From b36a349affa89e1cdb086dc66f891b50b090ceb6 Mon Sep 17 00:00:00 2001
From: ivan <ivan@MacBook-Air-som-tillhor-ivan.local>
Date: Thu, 15 Oct 2026 16:58:11 +0500
Subject: [PATCH] ++

---
 .../django/brusnika-stage/nginx-configmap.yaml | 18 ++++++++++++------
 .../brusnika-stage/istio-config.yaml           | 14 ++++++++++++++
 2 files changed, 26 insertions(+), 6 deletions(-)

diff --git a/apps/django/brusnika-stage/nginx-configmap.yaml b/apps/django/brusnika-stage/nginx-configmap.yaml
index 776662c..0c121e2 100644
--- a/apps/django/brusnika-stage/nginx-configmap.yaml
+++ b/apps/django/brusnika-stage/nginx-configmap.yaml
@@ -101,7 +101,8 @@ data:
 
             location = /static/pdf-runtime/assets/mupdf-wasm.wasm {
                 alias /opt/react_client/static/pdf-runtime/assets/mupdf-wasm.wasm;
-                add_header Content-Type application/wasm always;
+                types { }
+                default_type application/wasm;
                 add_header Cache-Control "public, max-age=31536000, immutable" always;
                 add_header Access-Control-Allow-Origin "*" always;
                 add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
@@ -110,7 +111,8 @@ data:
 
             location = /workspaces-v2/worker/static/viewer-pdf/mupdf-wasm.js {
                 alias /opt/react_client/static/viewer-pdf/mupdf-wasm.js;
-                add_header Content-Type application/javascript always;
+                types { }
+                default_type application/javascript;
                 add_header Cache-Control "public, max-age=31536000, immutable" always;
                 add_header Access-Control-Allow-Origin "*" always;
                 add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
@@ -119,7 +121,8 @@ data:
 
             location = /workspaces-v2/worker/mupdf.worker-3.3.9.js {
                 alias /opt/react_client/static/pdf-runtime/mupdf.worker-3.3.9.js;
-                add_header Content-Type application/javascript always;
+                types { }
+                default_type application/javascript;
                 add_header Cache-Control "public, max-age=31536000, immutable" always;
                 add_header Access-Control-Allow-Origin "*" always;
                 add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
@@ -128,7 +131,8 @@ data:
 
             location = /workspaces-v2/worker/static/viewer-pdf/mupdf.js {
                 alias /opt/react_client/static/viewer-pdf/mupdf.js;
-                add_header Content-Type application/javascript always;
+                types { }
+                default_type application/javascript;
                 add_header Cache-Control "public, max-age=31536000, immutable" always;
                 add_header Access-Control-Allow-Origin "*" always;
                 add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
@@ -136,7 +140,8 @@ data:
             }
 
             location = /workspaces-v2/worker/static/viewer-pdf/mupdf-wasm.wasm {
-                add_header Content-Type application/wasm always;
+                types { }
+                default_type application/wasm;
                 alias /opt/react_client/static/viewer-pdf/mupdf-wasm.wasm;
             }
 
@@ -144,7 +149,8 @@ data:
             rewrite /workspaces-v2/(.+) /$1 break;
             proxy_pass http://workspaces-v2-frontend-static-service.workspaces.svc.cluster.local:8080;
 
-            add_header Content-Type application/wasm;
+            proxy_hide_header Content-Type;
+            add_header Content-Type application/wasm always;
             proxy_set_header Accept application/wasm;
         }
 
diff --git a/infrastructure/istio-config/brusnika-stage/istio-config.yaml b/infrastructure/istio-config/brusnika-stage/istio-config.yaml
index 898a27f..5d37391 100644
--- a/infrastructure/istio-config/brusnika-stage/istio-config.yaml
+++ b/infrastructure/istio-config/brusnika-stage/istio-config.yaml
@@ -1199,6 +1199,20 @@ spec:
                   service: workspaces-service.workspaces.svc.cluster.local
                   port: 8000
 
+            vs-iam-api:
+              namespace: ingress-nginx
+              hosts:
+                - test.sarex.brusnika.tech
+              gateways:
+                - ingress-nginx/main-gateway
+              routes:
+                - match:
+                    - uri:
+                        prefix: /iam/api/
+                  rewrite: /external/api/
+                  service: iam-backend.iam.svc.cluster.local
+                  port: 8000
+
             vs-resources-admin:
               namespace: ingress-nginx
               hosts: