diff --git a/clusters/vk-infra/helm-repositories.yaml b/clusters/vk-infra/helm-repositories.yaml
index 057ba62..c7c309c 100644
--- a/clusters/vk-infra/helm-repositories.yaml
+++ b/clusters/vk-infra/helm-repositories.yaml
@@ -1,9 +1,11 @@
 apiVersion: source.toolkit.fluxcd.io/v1
 kind: HelmRepository
 metadata:
-  name: istio-upstream
+  name: yc-oci-charts
   namespace: flux-system
 spec:
-  type: default
+  type: oci
   interval: 10m0s
-  url: https://istio-release.storage.googleapis.com/charts
+  url: oci://cr.yandex/crp3ccidau046kdj8g9q/charts
+  secretRef:
+    name: yc-cr-auth
diff --git a/infrastructure/istio-base/vk-infra/istio-base.yaml b/infrastructure/istio-base/vk-infra/istio-base.yaml
index d3be92a..ad3c4c5 100644
--- a/infrastructure/istio-base/vk-infra/istio-base.yaml
+++ b/infrastructure/istio-base/vk-infra/istio-base.yaml
@@ -6,9 +6,9 @@ metadata:
 spec:
   chart:
     spec:
-      chart: base
-      version: "1.27.1"
+      chart: base-infra
+      version: "1.30.5"
       sourceRef:
         kind: HelmRepository
-        name: istio-upstream
+        name: yc-oci-charts
         namespace: flux-system
diff --git a/infrastructure/istio-gateway/vk-infra/ingressgateway-me1.yaml b/infrastructure/istio-gateway/vk-infra/ingressgateway-me1.yaml
index 58a6c99..d9538cb 100644
--- a/infrastructure/istio-gateway/vk-infra/ingressgateway-me1.yaml
+++ b/infrastructure/istio-gateway/vk-infra/ingressgateway-me1.yaml
@@ -12,11 +12,11 @@ spec:
       namespace: istio-system
   chart:
     spec:
-      chart: gateway
-      version: "1.27.1"
+      chart: gateway-infra
+      version: "1.30.5"
       sourceRef:
         kind: HelmRepository
-        name: istio-upstream
+        name: yc-oci-charts
         namespace: flux-system
       interval: 10m
   install:
@@ -40,3 +40,4 @@ spec:
       - name: istio-registry-secret
     service:
       type: ClusterIP
+      externalTrafficPolicy: ""
diff --git a/infrastructure/istio-gateway/vk-infra/ingressgateway-ms1.yaml b/infrastructure/istio-gateway/vk-infra/ingressgateway-ms1.yaml
index d27f7dc..21d6b69 100644
--- a/infrastructure/istio-gateway/vk-infra/ingressgateway-ms1.yaml
+++ b/infrastructure/istio-gateway/vk-infra/ingressgateway-ms1.yaml
@@ -12,11 +12,11 @@ spec:
       namespace: istio-system
   chart:
     spec:
-      chart: gateway
-      version: "1.27.1"
+      chart: gateway-infra
+      version: "1.30.5"
       sourceRef:
         kind: HelmRepository
-        name: istio-upstream
+        name: yc-oci-charts
         namespace: flux-system
       interval: 10m
   install:
@@ -40,3 +40,4 @@ spec:
       - name: istio-registry-secret
     service:
       type: ClusterIP
+      externalTrafficPolicy: ""
diff --git a/infrastructure/istio-gateway/vk-infra/ingressgateway-pa2.yaml b/infrastructure/istio-gateway/vk-infra/ingressgateway-pa2.yaml
index a4738e5..f64ffe8 100644
--- a/infrastructure/istio-gateway/vk-infra/ingressgateway-pa2.yaml
+++ b/infrastructure/istio-gateway/vk-infra/ingressgateway-pa2.yaml
@@ -12,11 +12,11 @@ spec:
       namespace: istio-system
   chart:
     spec:
-      chart: gateway
-      version: "1.27.1"
+      chart: gateway-infra
+      version: "1.30.5"
       sourceRef:
         kind: HelmRepository
-        name: istio-upstream
+        name: yc-oci-charts
         namespace: flux-system
       interval: 10m
   install:
@@ -40,3 +40,4 @@ spec:
       - name: istio-registry-secret
     service:
       type: ClusterIP
+      externalTrafficPolicy: ""
diff --git a/infrastructure/istio-pilot/vk-infra/istio-pilot.yaml b/infrastructure/istio-pilot/vk-infra/istio-pilot.yaml
index c6a9908..ba8f486 100644
--- a/infrastructure/istio-pilot/vk-infra/istio-pilot.yaml
+++ b/infrastructure/istio-pilot/vk-infra/istio-pilot.yaml
@@ -6,11 +6,11 @@ metadata:
 spec:
   chart:
     spec:
-      chart: istiod
-      version: "1.27.1"
+      chart: istiod-infra
+      version: "1.30.5"
       sourceRef:
         kind: HelmRepository
-        name: istio-upstream
+        name: yc-oci-charts
         namespace: flux-system
   values:
     replicaCount: 3
@@ -27,7 +27,7 @@ spec:
             istio: pilot
     global:
       hub: cr.yandex/crp3ccidau046kdj8g9q/istio
-      tag: 1.27.1-amd64
+      tag: 1.30.5-amd64
       imagePullSecrets:
         - istio-registry-secret
     pilot: