From 04b6381d955dd5f23857994961d92cb6795c5a2f Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Wed, 21 Oct 2026 12:15:50 +0300
Subject: [PATCH] ++ dns01 cloudflare issuer

---
 .../istio-config/vk-prod/istio-config.yaml        | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/infrastructure/istio-config/vk-prod/istio-config.yaml b/infrastructure/istio-config/vk-prod/istio-config.yaml
index bf2c652..11f6a69 100644
--- a/infrastructure/istio-config/vk-prod/istio-config.yaml
+++ b/infrastructure/istio-config/vk-prod/istio-config.yaml
@@ -28,13 +28,14 @@ spec:
                     name: letsencrypt-istio-account-key
                   server: https://acme-v02.api.letsencrypt.org/directory
                   solvers:
-                  - http01:
-                      ingress:
-                        class: istio
-                        podTemplate:
-                          spec:
-                            imagePullSecrets:
-                            - name: istio-registry-secret
+                  - dns01:
+                      cloudflare:
+                        apiTokenSecretRef:
+                          name: cloudflare-api-token
+                          key: api-token
+                    selector:
+                      dnsZones:
+                      - sarex.space
           certificates:
             camunda-identity-tls:
               namespace: istio-system