From 4ce31d94aab098a3a1815c8859337ff15157f47d Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Mon, 19 Oct 2026 15:54:55 +0300
Subject: [PATCH] ++ camunda ha zones

---
 infrastructure/camunda/vk-prod/camunda.yaml | 61 +++++++++++++++++++--
 1 file changed, 56 insertions(+), 5 deletions(-)

diff --git a/infrastructure/camunda/vk-prod/camunda.yaml b/infrastructure/camunda/vk-prod/camunda.yaml
index 9eb63ef..a698667 100644
--- a/infrastructure/camunda/vk-prod/camunda.yaml
+++ b/infrastructure/camunda/vk-prod/camunda.yaml
@@ -7,14 +7,14 @@ spec:
   interval: 10m
   timeout: 20m
   dependsOn:
-    - name: istio-base
-      namespace: istio-system
-    - name: istiod
-      namespace: istio-system
+  - name: istio-base
+    namespace: istio-system
+  - name: istiod
+    namespace: istio-system
   chart:
     spec:
       chart: camunda-prod-new
-      version: "11.0.4"
+      version: 11.0.5
       sourceRef:
         kind: HelmRepository
         name: yc-oci-charts
@@ -37,6 +37,7 @@ spec:
         username: camunda-new
         existingSecret: camunda-new-postgresql
         existingSecretPasswordKey: password
+      replicas: 2
     identityKeycloak:
       global:
         storageClass: csi-ceph-ssd-retain
@@ -50,11 +51,22 @@ spec:
         user: camunda
         existingSecret: camunda-postgresql
         existingSecretPasswordKey: password
+      replicaCount: 2
     zeebe:
       pvcStorageClassName: csi-ceph-ssd-retain
       nodeSelector:
         dedicated: generic
       tolerations: []
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchExpressions:
+              - key: app.kubernetes.io/component
+                operator: In
+                values:
+                - zeebe-broker
+            topologyKey: topology.kubernetes.io/zone
     elasticsearch:
       master:
         nodeSelector:
@@ -62,6 +74,45 @@ spec:
         tolerations: []
         persistence:
           storageClass: csi-ceph-ssd-retain
+        topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: topology.kubernetes.io/zone
+          whenUnsatisfiable: DoNotSchedule
+          labelSelector:
+            matchLabels:
+              app.kubernetes.io/instance: camunda
+              app.kubernetes.io/name: elasticsearch
+              app.kubernetes.io/component: master
       metrics:
         serviceMonitor:
           enabled: false
+    zeebeGateway:
+      replicas: 3
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchExpressions:
+              - key: app.kubernetes.io/component
+                operator: In
+                values:
+                - zeebe-gateway
+            topologyKey: topology.kubernetes.io/zone
+    operate:
+      replicas: 3
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchExpressions:
+              - key: app.kubernetes.io/component
+                operator: In
+                values:
+                - operate
+            topologyKey: topology.kubernetes.io/zone
+    tasklist:
+      replicas: 2
+    optimize:
+      replicas: 2
+    connectors:
+      replicas: 2