During November 2024, Kruft reorganized TLS configuration management for the ytsaurus/ytsaurus-k8s-operator repository, focusing on consolidating all TLS-related mounts under a unified /tls directory. By relocating HTTPSSecretMountPoint and RPCSecretMountPoint to this new structure, Kruft streamlined asset management and reduced the risk of configuration errors across Kubernetes deployments. The work included updating test configurations to align with the new credential locations, ensuring ongoing test reliability. Utilizing Go, Kubernetes, and DevOps practices, Kruft’s changes improved deployment consistency and security posture. The depth of the work is reflected in the careful restructuring and attention to maintainability, reliability, and secure operations.