From 19e5cec49fdd5fbf244ee234b5bc8cdb81873964 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <e.stratonikov@yadro.com>
Date: Tue, 20 Feb 2024 15:47:55 +0300
Subject: [PATCH 01/41] [#63] Use SIGTERM to stop Go services

Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
---
 services/ir/docker-compose.yml        |  3 ++-
 services/rest_gate/docker-compose.yml |  3 ++-
 services/s3_gate/docker-compose.yml   |  3 ++-
 services/storage/docker-compose.yml   | 12 ++++++++----
 4 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/services/ir/docker-compose.yml b/services/ir/docker-compose.yml
index 77ec50d..0f8e0f9 100644
--- a/services/ir/docker-compose.yml
+++ b/services/ir/docker-compose.yml
@@ -13,7 +13,8 @@ services:
       ir_int:
       internet:
         ipv4_address: ${IPV4_PREFIX}.61
-    stop_signal: SIGKILL
+    stop_signal: SIGTERM
+    stop_grace_period: 15s
     volumes:
       - ./az.json:/wallet.json
       - ./az.key:/wallet01.key
diff --git a/services/rest_gate/docker-compose.yml b/services/rest_gate/docker-compose.yml
index f5bac6b..ee1ab5e 100644
--- a/services/rest_gate/docker-compose.yml
+++ b/services/rest_gate/docker-compose.yml
@@ -16,7 +16,8 @@ services:
       - ./wallet.json:/wallet.json
       - ./../../vendor/hosts:/etc/hosts
       - ./cfg:/etc/frostfs/rest
-    stop_signal: SIGKILL
+    stop_signal: SIGTERM
+    stop_grace_period: 15s
     env_file: [ ".env", ".int_test.env" ]
     command: [ "frostfs-rest-gw", "--config", "/etc/frostfs/rest/config.yml" ]
     environment:
diff --git a/services/s3_gate/docker-compose.yml b/services/s3_gate/docker-compose.yml
index 1445480..d1b7601 100644
--- a/services/s3_gate/docker-compose.yml
+++ b/services/s3_gate/docker-compose.yml
@@ -18,7 +18,8 @@ services:
       - ./tls.crt:/tls.crt
       - ./../../vendor/hosts:/etc/hosts
       - ./cfg:/etc/frostfs/s3
-    stop_signal: SIGKILL
+    stop_signal: SIGTERM
+    stop_grace_period: 15s
     env_file: [ ".env", ".s3.env", ".int_test.env" ]
     command: [ "frostfs-s3-gw", "--config", "/etc/frostfs/s3/config.yml" ]
     environment:
diff --git a/services/storage/docker-compose.yml b/services/storage/docker-compose.yml
index b32ba21..1aabc5e 100644
--- a/services/storage/docker-compose.yml
+++ b/services/storage/docker-compose.yml
@@ -24,7 +24,8 @@ services:
       - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
       - ../nats/ca-cert.pem:/etc/frostfs-node/nats.ca.crt
       - ./cfg:/etc/frostfs/storage
-    stop_signal: SIGKILL
+    stop_signal: SIGTERM
+    stop_grace_period: 15s
     env_file: [ ".env", ".storage.env", ".int_test.env" ]
     command: [ "frostfs-node", "--config", "/etc/frostfs/storage/config.yml" ]
     environment:
@@ -64,7 +65,8 @@ services:
       - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
       - ../nats/ca-cert.pem:/etc/frostfs-node/nats.ca.crt
       - ./cfg:/etc/frostfs/storage
-    stop_signal: SIGKILL
+    stop_signal: SIGTERM
+    stop_grace_period: 15s
     env_file: [ ".env", ".storage.env", ".int_test.env" ]
     command: [ "frostfs-node", "--config", "/etc/frostfs/storage/config.yml" ]
     environment:
@@ -104,7 +106,8 @@ services:
       - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
       - ../nats/ca-cert.pem:/etc/frostfs-node/nats.ca.crt
       - ./cfg:/etc/frostfs/storage
-    stop_signal: SIGKILL
+    stop_signal: SIGTERM
+    stop_grace_period: 15s
     env_file: [ ".env", ".storage.env", ".int_test.env" ]
     command: [ "frostfs-node", "--config", "/etc/frostfs/storage/config.yml" ]
     environment:
@@ -145,7 +148,8 @@ services:
       - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
       - ../nats/ca-cert.pem:/etc/frostfs-node/nats.ca.crt
       - ./cfg:/etc/frostfs/storage
-    stop_signal: SIGKILL
+    stop_signal: SIGTERM
+    stop_grace_period: 15s
     env_file: [ ".env", ".storage.env", ".int_test.env" ]
     command: [ "frostfs-node", "--config", "/etc/frostfs/storage/config.yml" ]
     environment:

From 6ca443888e789f87cd833414cc9223a67686fa87 Mon Sep 17 00:00:00 2001
From: Airat Arifullin <aarifullin@yadro.com>
Date: Thu, 22 Feb 2024 12:41:55 +0300
Subject: [PATCH 02/41] [#64] adm: Create default Allow policy for root
 namespace

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
---
 Makefile | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Makefile b/Makefile
index 4caa292..051aa7d 100644
--- a/Makefile
+++ b/Makefile
@@ -76,6 +76,10 @@ up/bootstrap: get vendor/hosts
 	@$(foreach SVC, $(START_BOOTSTRAP), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
 	@source ./bin/helper.sh
 	@./vendor/frostfs-adm --config frostfs-adm.yml morph init --contracts vendor/contracts
+	echo "Set rule chain to policy contract" 
+	@./vendor/frostfs-adm --config frostfs-adm.yml morph \
+		ape add-rule-chain --target-type namespace --target-name "" \
+		--rule 'allow Container.* *' --chain-id "allow_container_ops"
 	@for f in ./services/storage/wallet*.json; do \
 		echo "Transfer GAS to wallet $${f}" \
 		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 \

From 8edfcb364d9a104e15f976117d20485a864a0d41 Mon Sep 17 00:00:00 2001
From: Airat Arifullin <aarifullin@yadro.com>
Date: Thu, 22 Feb 2024 12:41:55 +0300
Subject: [PATCH 03/41] [#64] adm: Create default Allow policy for root
 namespace

Signed-off-by: Airat Arifullin <aarifullin@yadro.com>
---
 Makefile | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Makefile b/Makefile
index 4caa292..051aa7d 100644
--- a/Makefile
+++ b/Makefile
@@ -76,6 +76,10 @@ up/bootstrap: get vendor/hosts
 	@$(foreach SVC, $(START_BOOTSTRAP), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
 	@source ./bin/helper.sh
 	@./vendor/frostfs-adm --config frostfs-adm.yml morph init --contracts vendor/contracts
+	echo "Set rule chain to policy contract" 
+	@./vendor/frostfs-adm --config frostfs-adm.yml morph \
+		ape add-rule-chain --target-type namespace --target-name "" \
+		--rule 'allow Container.* *' --chain-id "allow_container_ops"
 	@for f in ./services/storage/wallet*.json; do \
 		echo "Transfer GAS to wallet $${f}" \
 		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 \

From 47b4917e7bed1eae19b72e2d4dadc521b9b9c870 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <e.stratonikov@yadro.com>
Date: Thu, 4 Apr 2024 11:38:41 +0300
Subject: [PATCH 04/41] [#65] services: Fix docker-compose warnings

There were multiple warning like this one.
```
WARN[0000] /secret/services/rest_gate/docker-compose.yml: `version` is obsolete
```

According to docker-compose spec, the parameter is indeed purely informative:
https://github.com/compose-spec/compose-spec/blob/master/spec.md#version-and-name-top-level-elements

Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
---
 services/basenet/docker-compose.yml     | 1 -
 services/grafana/docker-compose.yml     | 1 -
 services/http_gate/docker-compose.yml   | 1 -
 services/ir/docker-compose.yml          | 1 -
 services/jaeger/docker-compose.yml      | 1 -
 services/morph_chain/docker-compose.yml | 1 -
 services/nats/docker-compose.yml        | 1 -
 services/prometheus/docker-compose.yml  | 1 -
 services/rest_gate/docker-compose.yml   | 1 -
 services/s3_gate/docker-compose.yml     | 1 -
 services/storage/docker-compose.yml     | 1 -
 11 files changed, 11 deletions(-)

diff --git a/services/basenet/docker-compose.yml b/services/basenet/docker-compose.yml
index abac92a..b2905a3 100644
--- a/services/basenet/docker-compose.yml
+++ b/services/basenet/docker-compose.yml
@@ -1,6 +1,5 @@
 ---
 
-version: "2.4"
 services:
 
   basenet:
diff --git a/services/grafana/docker-compose.yml b/services/grafana/docker-compose.yml
index 90b67f2..3953400 100644
--- a/services/grafana/docker-compose.yml
+++ b/services/grafana/docker-compose.yml
@@ -1,4 +1,3 @@
-version: '2.4'
 services:
   grafana:
     image: ${GRAFANA_IMAGE}:${GRAFANA_VERSION}
diff --git a/services/http_gate/docker-compose.yml b/services/http_gate/docker-compose.yml
index 7108ee5..c2e68ae 100644
--- a/services/http_gate/docker-compose.yml
+++ b/services/http_gate/docker-compose.yml
@@ -1,6 +1,5 @@
 ---
 
-version: "2.4"
 services:
   http_gate:
     image: ${HTTP_GW_IMAGE}:${HTTP_GW_VERSION}
diff --git a/services/ir/docker-compose.yml b/services/ir/docker-compose.yml
index 0f8e0f9..048651b 100644
--- a/services/ir/docker-compose.yml
+++ b/services/ir/docker-compose.yml
@@ -1,6 +1,5 @@
 ---
 
-version: "2.4"
 services:
 
   ir01:
diff --git a/services/jaeger/docker-compose.yml b/services/jaeger/docker-compose.yml
index a460548..1fb367b 100644
--- a/services/jaeger/docker-compose.yml
+++ b/services/jaeger/docker-compose.yml
@@ -1,4 +1,3 @@
-version: '2.4'
 services:
   jaeger:
     image: ${JAEGER_IMAGE}:${JAEGER_VERSION}
diff --git a/services/morph_chain/docker-compose.yml b/services/morph_chain/docker-compose.yml
index 4cba4b3..dd44b2c 100644
--- a/services/morph_chain/docker-compose.yml
+++ b/services/morph_chain/docker-compose.yml
@@ -1,6 +1,5 @@
 ---
 
-version: "2.4"
 services:
   frostfs_morph_chain:
     image: ${NEOGO_IMAGE}:${NEOGO_VERSION}
diff --git a/services/nats/docker-compose.yml b/services/nats/docker-compose.yml
index d05dd04..cb89948 100644
--- a/services/nats/docker-compose.yml
+++ b/services/nats/docker-compose.yml
@@ -1,6 +1,5 @@
 ---
 
-version: "2.4"
 services:
   nats:
     image: ${NATS_IMAGE}:${NATS_VERSION}
diff --git a/services/prometheus/docker-compose.yml b/services/prometheus/docker-compose.yml
index e9eb4f9..31f5fbe 100644
--- a/services/prometheus/docker-compose.yml
+++ b/services/prometheus/docker-compose.yml
@@ -1,4 +1,3 @@
-version: '2.4'
 services:
   prometheus:
     image: ${PROMETHEUS_IMAGE}:${PROMETHEUS_VERSION}
diff --git a/services/rest_gate/docker-compose.yml b/services/rest_gate/docker-compose.yml
index ee1ab5e..09cfe38 100644
--- a/services/rest_gate/docker-compose.yml
+++ b/services/rest_gate/docker-compose.yml
@@ -1,6 +1,5 @@
 ---
 
