diff --git a/infrastructure/istio-mtls-check/base/10-mtls-b.yaml b/infrastructure/istio-mtls-check/base/10-mtls-b.yaml
index fc5f435..7158cfe 100644
--- a/infrastructure/istio-mtls-check/base/10-mtls-b.yaml
+++ b/infrastructure/istio-mtls-check/base/10-mtls-b.yaml
@@ -29,52 +29,52 @@ spec:
   - name: http
     port: 8080
     targetPort: 8080
-#---
-#apiVersion: apps/v1
-#kind: Deployment
-#metadata:
-#  name: nginx
-#  namespace: mtls-b
-#spec:
-#  replicas: 1
-#  selector:
-#    matchLabels:
-#      app: nginx
-#  template:
-#    metadata:
-#      labels:
-#        app: nginx
-#      annotations:
-#        proxy.istio.io/config: "holdApplicationUntilProxyStarts: true\nproxyMetadata:\n\
-#          \  SECRET_TTL: \"10m\"\n"
-#    spec:
-#      serviceAccountName: nginx
-#      containers:
-#      - name: nginx
-#        image: nginx:demo-placeholder
-#        ports:
-#        - containerPort: 8080
-#        readinessProbe:
-#          httpGet:
-#            path: /health
-#            port: 8080
-#          initialDelaySeconds: 2
-#          periodSeconds: 3
-#        volumeMounts:
-#        - name: config
-#          mountPath: /etc/nginx/conf.d
-#          readOnly: true
-#      - name: curl
-#        image: curlimages/curl:demo-placeholder
-#        command:
-#        - /bin/sh
-#        - -c
-#        args:
-#        - while true; do sleep 3600; done
-#      volumes:
-#      - name: config
-#        configMap:
-#          name: nginx-config
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx
+  namespace: mtls-b
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+      annotations:
+        proxy.istio.io/config: "holdApplicationUntilProxyStarts: true\nproxyMetadata:\n\
+          \  SECRET_TTL: \"10m\"\n"
+    spec:
+      serviceAccountName: nginx
+      containers:
+      - name: nginx
+        image: cr.yandex/crp3ccidau046kdj8g9q/nginx:1.27-alpine
+        ports:
+        - containerPort: 8080
+        readinessProbe:
+          httpGet:
+            path: /health
+            port: 8080
+          initialDelaySeconds: 2
+          periodSeconds: 3
+        volumeMounts:
+        - name: config
+          mountPath: /etc/nginx/conf.d
+          readOnly: true
+      - name: curl
+        image: cr.yandex/crp3ccidau046kdj8g9q/curl
+        command:
+        - /bin/sh
+        - -c
+        args:
+        - while true; do sleep 3600; done
+      volumes:
+      - name: config
+        configMap:
+          name: nginx-config
 
 ---
 
diff --git a/infrastructure/istio-mtls-check/base/20-mtls-a.yaml b/infrastructure/istio-mtls-check/base/20-mtls-a.yaml
index d2e64ee..13c303f 100644
--- a/infrastructure/istio-mtls-check/base/20-mtls-a.yaml
+++ b/infrastructure/istio-mtls-check/base/20-mtls-a.yaml
@@ -27,52 +27,52 @@ spec:
   - name: http
     port: 8080
     targetPort: 8080
-#---
-#apiVersion: apps/v1
-#kind: Deployment
-#metadata:
-#  name: nginx
-#  namespace: mtls-a
-#spec:
-#  replicas: 1
-#  selector:
-#    matchLabels:
-#      app: nginx
-#  template:
-#    metadata:
-#      labels:
-#        app: nginx
-#      annotations:
-#        proxy.istio.io/config: "holdApplicationUntilProxyStarts: true\nproxyMetadata:\n\
-#          \  SECRET_TTL: \"10m\"\n"
-#    spec:
-#      serviceAccountName: nginx
-#      containers:
-#      - name: nginx
-#        image: nginx:demo-placeholder
-#        ports:
-#        - containerPort: 8080
-#        readinessProbe:
-#          httpGet:
-#            path: /health
-#            port: 8080
-#          initialDelaySeconds: 2
-#          periodSeconds: 3
-#        volumeMounts:
-#        - name: config
-#          mountPath: /etc/nginx/conf.d
-#          readOnly: true
-#      - name: curl
-#        image: curlimages/curl:demo-placeholder
-#        command:
-#        - /bin/sh
-#        - -c
-#        args:
-#        - while true; do sleep 3600; done
-#      volumes:
-#      - name: config
-#        configMap:
-#          name: nginx-config
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx
+  namespace: mtls-a
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: nginx
+  template:
+    metadata:
+      labels:
+        app: nginx
+      annotations:
+        proxy.istio.io/config: "holdApplicationUntilProxyStarts: true\nproxyMetadata:\n\
+          \  SECRET_TTL: \"10m\"\n"
+    spec:
+      serviceAccountName: nginx
+      containers:
+      - name: nginx
+        image: cr.yandex/crp3ccidau046kdj8g9q/nginx:1.27-alpine
+        ports:
+        - containerPort: 8080
+        readinessProbe:
+          httpGet:
+            path: /health
+            port: 8080
+          initialDelaySeconds: 2
+          periodSeconds: 3
+        volumeMounts:
+        - name: config
+          mountPath: /etc/nginx/conf.d
+          readOnly: true
+      - name: curl
+        image: cr.yandex/crp3ccidau046kdj8g9q/curl
+        command:
+        - /bin/sh
+        - -c
+        args:
+        - while true; do sleep 3600; done
+      volumes:
+      - name: config
+        configMap:
+          name: nginx-config
 
 ---
 
diff --git a/infrastructure/istio-mtls-check/base/30-plain-client.yaml b/infrastructure/istio-mtls-check/base/30-plain-client.yaml
index 34a90a9..1652735 100644
--- a/infrastructure/istio-mtls-check/base/30-plain-client.yaml
+++ b/infrastructure/istio-mtls-check/base/30-plain-client.yaml
@@ -1,16 +1,16 @@
-#apiVersion: v1
-#kind: Pod
-#metadata:
-#  name: plain-client
-#  namespace: mtls-a
-#  labels:
-#    sidecar.istio.io/inject: 'false'
-#spec:
-#  containers:
-#  - name: curl
-#    image: curlimages/curl:demo-placeholder
-#    command:
-#    - /bin/sh
-#    - -c
-#    args:
-#    - while true; do sleep 3600; done
+apiVersion: v1
+kind: Pod
+metadata:
+  name: plain-client
+  namespace: mtls-a
+  labels:
+    sidecar.istio.io/inject: 'false'
+spec:
+  containers:
+  - name: curl
+    image: cr.yandex/crp3ccidau046kdj8g9q/curl
+    command:
+    - /bin/sh
+    - -c
+    args:
+    - while true; do sleep 3600; done