.yandex/crp3ccidau046kdj8g9q/contour/zitadel/kubectl
+          tag: "1.33.4"
     env:
       - name: ZITADEL_DEFAULTINSTANCE_FEATURES_LOGINV2_REQUIRED
         value: 'false'