-version: "2.4"
 services:
   rest_gate:
     image: ${REST_GW_IMAGE}:${REST_GW_VERSION}
diff --git a/services/s3_gate/docker-compose.yml b/services/s3_gate/docker-compose.yml
index d1b7601..6b43a0b 100644
--- a/services/s3_gate/docker-compose.yml
+++ b/services/s3_gate/docker-compose.yml
@@ -1,6 +1,5 @@
 ---
 
-version: "2.4"
 services:
   s3_gate:
     image: ${S3_GW_IMAGE}:${S3_GW_VERSION}
diff --git a/services/storage/docker-compose.yml b/services/storage/docker-compose.yml
index 1aabc5e..8a8698e 100644
--- a/services/storage/docker-compose.yml
+++ b/services/storage/docker-compose.yml
@@ -1,6 +1,5 @@
 ---
 
-version: "2.4"
 services:
   storage01:
     image: ${NODE_IMAGE}:${NODE_VERSION}

From 773ea2339bf1eebc4946a0adbad904d7a8c8debf Mon Sep 17 00:00:00 2001
From: Alexander Chuprov <a.chuprov@yadro.com>
Date: Mon, 15 Apr 2024 20:16:51 +0300
Subject: [PATCH 05/41] [#66] Update frostfs-* to v0.38.5

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>
---
 .env | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/.env b/.env
index 793cffc..ad96218 100644
--- a/.env
+++ b/.env
@@ -12,11 +12,11 @@ NEOGO_VERSION=0.104.0
 NEOGO_IMAGE=nspccdev/neo-go
 
 # FrostFS InnerRing nodes
-IR_VERSION=0.37.0-rc.1-164-gbdd43f62
+IR_VERSION=0.38.5
 IR_IMAGE=truecloudlab/frostfs-ir
 
 # FrostFS Storage nodes
-NODE_VERSION=0.37.0-rc.1-164-gbdd43f62
+NODE_VERSION=0.38.5
 NODE_IMAGE=truecloudlab/frostfs-storage
 
 # NATS Server
@@ -40,17 +40,17 @@ LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a0567
 #LOCODE_DB_PATH=/path/to/locode_db
 
 # FrostFS CLI binary
-FROSTFS_CLI_URL=https://http.t5.fs.neo.org/7sm9csjtRLpr4c9QD55q9JJM73v79ohuAhTzP4fYRHFz/HUu3vMojqiopmAzWgUPPPSN7ThosapsLj5WrBvZR67tC
+FROSTFS_CLI_URL=https://http.t5.fs.neo.org/7sm9csjtRLpr4c9QD55q9JJM73v79ohuAhTzP4fYRHFz/BtA6zWLtoDuDnzxSNkKPjyN5hGuSZFxGuJD1gh8kBwkP
 #FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
 
 # FrostFS ADM tool binary
-FROSTFS_ADM_VERSION=eca5c210
-FROSTFS_ADM_URL=https://http.t5.fs.neo.org/7sm9csjtRLpr4c9QD55q9JJM73v79ohuAhTzP4fYRHFz/NMw4AktoK2zo5Kftj23wGEVzE1d52ULufjtcLjAVqZc
+FROSTFS_ADM_VERSION=498f9955ea
+FROSTFS_ADM_URL=https://http.t5.fs.neo.org/7sm9csjtRLpr4c9QD55q9JJM73v79ohuAhTzP4fYRHFz/CjV4S6ENzo2FLK4KxXZHHNW4veR1ATtynGY6Mc1xQ6RB
 #FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
 
 # Compiled FrostFS Smart Contracts
-FROSTFS_CONTRACTS_VERSION=8537293e
-FROSTFS_CONTRACTS_URL=https://http.t5.fs.neo.org/7sm9csjtRLpr4c9QD55q9JJM73v79ohuAhTzP4fYRHFz/BLG2NrQW5UAF1RSMSBK8Z4mGanhvzD9aTRk4NsRGVDV9
+FROSTFS_CONTRACTS_VERSION=694daebb19
+FROSTFS_CONTRACTS_URL=https://git.frostfs.info/TrueCloudLab/frostfs-contract/releases/download/v0.19.2/frostfs-contract-v0.19.2.tar.gz
 #FROSTFS_CONTRACTS_PATH=/path/to/unpacked/frostfs-contracts-dir
 
 # Jaeger tracing

From 2b6122192a4c26a84e6f8faa5533ab52fb2a88ef Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <e.stratonikov@yadro.com>
Date: Wed, 8 May 2024 11:33:19 +0300
Subject: [PATCH 06/41] [#67] services/ir: Remove deprecated flag in
 healthcheck

Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
---
 services/ir/healthcheck.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/services/ir/healthcheck.sh b/services/ir/healthcheck.sh
index 747bc8b..88fcdaa 100755
--- a/services/ir/healthcheck.sh
+++ b/services/ir/healthcheck.sh
@@ -1,6 +1,6 @@
 #!/bin/sh
 
-/frostfs-cli control healthcheck \
+/frostfs-cli control ir healthcheck \
 	--endpoint "$FROSTFS_IR_CONTROL_GRPC_ENDPOINT" \
-	--wallet /wallet01.key --ir |
+	--wallet /wallet01.key |
 	grep "Health status: READY"

From 0be22a937536ae5ef425b338caa676ea0711bbde Mon Sep 17 00:00:00 2001
From: Alexey Savchuk <a.savchuk@yadro.com>
Date: Mon, 8 Jul 2024 10:34:28 +0300
Subject: [PATCH 07/41] [#73] Update HTTP gate docs

Signed-off-by: Aleksey Savchuk <a.savchuk@yadro.com>
---
 docs/http_gate.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/http_gate.md b/docs/http_gate.md
index e2159ad..b6b2591 100644
--- a/docs/http_gate.md
+++ b/docs/http_gate.md
@@ -22,8 +22,8 @@ Image label prefix to use for containers.
 - Create a new container
 ```
 $ frostfs-cli --rpc-endpoint s01.frostfs.devenv:8080 \
-            --key wallets/wallet.key \
-            container create --basic-acl readonly --await \
+            --wallet wallets/wallet.key \
+            container create --basic-acl private --await \
             --policy "REP 1 SELECT 1 FROM *"
 container ID: 4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP
 awaiting...
@@ -33,7 +33,7 @@ container has been persisted on sidechain
 - Put an object into the newly created container
 ```
 $ frostfs-cli --rpc-endpoint s01.frostfs.devenv:8080 \
-            --key wallets/wallet.key \
+            --wallet wallets/wallet.key \
             object put --file /tmp/backup.jpeg \
             --cid 4LfREK1cetL4PUji5fqj9SgRTSmaC5jExEDK9HKCDjdP
 [/tmp/backup.jpeg] Object successfully stored

From d03be14312da6b1bd2f5bcbb113c4594eeaff258 Mon Sep 17 00:00:00 2001
From: Airat Arifullin <a.arifullin@yadro.com>
Date: Thu, 8 Aug 2024 13:18:13 +0300
Subject: [PATCH 08/41] [#75] Makefile: Add subjects for storage and client
 wallets to FrostfsID

Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
---
 Makefile | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index 051aa7d..9483dc7 100644
--- a/Makefile
+++ b/Makefile
@@ -85,7 +85,12 @@ up/bootstrap: get vendor/hosts
 		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 \
 		|| die "Failed to transfer GAS to alphabet wallets"; \
 		done
-	@echo "FrostFS sidechain environment is deployed"
+	@echo "Create frostfsid subject for ./wallets/wallet.json" \
+		&& subj_key=`docker container exec -it morph_chain neo-go wallet dump-keys -w /wallets/wallet.json | tail -1 | tr -d ' \r\n'` \
+		&& echo "Subject key: $${subj_key}" \
+		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid create-subject --namespace "" --subject-key $${subj_key} --subject-name walletsubject \
+		|| die "Failed to create subject for the wallet"; \
+	echo "FrostFS sidechain environment is deployed"
 
 # Build up certain service
 .PHONY: up/%

From f94fa284ece87feb5c6dd9bf18b664da916b2656 Mon Sep 17 00:00:00 2001
From: Alexander Chuprov <a.chuprov@yadro.com>
Date: Sat, 17 Aug 2024 05:50:27 +0300
Subject: [PATCH 09/41] [#76] Update frostfs-core components to v0.42.9

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>
---
 .env                              | 12 ++++++------
 services/ir/artifacts.mk          |  7 ++-----
 services/morph_chain/artifacts.mk |  7 ++-----
 3 files changed, 10 insertions(+), 16 deletions(-)

diff --git a/.env b/.env
index ad96218..b414b0d 100644
--- a/.env
+++ b/.env
@@ -12,12 +12,12 @@ NEOGO_VERSION=0.104.0
 NEOGO_IMAGE=nspccdev/neo-go
 
 # FrostFS InnerRing nodes
-IR_VERSION=0.38.5
-IR_IMAGE=truecloudlab/frostfs-ir
+IR_VERSION=v0.42.9
+IR_IMAGE=git.frostfs.info/truecloudlab/frostfs-ir
 
 # FrostFS Storage nodes
-NODE_VERSION=0.38.5
-NODE_IMAGE=truecloudlab/frostfs-storage
+NODE_VERSION=v0.42.9
+NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
 
 # NATS Server
 NATS_VERSION=2.7.2
@@ -40,12 +40,12 @@ LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a0567
 #LOCODE_DB_PATH=/path/to/locode_db
 
 # FrostFS CLI binary
-FROSTFS_CLI_URL=https://http.t5.fs.neo.org/7sm9csjtRLpr4c9QD55q9JJM73v79ohuAhTzP4fYRHFz/BtA6zWLtoDuDnzxSNkKPjyN5hGuSZFxGuJD1gh8kBwkP
+FROSTFS_CLI_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/${NODE_VERSION}//frostfs-cli
 #FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
 
 # FrostFS ADM tool binary
 FROSTFS_ADM_VERSION=498f9955ea
-FROSTFS_ADM_URL=https://http.t5.fs.neo.org/7sm9csjtRLpr4c9QD55q9JJM73v79ohuAhTzP4fYRHFz/CjV4S6ENzo2FLK4KxXZHHNW4veR1ATtynGY6Mc1xQ6RB
+FROSTFS_ADM_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/${NODE_VERSION}/frostfs-adm
 #FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
 
 # Compiled FrostFS Smart Contracts
diff --git a/services/ir/artifacts.mk b/services/ir/artifacts.mk
index 95b2c22..0cdbdbb 100644
--- a/services/ir/artifacts.mk
+++ b/services/ir/artifacts.mk
@@ -25,7 +25,6 @@ endif
 # Download FrostFS CLI 
 .ONESHELL:
 get.cli: FROSTFS_CLI_FILE=./vendor/frostfs-cli
-get.cli: FROSTFS_CLI_ARCHIVE_FILE=${FROSTFS_CLI_FILE}.tar.gz
 get.cli: FROSTFS_CLI_PATH?=
 get.cli:
 	@mkdir -p ./vendor
@@ -34,10 +33,8 @@ ifeq (${FROSTFS_CLI_PATH},)
 	@echo "⇒ Download FrostFS CLI binary from ${FROSTFS_CLI_URL}"
 	@curl \
 		-ksSL "${FROSTFS_CLI_URL}" \
-		-o ${FROSTFS_CLI_ARCHIVE_FILE} 
-	@tar -xvf ${FROSTFS_CLI_ARCHIVE_FILE} -C ./vendor | xargs -I {} \
-		mv ./vendor/{} ${FROSTFS_CLI_FILE}
-	@rm ${FROSTFS_CLI_ARCHIVE_FILE}
+		-o ${FROSTFS_CLI_FILE} 
+	@chmod +x ${FROSTFS_CLI_FILE}
 else
 	@echo "⇒ Copy local binary from ${FROSTFS_CLI_PATH}"
 	@cp ${FROSTFS_CLI_PATH} ${FROSTFS_CLI_FILE}
diff --git a/services/morph_chain/artifacts.mk b/services/morph_chain/artifacts.mk
index 3572e69..77a7ae3 100644
--- a/services/morph_chain/artifacts.mk
+++ b/services/morph_chain/artifacts.mk
@@ -20,15 +20,12 @@ endif
 
