From 1337fd6d331bd7af1c7edb64f3694782db68b601 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Fri, 5 Jun 2026 15:26:35 +0300
Subject: [PATCH] Fix Zitadel ingress certificate issuance

---
 .../infrastructure/patches/istio-config.yaml          | 11 ++++-------
 .../infrastructure/patches/istio-config.yaml          | 11 ++++-------
 2 files changed, 8 insertions(+), 14 deletions(-)

diff --git a/clusters/brusnika-prod/infrastructure/patches/istio-config.yaml b/clusters/brusnika-prod/infrastructure/patches/istio-config.yaml
index 84b9d5c..74d8563 100644
--- a/clusters/brusnika-prod/infrastructure/patches/istio-config.yaml
+++ b/clusters/brusnika-prod/infrastructure/patches/istio-config.yaml
@@ -4,6 +4,10 @@ metadata:
   name: istio-config
   namespace: default
 spec:
+  install:
+    disableWait: true
+  upgrade:
+    disableWait: true
   values:
     global:
       env: brusnika-prod
@@ -610,13 +614,6 @@ spec:
               gateways:
                 - ingress-nginx/zitadel-gw
               routes:
-                - match:
-                    - port: 80
-                      uri:
-                        prefix: /
-                  redirect:
-                    scheme: https
-                    redirectCode: 308
                 - path:
                     prefix: /
                   service: zitadel-idp-contour.zitadel.svc.cluster.local
diff --git a/clusters/brusnika-stage/infrastructure/patches/istio-config.yaml b/clusters/brusnika-stage/infrastructure/patches/istio-config.yaml
index 6a1bb47..1dd469b 100644
--- a/clusters/brusnika-stage/infrastructure/patches/istio-config.yaml
+++ b/clusters/brusnika-stage/infrastructure/patches/istio-config.yaml
@@ -4,6 +4,10 @@ metadata:
   name: istio-config
   namespace: default
 spec:
+  install:
+    disableWait: true
+  upgrade:
+    disableWait: true
   values:
     global:
       env: brusnika-stage
@@ -555,13 +559,6 @@ spec:
               gateways:
                 - ingress-nginx/zitadel-gw
               routes:
-                - match:
-                    - port: 80
-                      uri:
-                        prefix: /
-                  redirect:
-                    scheme: https
-                    redirectCode: 308
                 - path:
                     prefix: /
                   service: zitadel-idp-contour.zitadel.svc.cluster.local