 # Download FrostFS ADM tool 
 get.adm: FROSTFS_ADM_DEST=./vendor/frostfs-adm
-get.adm: FROSTFS_ADM_ARCHIVE=frostfs-adm.tar.gz
 get.adm:
 
 ifeq (${FROSTFS_ADM_PATH},)
 	@echo "⇒ Download FrostFS ADM binary from ${FROSTFS_ADM_URL}"
-	@curl -skSL ${FROSTFS_ADM_URL} -o ${FROSTFS_ADM_ARCHIVE}
-	@tar -xvf ${FROSTFS_ADM_ARCHIVE} -C ./vendor | xargs -I {} \
-		mv ./vendor/{} ${FROSTFS_ADM_DEST}
-	@rm ${FROSTFS_ADM_ARCHIVE}
+	@curl -skSL ${FROSTFS_ADM_URL} -o ${FROSTFS_ADM_DEST}
+	@chmod +x ${FROSTFS_ADM_DEST}
 else
 	@echo "⇒ Copy frostfs-adm binary from ${FROSTFS_ADM_PATH}"
 	@cp ${FROSTFS_ADM_PATH} ${FROSTFS_ADM_DEST}

From 155042343b40c94507af61d0cbc7598dfed995a0 Mon Sep 17 00:00:00 2001
From: Alexander Chuprov <a.chuprov@yadro.com>
Date: Sat, 17 Aug 2024 06:25:11 +0300
Subject: [PATCH 10/41] [#69] service/storage: Add support -q flag in
 healthcheck

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>
---
 services/storage/docker-compose.yml | 12 ++++--------
 services/storage/healthcheck.sh     |  5 -----
 2 files changed, 4 insertions(+), 13 deletions(-)
 delete mode 100755 services/storage/healthcheck.sh

diff --git a/services/storage/docker-compose.yml b/services/storage/docker-compose.yml
index 8a8698e..fb10974 100644
--- a/services/storage/docker-compose.yml
+++ b/services/storage/docker-compose.yml
@@ -17,7 +17,6 @@ services:
       - storage_s01:/storage
       - ./../../vendor/frostfs-cli:/frostfs-cli
       - ./cli-cfg.yml:/cli-cfg.yml
-      - ./healthcheck.sh:/healthcheck.sh
       - ./s04tls.crt:/etc/ssl/certs/s04tls.crt
       - ../nats/client-cert.pem:/etc/frostfs-node/nats.tls.cert
       - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
@@ -36,7 +35,7 @@ services:
       - FROSTFS_NODE_ATTRIBUTE_1=UN-LOCODE:RU MOW
       - FROSTFS_NODE_ATTRIBUTE_2=Price:22
     healthcheck:
-      test: ["CMD-SHELL", "/healthcheck.sh"]
+      test: ["CMD-SHELL", "/frostfs-cli control healthcheck -q -c /cli-cfg.yml --endpoint \"$$FROSTFS_CONTROL_GRPC_ENDPOINT\""]
       interval: 2s
       timeout: 1s
       retries: 5
@@ -58,7 +57,6 @@ services:
       - storage_s02:/storage
       - ./../../vendor/frostfs-cli:/frostfs-cli
       - ./cli-cfg.yml:/cli-cfg.yml
-      - ./healthcheck.sh:/healthcheck.sh
       - ./s04tls.crt:/etc/ssl/certs/s04tls.crt
       - ../nats/client-cert.pem:/etc/frostfs-node/nats.tls.cert
       - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
@@ -77,7 +75,7 @@ services:
       - FROSTFS_NODE_ATTRIBUTE_1=UN-LOCODE:RU LED
       - FROSTFS_NODE_ATTRIBUTE_2=Price:33
     healthcheck:
-      test: ["CMD-SHELL", "/healthcheck.sh"]
+      test: ["CMD-SHELL", "/frostfs-cli control healthcheck -q -c /cli-cfg.yml --endpoint \"$$FROSTFS_CONTROL_GRPC_ENDPOINT\""]
       interval: 2s
       timeout: 1s
       retries: 5
@@ -99,7 +97,6 @@ services:
       - storage_s03:/storage
       - ./../../vendor/frostfs-cli:/frostfs-cli
       - ./cli-cfg.yml:/cli-cfg.yml
-      - ./healthcheck.sh:/healthcheck.sh
       - ./s04tls.crt:/etc/ssl/certs/s04tls.crt
       - ../nats/client-cert.pem:/etc/frostfs-node/nats.tls.cert
       - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
@@ -118,7 +115,7 @@ services:
       - FROSTFS_NODE_ATTRIBUTE_1=UN-LOCODE:SE STO
       - FROSTFS_NODE_ATTRIBUTE_2=Price:11
     healthcheck:
-      test: ["CMD-SHELL", "/healthcheck.sh"]
+      test: ["CMD-SHELL", "/frostfs-cli control healthcheck -q -c /cli-cfg.yml --endpoint \"$$FROSTFS_CONTROL_GRPC_ENDPOINT\""]
       interval: 2s
       timeout: 1s
       retries: 5
@@ -140,7 +137,6 @@ services:
       - storage_s04:/storage
       - ./../../vendor/frostfs-cli:/frostfs-cli
       - ./cli-cfg.yml:/cli-cfg.yml
-      - ./healthcheck.sh:/healthcheck.sh
       - ./s04tls.crt:/tls.crt
       - ./s04tls.key:/tls.key
       - ../nats/client-cert.pem:/etc/frostfs-node/nats.tls.cert
@@ -165,7 +161,7 @@ services:
       - FROSTFS_NODE_ATTRIBUTE_1=UN-LOCODE:FI HEL
       - FROSTFS_NODE_ATTRIBUTE_2=Price:44
     healthcheck:
-      test: ["CMD-SHELL", "/healthcheck.sh"]
+      test: ["CMD-SHELL", "/frostfs-cli control healthcheck -q -c /cli-cfg.yml --endpoint \"$$FROSTFS_CONTROL_GRPC_ENDPOINT\""]
       interval: 2s
       timeout: 1s
       retries: 5
diff --git a/services/storage/healthcheck.sh b/services/storage/healthcheck.sh
deleted file mode 100755
index 792d2ad..0000000
--- a/services/storage/healthcheck.sh
+++ /dev/null
@@ -1,5 +0,0 @@
-#!/bin/sh
-
-/frostfs-cli control healthcheck -c /cli-cfg.yml \
-	--endpoint "$FROSTFS_CONTROL_GRPC_ENDPOINT" |
-	grep "Health status: READY"

From ae658469a5d44191e51df539054b3f0367bfdb73 Mon Sep 17 00:00:00 2001
From: Alexander Chuprov <a.chuprov@yadro.com>
Date: Sat, 17 Aug 2024 06:25:24 +0300
Subject: [PATCH 11/41] [#69] service/ir: Add support -q flag in healthcheck

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>
---
 services/ir/docker-compose.yml | 3 +--
 services/ir/healthcheck.sh     | 6 ------
 2 files changed, 1 insertion(+), 8 deletions(-)
 delete mode 100755 services/ir/healthcheck.sh

diff --git a/services/ir/docker-compose.yml b/services/ir/docker-compose.yml
index 048651b..4e671b2 100644
--- a/services/ir/docker-compose.yml
+++ b/services/ir/docker-compose.yml
@@ -20,12 +20,11 @@ services:
       - ./../../vendor/hosts:/etc/hosts
       - ./../../vendor/locode_db:/locode/db
       - ./../../vendor/frostfs-cli:/frostfs-cli
-      - ./healthcheck.sh:/healthcheck.sh
       - ./cfg:/etc/frostfs/ir
     env_file: [ ".env", ".ir.env", ".int_test.env" ]
     command: [ "frostfs-ir", "--config", "/etc/frostfs/ir/config.yml" ]
     healthcheck:
-      test: ["CMD-SHELL", "/healthcheck.sh"]
+      test: ["CMD-SHELL", "/frostfs-cli control ir healthcheck -q --wallet /wallet01.key  --endpoint \"$$FROSTFS_IR_CONTROL_GRPC_ENDPOINT\""]
       interval: 2s
       timeout: 1s
       retries: 5
diff --git a/services/ir/healthcheck.sh b/services/ir/healthcheck.sh
deleted file mode 100755
index 88fcdaa..0000000
--- a/services/ir/healthcheck.sh
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/bin/sh
-
-/frostfs-cli control ir healthcheck \
-	--endpoint "$FROSTFS_IR_CONTROL_GRPC_ENDPOINT" \
-	--wallet /wallet01.key |
-	grep "Health status: READY"

From 044cf99e8dae647abb3706b498b27d00b58b6edc Mon Sep 17 00:00:00 2001
From: Alexander Chuprov <a.chuprov@yadro.com>
Date: Sat, 17 Aug 2024 08:08:24 +0300
Subject: [PATCH 12/41] [#70] Makefile: Make bootstrap idempotent

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>
---
 Makefile | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 9483dc7..2f505a9 100644
--- a/Makefile
+++ b/Makefile
@@ -85,11 +85,15 @@ up/bootstrap: get vendor/hosts
 		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 \
 		|| die "Failed to transfer GAS to alphabet wallets"; \
 		done
-	@echo "Create frostfsid subject for ./wallets/wallet.json" \
-		&& subj_key=`docker container exec -it morph_chain neo-go wallet dump-keys -w /wallets/wallet.json | tail -1 | tr -d ' \r\n'` \
+	@echo "Create frostfsid subject for ./wallets/wallet.json"; \
+	if [ -n "$$(./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid list-subjects --namespace '')" ]; then \
+		echo "Subject already exists"; \
+	else \
+		subj_key=`docker container exec -it morph_chain neo-go wallet dump-keys -w /wallets/wallet.json | tail -1 | tr -d ' \r\n'` \
 		&& echo "Subject key: $${subj_key}" \
 		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid create-subject --namespace "" --subject-key $${subj_key} --subject-name walletsubject \
 		|| die "Failed to create subject for the wallet"; \
+	fi
 	echo "FrostFS sidechain environment is deployed"
 
 # Build up certain service

From dd382f8ce048d9e0880f43471d7896de000c0843 Mon Sep 17 00:00:00 2001
From: Alexander Chuprov <a.chuprov@yadro.com>
Date: Sat, 17 Aug 2024 08:08:55 +0300
Subject: [PATCH 13/41] [#68] service/morph: Add volume for morph_chain

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>
---
 services/morph_chain/docker-compose.yml   | 4 ++++
 services/morph_chain/protocol.privnet.yml | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/services/morph_chain/docker-compose.yml b/services/morph_chain/docker-compose.yml
index dd44b2c..68535ea 100644
--- a/services/morph_chain/docker-compose.yml
+++ b/services/morph_chain/docker-compose.yml
@@ -19,9 +19,13 @@ services:
     - ./config.yml:/wallets/config.yml
     - ./../../vendor/hosts:/etc/hosts
     - ./../../wallets/wallet.json:/wallets/wallet.json
+    - chains:/chains
 
 networks:
   chain_int:
   internet:
     external: true
     name: basenet_internet
+
+volumes:
+  chains:
diff --git a/services/morph_chain/protocol.privnet.yml b/services/morph_chain/protocol.privnet.yml
index 560730a..2066029 100644
--- a/services/morph_chain/protocol.privnet.yml
+++ b/services/morph_chain/protocol.privnet.yml
@@ -17,7 +17,7 @@ ApplicationConfiguration:
   DBConfiguration:
     Type: "boltdb"
     BoltDBOptions:
-      FilePath: "./db/morph.bolt"
+      FilePath: "/chains/morph.bolt"
   P2P:
     Addresses:
       - ":20333"

From 439a9e71cfaf3837f16d9c501385c8ed2ff67dbc Mon Sep 17 00:00:00 2001
From: Alexander Chuprov <a.chuprov@yadro.com>
Date: Fri, 6 Sep 2024 14:09:08 +0300
Subject: [PATCH 14/41] [#81] env: Fix typo

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>
---
 .env | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.env b/.env
index b414b0d..c62cf17 100644
--- a/.env
+++ b/.env
@@ -40,7 +40,7 @@ LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a0567
 #LOCODE_DB_PATH=/path/to/locode_db
 
 # FrostFS CLI binary
-FROSTFS_CLI_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/${NODE_VERSION}//frostfs-cli
+FROSTFS_CLI_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/${NODE_VERSION}/frostfs-cli
 #FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
 
 # FrostFS ADM tool binary

From 2e67acbcb2af952933b87856083a6a926b840723 Mon Sep 17 00:00:00 2001
From: Alexander Chuprov <a.chuprov@yadro.com>
Date: Fri, 6 Sep 2024 14:37:48 +0300
Subject: [PATCH 15/41] [#78] env: Restore version format

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>
---
 .env | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.env b/.env
index c62cf17..dea5726 100644
--- a/.env
+++ b/.env
@@ -12,11 +12,11 @@ NEOGO_VERSION=0.104.0
 NEOGO_IMAGE=nspccdev/neo-go
 
 # FrostFS InnerRing nodes
-IR_VERSION=v0.42.9
+IR_VERSION=0.42.9
 IR_IMAGE=git.frostfs.info/truecloudlab/frostfs-ir
 
 # FrostFS Storage nodes
-NODE_VERSION=v0.42.9
+NODE_VERSION=0.42.9
 NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
 
 # NATS Server
@@ -40,12 +40,12 @@ LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a0567
 #LOCODE_DB_PATH=/path/to/locode_db
 
 # FrostFS CLI binary
-FROSTFS_CLI_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/${NODE_VERSION}/frostfs-cli
+FROSTFS_CLI_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/v${NODE_VERSION}/frostfs-cli
 #FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
 
 # FrostFS ADM tool binary
 FROSTFS_ADM_VERSION=498f9955ea
-FROSTFS_ADM_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/${NODE_VERSION}/frostfs-adm
+FROSTFS_ADM_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/v${NODE_VERSION}/frostfs-adm
 #FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
 
 # Compiled FrostFS Smart Contracts

From 7538bd9b171409fc5eeb5c08d074efe5792db133 Mon Sep 17 00:00:00 2001
From: Vitaliy Potyarkin <v.potyarkin@yadro.com>
Date: Tue, 10 Sep 2024 16:45:06 +0300
Subject: [PATCH 16/41] [#83] Honor IPV4_PREFIX in morph_chain config

Signed-off-by: Vitaliy Potyarkin <v.potyarkin@yadro.com>
---
 services/morph_chain/protocol.privnet.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/morph_chain/protocol.privnet.yml b/services/morph_chain/protocol.privnet.yml
index 2066029..f1cc754 100644
--- a/services/morph_chain/protocol.privnet.yml
+++ b/services/morph_chain/protocol.privnet.yml
@@ -36,7 +36,7 @@ ApplicationConfiguration:
       Password: "one"
   RPC:
     Addresses:
-      - "192.168.130.90:30333"
+      - ":30333"
     Enabled: true
     SessionEnabled: true
     EnableCORSWorkaround: false

From d0c32731f2c468dafd979337ad04af1075d2bca2 Mon Sep 17 00:00:00 2001
From: Alexander Chuprov <a.chuprov@yadro.com>
Date: Mon, 9 Sep 2024 18:59:33 +0300
Subject: [PATCH 17/41] [#80] Update frostfs-service components to v0.30.*

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>
---
 .env | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.env b/.env
index dea5726..17697f6 100644
--- a/.env
+++ b/.env
@@ -24,7 +24,7 @@ NATS_VERSION=2.7.2
 NATS_IMAGE=nats
 
 # HTTP Gate
-HTTP_GW_VERSION=0.28.0-rc.1-15-g5ae75eb9
+HTTP_GW_VERSION=0.30.2
 HTTP_GW_IMAGE=truecloudlab/frostfs-http-gw
 
 # REST Gate
@@ -32,7 +32,7 @@ REST_GW_VERSION=c9c85e90
 REST_GW_IMAGE=truecloudlab/frostfs-rest-gw
 
 # S3 Gate
-S3_GW_VERSION=0.28.0-rc.1-51-g9272f4e1
+S3_GW_VERSION=0.30.4
 S3_GW_IMAGE=truecloudlab/frostfs-s3-gw
 
 # FrostFS LOCODE database

From 636be7352ebf5221ed66b02a8df85cead7c3633e Mon Sep 17 00:00:00 2001
From: Nikita Zinkevich <n.zinkevich@yadro.com>
Date: Mon, 30 Sep 2024 17:04:11 +0300
Subject: [PATCH 18/41] [#84] Make targets for issuing credentials

Signed-off-by: Nikita Zinkevich <n.zinkevich@yadro.com>
---
 Makefile                                |  1 +
 README.md                               | 59 +++++++++++++++++++++++++
 services/morph_chain/docker-compose.yml |  1 +
 services/s3_gate/docker-compose.yml     |  8 ++++
 services/s3_gate/issue-creds.sh         | 41 +++++++++++++++++
 services/s3_gate/prepare.mk             | 14 ++++++
 6 files changed, 124 insertions(+)
 create mode 100755 services/s3_gate/issue-creds.sh
 create mode 100644 services/s3_gate/prepare.mk

diff --git a/Makefile b/Makefile
index 2f505a9..dff81df 100644
--- a/Makefile
+++ b/Makefile
@@ -60,6 +60,7 @@ get: $(foreach SVC, $(GET_SVCS), get.$(SVC))
 .PHONY: up
 up: up/basic
 	@$(foreach SVC, $(START_SVCS), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
+	./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml --account=`docker container exec morph_chain neo-go wallet dump-keys -w /wallets/s3-wallet.json | head -1 | awk '{print $1}'` || die "Couldn't set s3-gw wallet as proxy wallet"
 	@echo "Full FrostFS Developer Environment is ready"
 
 # Build up FrostFS
diff --git a/README.md b/README.md
index aa07a08..ad57655 100644
--- a/README.md
+++ b/README.md
@@ -137,6 +137,65 @@ Display addresses and host names for each running service, if available.
 
 Clean up `vendor` directory.
 
+### s3cred
+
+Registers user wallet and issues s3 credentials.
+
+Usage and default parameter values:
+```sh
+make s3cred [password=""] [contract_password=s3] [wallet=/user_wallet.json] [gate_public_key=0313b1ac3a8076e155a7e797b24f0b650cccad5941ea59d7cfd51a024a8b2a06bf]
+```
+
+As soon as the storage node is in the network map (see above) you can generate S3
+credentials:
+
+``` sh
+$ make s3cred
+{
+  "access_key_id": "EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT0AKRSjJ5fmcqf3Ht2VCAkfmPQUVARghRB77xHCA1BoN2p",
+  "secret_access_key": "d70c1dba83f0f90bb231f06f1ce0e0dfbcfb122f4b4345a3c18d3869c359b79f",
+  "owner_private_key": "140947599afd9ca89af4b358c3176eb046e554d942a0dc99a8e06f3e43c8f4ad",
+  "wallet_public_key": "0324e76288fcb900100d01802a14ef977cca45ad073561230446df14b344c858b6",
+  "container_id": "EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT"
+}                   
+```
+Running without any parameters will result in defaults which are based on the private key from
+`/user-wallet.json` file and `/wallet.json` contract wallet.
+
+Now let's configure an S3 client (AWS CLI will be used as example):
+
+``` sh
+$ aws configure
+AWS Access Key ID []: EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT0AKRSjJ5fmcqf3Ht2VCAkfmPQUVARghRB77xHCA1BoN2p
+AWS Secret Access Key []: d70c1dba83f0f90bb231f06f1ce0e0dfbcfb122f4b4345a3c18d3869c359b79f
+Default region name []: us-east-1
+Default output format []: json
+```
+
+If you need to create credentials for different users, put user wallets to `wallets` dir and specify them via `wallet` parameter.
+Pass wallet password in `password` parameter if it's not default. The same is for `contract_wallet` and `gate_public_key` params.
+
+```sh
+$ make s3cred wallet=custom_wallet.json password=test
+{
+  "access_key_id": "jHhL5B33o16R4jQsb8wm9A3RRdS6KrTB5N4bja9Jys904W7xXFNKqem2ACvTRWRYJsZMCUikYFSokN7pPJziWyDi",
+  "secret_access_key": "21bb64fafa32c82417fd8b97ac56cc8a085998a3852632d52fe7042453daa440",
+  "owner_private_key": "10f6f9d7a47bb0bf68363ad8a99fe69f1493f8b6e1665b3e4e83feb2d5c7ee39",
+  "wallet_public_key": "03e38759973a6bb722baabc2dd84036a39f0b2f53d32fec45a4dacde8a50fe4b70",
+  "container_id": "jHhL5B33o16R4jQsb8wm9A3RRdS6KrTB5N4bja9Jys9"
+}
+```
+
+To get credentials from custom wallet, place it in `wallets` dir before start.
+
+### cred
+
+Usage and default parameter values:
+```sh
+make cred [password=""] [contract_password=s3] [wallet=/user_wallet.json]
+```
+The same as `s3cred`, but it doesn't issues s3 credentials.
+
 ## Contributing
 
 Feel free to contribute to this project after reading the [contributing
diff --git a/services/morph_chain/docker-compose.yml b/services/morph_chain/docker-compose.yml
index 68535ea..2c2facb 100644
--- a/services/morph_chain/docker-compose.yml
+++ b/services/morph_chain/docker-compose.yml
@@ -19,6 +19,7 @@ services:
     - ./config.yml:/wallets/config.yml
     - ./../../vendor/hosts:/etc/hosts
     - ./../../wallets/wallet.json:/wallets/wallet.json
+    - ./../s3_gate/wallet.json:/wallets/s3-wallet.json
     - chains:/chains
 
 networks:
diff --git a/services/s3_gate/docker-compose.yml b/services/s3_gate/docker-compose.yml
index 6b43a0b..f7fc28d 100644
--- a/services/s3_gate/docker-compose.yml
+++ b/services/s3_gate/docker-compose.yml
@@ -12,11 +12,17 @@ services:
       internet:
         ipv4_address: ${IPV4_PREFIX}.82
     volumes:
+      # Gate wallet
       - ./wallet.json:/wallet.json
+      # Custom user wallets
+      - ./wallets:/wallets
+      # Default user wallet
+      - ./../../wallets/wallet.json:/wallets/wallet.json
       - ./tls.key:/tls.key
       - ./tls.crt:/tls.crt
       - ./../../vendor/hosts:/etc/hosts
       - ./cfg:/etc/frostfs/s3
+      - ./issue-creds.sh:/usr/bin/issue-creds.sh
     stop_signal: SIGTERM
     stop_grace_period: 15s
     env_file: [ ".env", ".s3.env", ".int_test.env" ]
@@ -34,6 +40,8 @@ services:
       - S3_GW_PEERS_2_WEIGHT=0.2
       - S3_GW_PEERS_3_ADDRESS=s04.${LOCAL_DOMAIN}:8080
       - S3_GW_PEERS_3_WEIGHT=0.2
+      - AUTHMATE_WALLET_PASSPHRASE=
+      - AUTHMATE_WALLET_CONTRACT_PASSPHRASE=s3
 
 networks:
   s3_gate_int:
diff --git a/services/s3_gate/issue-creds.sh b/services/s3_gate/issue-creds.sh
new file mode 100755
index 0000000..e2355f8
--- /dev/null
+++ b/services/s3_gate/issue-creds.sh
@@ -0,0 +1,41 @@
+#!/bin/bash
+
+initUser() {
+  /bin/frostfs-s3-authmate register-user \
+    --wallet $WALLET_PATH \
+    --rpc-endpoint http://morph-chain.frostfs.devenv:30333 \
+    --username $USERNAME \
+    --contract-wallet /wallet.json 1> /dev/null && touch $WALLET_CACHE/$USERNAME
+}
+
+issueCreds() {
+  /bin/frostfs-s3-authmate issue-secret \
+    --wallet $WALLET_PATH \
+    --peer s01.frostfs.devenv:8080 \
+    --gate-public-key $S3_GATE_PUBLIC_KEY \
+    --container-placement-policy "REP 3"
+}
+
+set -e
+
+WALLET_PATH=/wallets/$2
+if [[ -z "$2" ]]; then
+  WALLET_PATH=/wallets/wallet.json
+fi
+
+S3_GATE_PUBLIC_KEY=$3
+if [[ -z "$3" ]]; then
+  S3_GATE_PUBLIC_KEY=0313b1ac3a8076e155a7e797b24f0b650cccad5941ea59d7cfd51a024a8b2a06bf
+fi 
+
+WALLET_CACHE=/data/wallets
+mkdir -p $WALLET_CACHE
+
+USERNAME=$(echo $WALLET_PATH | md5sum | cut -d' ' -f1)
+if [ ! -e $WALLET_CACHE/$USERNAME ]; then
+  initUser
+fi
+
+if [ $1 == "s3" ]; then
+  issueCreds
+fi
diff --git a/services/s3_gate/prepare.mk b/services/s3_gate/prepare.mk
new file mode 100644
index 0000000..c97add8
--- /dev/null
+++ b/services/s3_gate/prepare.mk
@@ -0,0 +1,14 @@
+.PHONY: s3cred register
+
+password?=
+contract_password?=s3
+gate_public_key?=
+wallet?=
+
+# Register wallet & generate S3 credentials
+s3cred:
+	@docker exec -e AUTHMATE_WALLET_PASSPHRASE="$(password)" -e AUTHMATE_WALLET_CONTRACT_PASSPHRASE="$(contract_password)" s3_gate /usr/bin/issue-creds.sh s3 "$(wallet)" "$(gate_public_key)"
+
+# Only registers user wallet
+register:
+	@docker exec -e AUTHMATE_WALLET_PASSPHRASE="$(password)" -e AUTHMATE_WALLET_CONTRACT_PASSPHRASE="$(contract_password)" s3_gate /usr/bin/issue-creds.sh native "$(wallet)"

From 7152f59232ac5ac763cbb6433331d161f64c56d0 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <e.stratonikov@yadro.com>
Date: Thu, 31 Oct 2024 10:24:30 +0300
Subject: [PATCH 19/41] [#88] Remove nats service

It was removed from node in TrueCloudLab/frostfs-node#1161.

Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
---
 .basic_services                     |  1 -
 .env                                |  4 ---
 .gitignore                          |  1 -
 Makefile                            |  2 +-
 services/nats/.env                  |  1 -
 services/nats/.hosts                |  1 -
 services/nats/.int_test.env         |  1 -
 services/nats/artifacts.mk          |  7 -----
 services/nats/docker-compose.yml    | 30 ------------------
 services/nats/generate_cert.sh      | 49 -----------------------------
 services/nats/nats.conf             | 15 ---------
 services/storage/cfg/config.yml     |  8 -----
 services/storage/docker-compose.yml | 12 -------
 13 files changed, 1 insertion(+), 131 deletions(-)
 delete mode 120000 services/nats/.env
 delete mode 100644 services/nats/.hosts
 delete mode 120000 services/nats/.int_test.env
 delete mode 100644 services/nats/artifacts.mk
 delete mode 100644 services/nats/docker-compose.yml
 delete mode 100755 services/nats/generate_cert.sh
 delete mode 100644 services/nats/nats.conf

diff --git a/.basic_services b/.basic_services
index 201ea70..845c731 100644
--- a/.basic_services
+++ b/.basic_services
@@ -1,5 +1,4 @@
 # Services start/stop order
 # Will start from top to bottom and stop in reverse
-nats
 ir
 storage
diff --git a/.env b/.env
index 17697f6..6bb3728 100644
--- a/.env
+++ b/.env
@@ -19,10 +19,6 @@ IR_IMAGE=git.frostfs.info/truecloudlab/frostfs-ir
 NODE_VERSION=0.42.9
 NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
 
-# NATS Server
-NATS_VERSION=2.7.2
-NATS_IMAGE=nats
-
 # HTTP Gate
 HTTP_GW_VERSION=0.30.2
 HTTP_GW_IMAGE=truecloudlab/frostfs-http-gw
diff --git a/.gitignore b/.gitignore
index 36e495d..a672692 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,4 +15,3 @@ sites/*
 # Runtime generation keys
 services/storage/*tls.crt
 services/storage/*tls.key
-services/nats/*.pem
diff --git a/Makefile b/Makefile
index dff81df..c4a6c48 100644
--- a/Makefile
+++ b/Makefile
@@ -150,7 +150,7 @@ hosts: vendor/hosts
 .PHONY: clean
 .ONESHELL:
 clean:
-	@rm -rf vendor/* services/storage/s04tls.* services/nats/*.pem
+	@rm -rf vendor/* services/storage/s04tls.*
 	@> .int_test.env
 	@for svc in $(PULL_SVCS)
 	do
diff --git a/services/nats/.env b/services/nats/.env
deleted file mode 120000
index c7360fb..0000000
--- a/services/nats/.env
+++ /dev/null
@@ -1 +0,0 @@
-../../.env
\ No newline at end of file
diff --git a/services/nats/.hosts b/services/nats/.hosts
deleted file mode 100644
index 6ed5417..0000000
--- a/services/nats/.hosts
+++ /dev/null
@@ -1 +0,0 @@
-IPV4_PREFIX.101 nats.LOCAL_DOMAIN
diff --git a/services/nats/.int_test.env b/services/nats/.int_test.env
deleted file mode 120000
index 582b6a2..0000000
--- a/services/nats/.int_test.env
+++ /dev/null
@@ -1 +0,0 @@
-../../.int_test.env
\ No newline at end of file
diff --git a/services/nats/artifacts.mk b/services/nats/artifacts.mk
deleted file mode 100644
index b66cebf..0000000
--- a/services/nats/artifacts.mk
+++ /dev/null
@@ -1,7 +0,0 @@
-# Create new TLS certs for NATS server and clients
-
-NATS_DIR=$(abspath services/nats)
-
-get.nats:
-	@echo "⇒ Creating certs for NATS server and clients"
-	${NATS_DIR}/generate_cert.sh ${LOCAL_DOMAIN} > /dev/null
diff --git a/services/nats/docker-compose.yml b/services/nats/docker-compose.yml
deleted file mode 100644
index cb89948..0000000
--- a/services/nats/docker-compose.yml
+++ /dev/null
@@ -1,30 +0,0 @@
----
-
-services:
-  nats:
-    image: ${NATS_IMAGE}:${NATS_VERSION}
-    domainname: ${LOCAL_DOMAIN}
-    hostname: nats
-    container_name: nats
-    restart: on-failure
-    dns: 
-      - ${IPV4_PREFIX}.101
-    networks:
-      nats_int:
-      internet:
-        ipv4_address: ${IPV4_PREFIX}.101
-    volumes:
-      - ./../../vendor/hosts:/etc/hosts
-      - ./nats.conf:/etc/nats/frostfs-nats-server.conf
-      - ./server-cert.pem:/certs/server-cert.pem
-      - ./server-key.pem:/certs/server-key.pem
-      - ./ca-cert.pem:/certs/ca-cert.pem
-    stop_signal: SIGKILL
-    env_file: [ ".env", ".int_test.env" ]
-    command: ["-c", "/etc/nats/frostfs-nats-server.conf"]
-
-networks:
-  nats_int:
-  internet:
-    external: true
-    name: basenet_internet
diff --git a/services/nats/generate_cert.sh b/services/nats/generate_cert.sh
deleted file mode 100755
index 4c4dd0b..0000000
--- a/services/nats/generate_cert.sh
+++ /dev/null
@@ -1,49 +0,0 @@
-#!/bin/bash
-
-source bin/helper.sh
-
-WORKDIR=$(dirname "$0")
-LOCAL_DOMAIN=$1
-
-CA_KEY=$WORKDIR/ca-key.pem
-CA_CRT=$WORKDIR/ca-cert.pem
-
-SRV_KEY=$WORKDIR/server-key.pem
-SRV_REQ=$WORKDIR/server-req.csr
-SRV_CRT=$WORKDIR/server-cert.pem
-
-CLI_KEY=$WORKDIR/client-key.pem
-CLI_REQ=$WORKDIR/client-req.csr
-CLI_CRT=$WORKDIR/client-cert.pem
-
-SUBJ="/O=TrueCloudLab"
-
-if [[ ! -f $CA_KEY || ! -f $CA_CRT ]]; then
-	openssl req -newkey rsa:4096 -x509 -days 365 -nodes -keyout $CA_KEY -out $CA_CRT -subj $SUBJ 2>&1 ||
-		die "CA certificate was not created"
-fi
-
-if [[ ! -f $SRV_KEY || ! -f $SRV_CRT ]]; then
-	openssl req -newkey rsa:4096 -nodes -keyout $SRV_KEY -out $SRV_REQ -subj $SUBJ 2>&1 ||
-		die "Server certificate was not created"
-
-	openssl x509 -req -days 365 -set_serial 01 -in $SRV_REQ -out $SRV_CRT -CA $CA_CRT -CAkey $CA_KEY \
- 		-extensions san -extfile <(printf "[san]\nsubjectAltName=DNS:nats.$LOCAL_DOMAIN") 2>&1 || {
-		rm $SRV_REQ
-		die "Server certificate was not signed by CA"
-	}
-
-	rm $SRV_REQ
-fi
-
-if [[ ! -f $CLI_KEY || ! -f $CLI_CRT ]]; then
-	openssl req -newkey rsa:4096 -nodes -keyout $CLI_KEY -out $CLI_REQ -subj $SUBJ 2>&1 ||
-		die "Client certificate was not created"
-
-	openssl x509 -req -days 365 -set_serial 01 -in $CLI_REQ -out $CLI_CRT -CA $CA_CRT -CAkey $CA_KEY 2>&1 || {
-		rm $CLI_REQ
-		die "Client certificate was not signed by CA"
-	}
-
-	rm $CLI_REQ
-fi
diff --git a/services/nats/nats.conf b/services/nats/nats.conf
deleted file mode 100644
index 0c7af0a..0000000
--- a/services/nats/nats.conf
+++ /dev/null
@@ -1,15 +0,0 @@
-port: 4222
-monitor_port: 8222
-
-jetstream {
-   store_dir=nats
-   max_memory_store: 1GB
-   max_file_store: 2GB
-}
-
-tls {
-  cert_file: /certs/server-cert.pem
-  key_file:  /certs/server-key.pem
-  ca_file:   /certs/ca-cert.pem 
-  verify:    true
-}
diff --git a/services/storage/cfg/config.yml b/services/storage/cfg/config.yml
index 6b3e7a8..8672069 100644
--- a/services/storage/cfg/config.yml
+++ b/services/storage/cfg/config.yml
@@ -35,14 +35,6 @@ morph:
 # Common storage node settings
 node:
   attribute_0: "User-Agent:FrostFS/0.34"
-  notification:
-    enabled: true  # Turn on object notification service
-    endpoint: "tls://nats.frostfs.devenv:4222"  # Notification server endpoint
-    timeout: "6s"  # Timeout for object notification client connection
-    default_topic: "test"  # Default topic for object notifications if not found in object's meta
-    certificate: "/etc/frostfs-node/nats.tls.cert"  # Path to TLS certificate
-    key: "/etc/frostfs-node/nats.tls.key"  # Path to TLS key
-    ca: "/etc/frostfs-node/nats.ca.crt"  # Path to optional CA certificate
 
 # Tree section
 tree:
diff --git a/services/storage/docker-compose.yml b/services/storage/docker-compose.yml
index fb10974..6a070be 100644
--- a/services/storage/docker-compose.yml
+++ b/services/storage/docker-compose.yml
@@ -18,9 +18,6 @@ services:
       - ./../../vendor/frostfs-cli:/frostfs-cli
       - ./cli-cfg.yml:/cli-cfg.yml
       - ./s04tls.crt:/etc/ssl/certs/s04tls.crt
-      - ../nats/client-cert.pem:/etc/frostfs-node/nats.tls.cert
-      - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
-      - ../nats/ca-cert.pem:/etc/frostfs-node/nats.ca.crt
       - ./cfg:/etc/frostfs/storage
     stop_signal: SIGTERM
     stop_grace_period: 15s
@@ -58,9 +55,6 @@ services:
       - ./../../vendor/frostfs-cli:/frostfs-cli
       - ./cli-cfg.yml:/cli-cfg.yml
       - ./s04tls.crt:/etc/ssl/certs/s04tls.crt
-      - ../nats/client-cert.pem:/etc/frostfs-node/nats.tls.cert
-      - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
-      - ../nats/ca-cert.pem:/etc/frostfs-node/nats.ca.crt
       - ./cfg:/etc/frostfs/storage
     stop_signal: SIGTERM
     stop_grace_period: 15s
@@ -98,9 +92,6 @@ services:
       - ./../../vendor/frostfs-cli:/frostfs-cli
       - ./cli-cfg.yml:/cli-cfg.yml
       - ./s04tls.crt:/etc/ssl/certs/s04tls.crt
-      - ../nats/client-cert.pem:/etc/frostfs-node/nats.tls.cert
-      - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
-      - ../nats/ca-cert.pem:/etc/frostfs-node/nats.ca.crt
       - ./cfg:/etc/frostfs/storage
     stop_signal: SIGTERM
     stop_grace_period: 15s
@@ -139,9 +130,6 @@ services:
       - ./cli-cfg.yml:/cli-cfg.yml
       - ./s04tls.crt:/tls.crt
       - ./s04tls.key:/tls.key
-      - ../nats/client-cert.pem:/etc/frostfs-node/nats.tls.cert
-      - ../nats/client-key.pem:/etc/frostfs-node/nats.tls.key
-      - ../nats/ca-cert.pem:/etc/frostfs-node/nats.ca.crt
       - ./cfg:/etc/frostfs/storage
     stop_signal: SIGTERM
     stop_grace_period: 15s

From 10e5bed2afec13cd9803f012360c1bd7dcd184c7 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <e.stratonikov@yadro.com>
Date: Thu, 31 Oct 2024 10:38:09 +0300
Subject: [PATCH 20/41] [#79] storage: Take User-Agent from NODE_VERSION

Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
---
 services/storage/cfg/config.yml     | 4 ----
 services/storage/docker-compose.yml | 4 ++++
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/services/storage/cfg/config.yml b/services/storage/cfg/config.yml
index 8672069..0e2526d 100644
--- a/services/storage/cfg/config.yml
+++ b/services/storage/cfg/config.yml
@@ -32,10 +32,6 @@ morph:
     - address: ws://morph-chain:30333/ws
       priority: 1
 
-# Common storage node settings
-node:
-  attribute_0: "User-Agent:FrostFS/0.34"
-
 # Tree section
 tree:
   enabled: true
diff --git a/services/storage/docker-compose.yml b/services/storage/docker-compose.yml
index 6a070be..785ce79 100644
--- a/services/storage/docker-compose.yml
+++ b/services/storage/docker-compose.yml
@@ -29,6 +29,7 @@ services:
       - FROSTFS_NODE_ADDRESSES=s01.${LOCAL_DOMAIN}:8080
       - FROSTFS_GRPC_0_ENDPOINT=s01.${LOCAL_DOMAIN}:8080
       - FROSTFS_CONTROL_GRPC_ENDPOINT=s01.${LOCAL_DOMAIN}:8081
+      - FROSTFS_NODE_ATTRIBUTE_0=User-Agent:FrostFS/${NODE_VERSION}
       - FROSTFS_NODE_ATTRIBUTE_1=UN-LOCODE:RU MOW
       - FROSTFS_NODE_ATTRIBUTE_2=Price:22
     healthcheck:
@@ -66,6 +67,7 @@ services:
       - FROSTFS_NODE_ADDRESSES=s02.${LOCAL_DOMAIN}:8080
       - FROSTFS_GRPC_0_ENDPOINT=s02.${LOCAL_DOMAIN}:8080
       - FROSTFS_CONTROL_GRPC_ENDPOINT=s02.${LOCAL_DOMAIN}:8081
+      - FROSTFS_NODE_ATTRIBUTE_0=User-Agent:FrostFS/${NODE_VERSION}
       - FROSTFS_NODE_ATTRIBUTE_1=UN-LOCODE:RU LED
       - FROSTFS_NODE_ATTRIBUTE_2=Price:33
     healthcheck:
@@ -103,6 +105,7 @@ services:
       - FROSTFS_NODE_ADDRESSES=s03.${LOCAL_DOMAIN}:8080
       - FROSTFS_GRPC_0_ENDPOINT=s03.${LOCAL_DOMAIN}:8080
       - FROSTFS_CONTROL_GRPC_ENDPOINT=s03.${LOCAL_DOMAIN}:8081
+      - FROSTFS_NODE_ATTRIBUTE_0=User-Agent:FrostFS/${NODE_VERSION}
       - FROSTFS_NODE_ATTRIBUTE_1=UN-LOCODE:SE STO
       - FROSTFS_NODE_ATTRIBUTE_2=Price:11
     healthcheck:
@@ -146,6 +149,7 @@ services:
       - FROSTFS_GRPC_1_TLS_ENABLED=true
       - FROSTFS_GRPC_1_TLS_CERTIFICATE=/tls.crt
       - FROSTFS_GRPC_1_TLS_KEY=/tls.key
+      - FROSTFS_NODE_ATTRIBUTE_0=User-Agent:FrostFS/${NODE_VERSION}
       - FROSTFS_NODE_ATTRIBUTE_1=UN-LOCODE:FI HEL
       - FROSTFS_NODE_ATTRIBUTE_2=Price:44
     healthcheck:

From a0fdaebbf41d847badeac4e39961ef4cf95df3d0 Mon Sep 17 00:00:00 2001
From: Pavel Pogodaev <p.pogodaev@yadro.com>
Date: Fri, 25 Oct 2024 16:24:26 +0300
Subject: [PATCH 21/41] [#85] Add s3 lifecycler

Signed-off-by: Pavel Pogodaev <p.pogodaev@yadro.com>
---
 .env                                      |  6 +++-
 .services                                 |  1 +
 services/s3_lifecycler/.env               |  1 +
 services/s3_lifecycler/.hosts             |  1 +
 services/s3_lifecycler/.int_test.env      |  1 +
 services/s3_lifecycler/cfg/config.yml     | 42 +++++++++++++++++++++++
 services/s3_lifecycler/docker-compose.yml | 38 ++++++++++++++++++++
 services/s3_lifecycler/wallet.json        | 30 ++++++++++++++++
 8 files changed, 119 insertions(+), 1 deletion(-)
 create mode 120000 services/s3_lifecycler/.env
 create mode 100644 services/s3_lifecycler/.hosts
 create mode 120000 services/s3_lifecycler/.int_test.env
 create mode 100644 services/s3_lifecycler/cfg/config.yml
 create mode 100644 services/s3_lifecycler/docker-compose.yml
 create mode 100644 services/s3_lifecycler/wallet.json

diff --git a/.env b/.env
index 6bb3728..a1a1586 100644
--- a/.env
+++ b/.env
@@ -28,9 +28,13 @@ REST_GW_VERSION=c9c85e90
 REST_GW_IMAGE=truecloudlab/frostfs-rest-gw
 
 # S3 Gate
-S3_GW_VERSION=0.30.4
+S3_GW_VERSION=0.31.0-rc.4
 S3_GW_IMAGE=truecloudlab/frostfs-s3-gw
 
+# Lifecycler
+S3_LIFECYCLER_VERSION=0.1.3
+S3_LIFECYCLER_IMAGE=truecloudlab/frostfs-s3-lifecycler
+
 # FrostFS LOCODE database
 LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a056712e8e54
 #LOCODE_DB_PATH=/path/to/locode_db
diff --git a/.services b/.services
index d9f34c7..d165241 100644
--- a/.services
+++ b/.services
@@ -3,3 +3,4 @@
 http_gate
 s3_gate
 rest_gate
+s3_lifecycler
diff --git a/services/s3_lifecycler/.env b/services/s3_lifecycler/.env
new file mode 120000
index 0000000..c7360fb
--- /dev/null
+++ b/services/s3_lifecycler/.env
@@ -0,0 +1 @@
+../../.env
\ No newline at end of file
diff --git a/services/s3_lifecycler/.hosts b/services/s3_lifecycler/.hosts
new file mode 100644
index 0000000..8eb1796
--- /dev/null
+++ b/services/s3_lifecycler/.hosts
@@ -0,0 +1 @@
+IPV4_PREFIX.84 lifecycler.LOCAL_DOMAIN
diff --git a/services/s3_lifecycler/.int_test.env b/services/s3_lifecycler/.int_test.env
new file mode 120000
index 0000000..582b6a2
--- /dev/null
+++ b/services/s3_lifecycler/.int_test.env
@@ -0,0 +1 @@
+../../.int_test.env
\ No newline at end of file
diff --git a/services/s3_lifecycler/cfg/config.yml b/services/s3_lifecycler/cfg/config.yml
new file mode 100644
index 0000000..2555980
--- /dev/null
+++ b/services/s3_lifecycler/cfg/config.yml
@@ -0,0 +1,42 @@
+logger:
+  level: debug
+
+prometheus:
+  enabled: true
+  address: :9090
+  
+lifecycle:
+  job_fetcher_buffer: 1000
+  executor_pool_size: 100  
+
+frostfs:
+  stream_timeout: 10s
+  connect_timeout: 10s
+  healthcheck_timeout: 15s
+  rebalance_interval: 60s
+  pool_error_threshold: 100
+  tree_pool_max_attempts: 4
+
+credential:
+  use: wallets
+  source:
+    wallets:
+      - path: /wallet.json
+        address: NTt1rxvmEDxEuuogLxs2xgxA71qhVaUcN7
+        passphrase: "cycle"
+      - path: /user-wallet.json
+        address: NbUgTSFvPmsRxmGeWpuuGeJUoRoi6PErcM
+        passphrase: ""
+        
+morph:
+  reconnect_clients_interval: 30s
+  dial_timeout: 5s
+  contract:
+    netmap: netmap.frostfs
+    frostfsid: frostfsid.frostfs
+    container: container.frostfs
+
+# Wallet configuration
+wallet:
+  path: /wallet.json # Path to wallet
+  passphrase: "cycle" # Passphrase to decrypt wallet
diff --git a/services/s3_lifecycler/docker-compose.yml b/services/s3_lifecycler/docker-compose.yml
new file mode 100644
index 0000000..3456d0c
--- /dev/null
+++ b/services/s3_lifecycler/docker-compose.yml
@@ -0,0 +1,38 @@
+---
+
+version: "2.4"
+services:
+  s3_lifecycler:
+    image: ${S3_LIFECYCLER_IMAGE}:${S3_LIFECYCLER_VERSION}
+    domainname: ${LOCAL_DOMAIN}
+    hostname: s3_lifecycler
+    container_name: s3_lifecycler
+    restart: on-failure
+    networks:
+      s3_lifecycler_int:
+      internet:
+        ipv4_address: ${IPV4_PREFIX}.84
+    volumes:
+      - ./wallet.json:/wallet.json
+      - ./../../vendor/hosts:/etc/hosts
+      - ./cfg:/etc/frostfs/s3-lifecycler
+      - ./../../wallets/wallet.json:/user-wallet.json
+    stop_signal: SIGKILL
+    env_file: [ ".env", ".int_test.env" ]
+    command: [ "frostfs-s3-lifecycler", "--config", "/etc/frostfs/s3-lifecycler/config.yml" ]
+    environment:
+      - S3_LIFECYCLER_MORPH_RPC_ENDPOINT_0_ADDRESS=ws://morph-chain:30333/ws
+      - S3_LIFECYCLER_FROSTFS_PEERS_0_ADDRESS=s01.${LOCAL_DOMAIN}:8080
+      - S3_LIFECYCLER_FROSTFS_PEERS_0_WEIGHT=0.2
+      - S3_LIFECYCLER_FROSTFS_PEERS_1_ADDRESS=s02.${LOCAL_DOMAIN}:8080
+      - S3_LIFECYCLER_FROSTFS_PEERS_1_WEIGHT=0.2
+      - S3_LIFECYCLER_FROSTFS_PEERS_2_ADDRESS=s03.${LOCAL_DOMAIN}:8080
+      - S3_LIFECYCLER_FROSTFS_PEERS_2_WEIGHT=0.2
+      - S3_LIFECYCLER_FROSTFS_PEERS_3_ADDRESS=s04.${LOCAL_DOMAIN}:8080
+      - S3_LIFECYCLER_FROSTFS_PEERS_3_WEIGHT=0.2
+
+networks:
+  s3_lifecycler_int:
+  internet:
+    external: true
+    name: basenet_internet
diff --git a/services/s3_lifecycler/wallet.json b/services/s3_lifecycler/wallet.json
new file mode 100644
index 0000000..ff8f34e
--- /dev/null
+++ b/services/s3_lifecycler/wallet.json
@@ -0,0 +1,30 @@
+{
+  "version": "1.0",
+  "accounts": [
+    {
+      "address": "NTt1rxvmEDxEuuogLxs2xgxA71qhVaUcN7",
+      "key": "6PYR3XurAyTzVeDG5WV2Z8vnGdySw3mTLuKjr6Nwo7tae64SJ7XjZSMMPQ",
+      "label": "lifecycler",
+      "contract": {
+        "script": "DCED9z0M+WSGfXZGxYLj1yYwmgxJXE/kNA4+oWNi0q1uKCdBVuezJw==",
+        "parameters": [
+          {
+            "name": "parameter0",
+            "type": "Signature"
+          }
+        ],
+        "deployed": false
+      },
+      "lock": false,
+      "isDefault": false
+    }
+  ],
+  "scrypt": {
+    "n": 16384,
+    "r": 8,
+    "p": 8
+  },
+  "extra": {
+    "Tokens": null
+  }
+}

From 326578f0ab2ead1423e137b012ed7dd0e3707f33 Mon Sep 17 00:00:00 2001
From: Vitaliy Potyarkin <v.potyarkin@yadro.com>
Date: Wed, 6 Nov 2024 11:31:27 +0300
Subject: [PATCH 22/41] [#90] Stop using obsolete .github directory

This commit is a part of multi-repo cleanup effort:
https://git.frostfs.info/TrueCloudLab/frostfs-infra/issues/136

Signed-off-by: Vitaliy Potyarkin <v.potyarkin@yadro.com>
---
 .dockerignore                                           | 1 -
 {.github => .forgejo}/ISSUE_TEMPLATE/bug_report.md      | 0
 {.github => .forgejo}/ISSUE_TEMPLATE/config.yml         | 0
 {.github => .forgejo}/ISSUE_TEMPLATE/feature_request.md | 0
 {.github => .forgejo}/logo.svg                          | 0
 .github/CODEOWNERS                                      | 1 -
 CODEOWNERS                                              | 1 +
 README.md                                               | 2 +-
 8 files changed, 2 insertions(+), 3 deletions(-)
 rename {.github => .forgejo}/ISSUE_TEMPLATE/bug_report.md (100%)
 rename {.github => .forgejo}/ISSUE_TEMPLATE/config.yml (100%)
 rename {.github => .forgejo}/ISSUE_TEMPLATE/feature_request.md (100%)
 rename {.github => .forgejo}/logo.svg (100%)
 delete mode 100644 .github/CODEOWNERS
 create mode 100644 CODEOWNERS

diff --git a/.dockerignore b/.dockerignore
index 2f9d4b4..3867906 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -1,5 +1,4 @@
 .docker
-.github
 .forgejo
 vendor
 tmp
diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.forgejo/ISSUE_TEMPLATE/bug_report.md
similarity index 100%
rename from .github/ISSUE_TEMPLATE/bug_report.md
rename to .forgejo/ISSUE_TEMPLATE/bug_report.md
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.forgejo/ISSUE_TEMPLATE/config.yml
similarity index 100%
rename from .github/ISSUE_TEMPLATE/config.yml
rename to .forgejo/ISSUE_TEMPLATE/config.yml
diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.forgejo/ISSUE_TEMPLATE/feature_request.md
similarity index 100%
rename from .github/ISSUE_TEMPLATE/feature_request.md
rename to .forgejo/ISSUE_TEMPLATE/feature_request.md
diff --git a/.github/logo.svg b/.forgejo/logo.svg
similarity index 100%
rename from .github/logo.svg
rename to .forgejo/logo.svg
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
deleted file mode 100644
index a4413b0..0000000
--- a/.github/CODEOWNERS
+++ /dev/null
@@ -1 +0,0 @@
-*       @alexvanin @fyrchik
diff --git a/CODEOWNERS b/CODEOWNERS
new file mode 100644
index 0000000..d28053e
--- /dev/null
+++ b/CODEOWNERS
@@ -0,0 +1 @@
+.*       @alexvanin @fyrchik
diff --git a/README.md b/README.md
index ad57655..8e4b714 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,5 @@
 <p align="center">
-<img src="./.github/logo.svg" width="500px" alt="FrostFS logo">
+<img src="./.forgejo/logo.svg" width="500px" alt="FrostFS logo">
 </p>
 <p align="center">
   <a href="https://frostfs.info">FrostFS</a> local Development and Testing environment

From df6859d2463d768691d0d65d85961748e2309802 Mon Sep 17 00:00:00 2001
From: Vitaliy Potyarkin <v.potyarkin@yadro.com>
Date: Fri, 13 Dec 2024 18:10:57 +0300
Subject: [PATCH 23/41] [#92] docs: Update contract list

Contract list got outdated: it was mentioning NeoFS, Audit and Reputation

Signed-off-by: Vitaliy Potyarkin <v.potyarkin@yadro.com>
---
 docs/morph.md | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/docs/morph.md b/docs/morph.md
index 56edfbc..d713bf9 100644
--- a/docs/morph.md
+++ b/docs/morph.md
@@ -4,14 +4,16 @@ A single-node N3 privnet deployment, running on
 
 Contracts deployed:
 - Alphabet (AZ) [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/alphabet)
-- Audit [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/audit)
 - Balance [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/balance)
 - Container [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/container)
+- FrostFS [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/frostfs)
+- FrostFSID [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/frostfsid)
+- NNS [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/nns)
 - Netmap [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/netmap)
-- NeoFSID [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/neofsid)
+- Policy [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/policy)
+- Processing [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/processing)
 - Proxy [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/proxy)
-- Reputation [contract](https://git.frostfs.info/TrueCloudLab/frostfs-contract/src/branch/master/reputation)
- 
+
 RPC available at `http://morph-chain.frostfs.devenv:30333`.
 
 ## .env settings

From 0f9000bce6aedc9f1f376275ced6bc6a38cf6994 Mon Sep 17 00:00:00 2001
From: Vitaliy Potyarkin <v.potyarkin@yadro.com>
Date: Tue, 10 Dec 2024 15:42:13 +0300
Subject: [PATCH 24/41] [#91] Refine CODEOWNERS settings

Signed-off-by: Vitaliy Potyarkin <v.potyarkin@yadro.com>
---
 CODEOWNERS | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/CODEOWNERS b/CODEOWNERS
index d28053e..3b080ce 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -1 +1,3 @@
-.*       @alexvanin @fyrchik
+.*          @alexvanin @fyrchik
+.forgejo/.* @potyarkin
+Makefile    @potyarkin

From 98484b97396d71d5cad90cc4ba504a743e9ba843 Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 20 Dec 2024 14:58:00 +0300
Subject: [PATCH 25/41] [#93] Update neo-go to the latest version used by
 frostfs-node

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 .env                                      | 2 +-
 services/morph_chain/protocol.privnet.yml | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.env b/.env
index a1a1586..4727fb1 100644
--- a/.env
+++ b/.env
@@ -8,7 +8,7 @@ BASTION_VERSION=10
 BASTION_IMAGE=debian
 
 # NeoGo privnet
-NEOGO_VERSION=0.104.0
+NEOGO_VERSION=0.106.3
 NEOGO_IMAGE=nspccdev/neo-go
 
 # FrostFS InnerRing nodes
diff --git a/services/morph_chain/protocol.privnet.yml b/services/morph_chain/protocol.privnet.yml
index f1cc754..7cea631 100644
--- a/services/morph_chain/protocol.privnet.yml
+++ b/services/morph_chain/protocol.privnet.yml
@@ -11,6 +11,7 @@ ProtocolConfiguration:
   VerifyTransactions: true
   StateRootInHeader: true
   P2PSigExtensions: true
+  Hardforks: {}
 
 ApplicationConfiguration:
   SkipBlockVerification: false

From e1b8fe791902f87b1347b3f2e948e4fc0fc583f1 Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 20 Dec 2024 15:17:21 +0300
Subject: [PATCH 26/41] [#93] Update frostfs-node to the latest version

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 .env | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.env b/.env
index 4727fb1..a94341c 100644
--- a/.env
+++ b/.env
@@ -12,11 +12,11 @@ NEOGO_VERSION=0.106.3
 NEOGO_IMAGE=nspccdev/neo-go
 
 # FrostFS InnerRing nodes
-IR_VERSION=0.42.9
+IR_VERSION=0.44.4
 IR_IMAGE=git.frostfs.info/truecloudlab/frostfs-ir
 
 # FrostFS Storage nodes
-NODE_VERSION=0.42.9
+NODE_VERSION=0.44.4
 NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
 
 # HTTP Gate

From 4db8ca356d5ebe8490ddfad69892da46b80e0ab6 Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 20 Dec 2024 15:17:54 +0300
Subject: [PATCH 27/41] [#93] Remove unused env variables

These variables were used when binaries
were available in public storage network

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 .env | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.env b/.env
index a94341c..aa96d95 100644
--- a/.env
+++ b/.env
@@ -44,12 +44,10 @@ FROSTFS_CLI_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/down
 #FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
 
 # FrostFS ADM tool binary
-FROSTFS_ADM_VERSION=498f9955ea
 FROSTFS_ADM_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/v${NODE_VERSION}/frostfs-adm
 #FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
 
 # Compiled FrostFS Smart Contracts
-FROSTFS_CONTRACTS_VERSION=694daebb19
 FROSTFS_CONTRACTS_URL=https://git.frostfs.info/TrueCloudLab/frostfs-contract/releases/download/v0.19.2/frostfs-contract-v0.19.2.tar.gz
 #FROSTFS_CONTRACTS_PATH=/path/to/unpacked/frostfs-contracts-dir
 

From 6a5817e15c1031b1aa06ebcb77dd8086be3079ee Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 20 Dec 2024 16:08:25 +0300
Subject: [PATCH 28/41] [#93] Register storage nodes in proxy contract during
 bootstrap

This allows to send APE requests to the nodes right after `make up` command

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 Makefile                                | 2 ++
 services/morph_chain/docker-compose.yml | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/Makefile b/Makefile
index c4a6c48..58a12e0 100644
--- a/Makefile
+++ b/Makefile
@@ -85,6 +85,8 @@ up/bootstrap: get vendor/hosts
 		echo "Transfer GAS to wallet $${f}" \
 		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 \
 		|| die "Failed to transfer GAS to alphabet wallets"; \
+		echo "Register storage wallet $${f} in proxy contract" \
+		&& ./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml --account=`docker container exec morph_chain neo-go wallet dump-keys -w /wallets/storage/$${f##*/} | head -1 | awk '{print $1}'` || die "Couldn't set storage allet as proxy wallet"
 		done
 	@echo "Create frostfsid subject for ./wallets/wallet.json"; \
 	if [ -n "$$(./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid list-subjects --namespace '')" ]; then \
diff --git a/services/morph_chain/docker-compose.yml b/services/morph_chain/docker-compose.yml
index 2c2facb..6b83716 100644
--- a/services/morph_chain/docker-compose.yml
+++ b/services/morph_chain/docker-compose.yml
@@ -20,6 +20,10 @@ services:
     - ./../../vendor/hosts:/etc/hosts
     - ./../../wallets/wallet.json:/wallets/wallet.json
     - ./../s3_gate/wallet.json:/wallets/s3-wallet.json
+    - ./../storage/wallet01.json:/wallets/storage/wallet01.json
+    - ./../storage/wallet02.json:/wallets/storage/wallet02.json
+    - ./../storage/wallet03.json:/wallets/storage/wallet03.json
+    - ./../storage/wallet04.json:/wallets/storage/wallet04.json
     - chains:/chains
 
 networks:

From d29d50a002c672a9ddfc6f6950dcba97e45344bc Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 20 Dec 2024 16:12:06 +0300
Subject: [PATCH 29/41] [#93] Update frostfs-contract to the latest version

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 .env | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.env b/.env
index aa96d95..fe484c6 100644
--- a/.env
+++ b/.env
@@ -48,7 +48,7 @@ FROSTFS_ADM_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/down
 #FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
 
 # Compiled FrostFS Smart Contracts
-FROSTFS_CONTRACTS_URL=https://git.frostfs.info/TrueCloudLab/frostfs-contract/releases/download/v0.19.2/frostfs-contract-v0.19.2.tar.gz
+FROSTFS_CONTRACTS_URL=https://git.frostfs.info/TrueCloudLab/frostfs-contract/releases/download/v0.21.1/frostfs-contract-v0.21.1.tar.gz
 #FROSTFS_CONTRACTS_PATH=/path/to/unpacked/frostfs-contracts-dir
 
 # Jaeger tracing

From b08bb663f93b0aca97905e6bf8d4796cd8570328 Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 20 Dec 2024 16:28:55 +0300
Subject: [PATCH 30/41] [#93] Update gateway components

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 .env | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.env b/.env
index fe484c6..7a58e35 100644
--- a/.env
+++ b/.env
@@ -20,7 +20,7 @@ NODE_VERSION=0.44.4
 NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
 
 # HTTP Gate
-HTTP_GW_VERSION=0.30.2
+HTTP_GW_VERSION=0.32.0
 HTTP_GW_IMAGE=truecloudlab/frostfs-http-gw
 
 # REST Gate
@@ -28,7 +28,7 @@ REST_GW_VERSION=c9c85e90
 REST_GW_IMAGE=truecloudlab/frostfs-rest-gw
 
 # S3 Gate
-S3_GW_VERSION=0.31.0-rc.4
+S3_GW_VERSION=0.32.0
 S3_GW_IMAGE=truecloudlab/frostfs-s3-gw
 
 # Lifecycler

From d34d842700821a4eb8bcfb650734acb196957c64 Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 20 Dec 2024 16:38:39 +0300
Subject: [PATCH 31/41] [#93] Remove frostfs-rest-gw from dev-env

This repo is being archived and not maintained at the moment.

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 .env                                  |  4 ----
 .services                             |  1 -
 services/rest_gate/.env               |  1 -
 services/rest_gate/.hosts             |  1 -
 services/rest_gate/.int_test.env      |  1 -
 services/rest_gate/cfg/config.yml     | 12 ----------
 services/rest_gate/docker-compose.yml | 32 ---------------------------
 services/rest_gate/wallet.json        | 30 -------------------------
 8 files changed, 82 deletions(-)
 delete mode 120000 services/rest_gate/.env
 delete mode 100644 services/rest_gate/.hosts
 delete mode 120000 services/rest_gate/.int_test.env
 delete mode 100644 services/rest_gate/cfg/config.yml
 delete mode 100644 services/rest_gate/docker-compose.yml
 delete mode 100644 services/rest_gate/wallet.json

diff --git a/.env b/.env
index 7a58e35..824a4db 100644
--- a/.env
+++ b/.env
@@ -23,10 +23,6 @@ NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
 HTTP_GW_VERSION=0.32.0
 HTTP_GW_IMAGE=truecloudlab/frostfs-http-gw
 
-# REST Gate
-REST_GW_VERSION=c9c85e90
-REST_GW_IMAGE=truecloudlab/frostfs-rest-gw
-
 # S3 Gate
 S3_GW_VERSION=0.32.0
 S3_GW_IMAGE=truecloudlab/frostfs-s3-gw
diff --git a/.services b/.services
index d165241..ccc96f8 100644
--- a/.services
+++ b/.services
@@ -2,5 +2,4 @@
 # Will start from top to bottom and stop in reverse
 http_gate
 s3_gate
-rest_gate
 s3_lifecycler
diff --git a/services/rest_gate/.env b/services/rest_gate/.env
deleted file mode 120000
index c7360fb..0000000
--- a/services/rest_gate/.env
+++ /dev/null
@@ -1 +0,0 @@
-../../.env
\ No newline at end of file
diff --git a/services/rest_gate/.hosts b/services/rest_gate/.hosts
deleted file mode 100644
index ee7578e..0000000
--- a/services/rest_gate/.hosts
+++ /dev/null
@@ -1 +0,0 @@
-IPV4_PREFIX.83 rest.LOCAL_DOMAIN
diff --git a/services/rest_gate/.int_test.env b/services/rest_gate/.int_test.env
deleted file mode 120000
index 582b6a2..0000000
--- a/services/rest_gate/.int_test.env
+++ /dev/null
@@ -1 +0,0 @@
-../../.int_test.env
\ No newline at end of file
diff --git a/services/rest_gate/cfg/config.yml b/services/rest_gate/cfg/config.yml
deleted file mode 100644
index 0acdad3..0000000
--- a/services/rest_gate/cfg/config.yml
+++ /dev/null
@@ -1,12 +0,0 @@
-prometheus:
-  enabled: true
-  address: :9090
-
-server:
-  # The IP and port to listen on.
-  listen-address: 0.0.0.0:8090
-
-# Wallet settings
-wallet:
-  path: /wallet.json # Path to wallet
-  passphrase: one # Password to decrypt wallet
diff --git a/services/rest_gate/docker-compose.yml b/services/rest_gate/docker-compose.yml
deleted file mode 100644
index 09cfe38..0000000
--- a/services/rest_gate/docker-compose.yml
+++ /dev/null
@@ -1,32 +0,0 @@
----
-
-services:
-  rest_gate:
-    image: ${REST_GW_IMAGE}:${REST_GW_VERSION}
-    domainname: ${LOCAL_DOMAIN}
-    hostname: rest
-    container_name: rest_gate
-    restart: on-failure
-    networks:
-      rest_gate_int:
-      internet:
-        ipv4_address: ${IPV4_PREFIX}.83
-    volumes:
-      - ./wallet.json:/wallet.json
-      - ./../../vendor/hosts:/etc/hosts
-      - ./cfg:/etc/frostfs/rest
-    stop_signal: SIGTERM
-    stop_grace_period: 15s
-    env_file: [ ".env", ".int_test.env" ]
-    command: [ "frostfs-rest-gw", "--config", "/etc/frostfs/rest/config.yml" ]
-    environment:
-      - REST_GW_POOL_PEERS_0_ADDRESS=s01.${LOCAL_DOMAIN}:8080
-      - REST_GW_POOL_PEERS_1_ADDRESS=s02.${LOCAL_DOMAIN}:8080
-      - REST_GW_POOL_PEERS_2_ADDRESS=s03.${LOCAL_DOMAIN}:8080
-      - REST_GW_POOL_PEERS_3_ADDRESS=s04.${LOCAL_DOMAIN}:8080
-
-networks:
-  rest_gate_int:
-  internet:
-    external: true
-    name: basenet_internet
diff --git a/services/rest_gate/wallet.json b/services/rest_gate/wallet.json
deleted file mode 100644
index 2b60501..0000000
--- a/services/rest_gate/wallet.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "version": "3.0",
-  "accounts": [
-    {
-      "address": "NPFCqWHfi9ixCJRu7DABRbVfXRbkSEr9Vo",
-      "key": "6PYTAGjdaeicUDPqGv9mmgwb9kTwimWJJmmfNqJSDGH9qM79zSRcL9oHiB",
-      "label": "REST Gateway",
-      "contract": {
-        "script": "DCECcuPzZCZ2VyDsm2jKEOMnU6xEWO2bF1dvOvBWTDFYB1ZBVuezJw==",
-        "parameters": [
-          {
-            "name": "parameter0",
-            "type": "Signature"
-          }
-        ],
-        "deployed": false
-      },
-      "lock": false,
-      "isDefault": false
-    }
-  ],
-  "scrypt": {
-    "n": 16384,
-    "r": 8,
-    "p": 8
-  },
-  "extra": {
-    "Tokens": null
-  }
-}

From c4d4fecb89ee1fbd2f7f02254f2ebf8264b47553 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <e.stratonikov@yadro.com>
Date: Fri, 27 Dec 2024 10:42:19 +0300
Subject: [PATCH 32/41] [#96] s3_lifecycler: Fix docker-compose warnings

Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
---
 services/s3_lifecycler/docker-compose.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/services/s3_lifecycler/docker-compose.yml b/services/s3_lifecycler/docker-compose.yml
index 3456d0c..2fffa50 100644
--- a/services/s3_lifecycler/docker-compose.yml
+++ b/services/s3_lifecycler/docker-compose.yml
@@ -1,6 +1,5 @@
 ---
 
-version: "2.4"
 services:
   s3_lifecycler:
     image: ${S3_LIFECYCLER_IMAGE}:${S3_LIFECYCLER_VERSION}

From 90147c71081361e4348f0a041848e7ccf08d1235 Mon Sep 17 00:00:00 2001
From: Nikita Zinkevich <n.zinkevich@yadro.com>
Date: Fri, 27 Dec 2024 09:33:04 +0300
Subject: [PATCH 33/41] [#95] Output errors during `make clean`

It happens that a volume may not be deleted during `make clean`.
For example, if the volume is being used by a container.
If this happens, there are no errors printed to stdout.
And old volumes may cause errors during subsequent `make up`

Signed-off-by: Nikita Zinkevich <n.zinkevich@yadro.com>
---
 Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index 58a12e0..f24ec9d 100644
--- a/Makefile
+++ b/Makefile
@@ -159,7 +159,7 @@ clean:
 		vols=`docker-compose -f services/$${svc}/docker-compose.yml config --volumes`
 		if [[ ! -z "$${vols}" ]]; then
 			for vol in $${vols}; do
-				docker volume rm -f "$${svc}_$${vol}" 2> /dev/null
+				docker volume rm -f "$${svc}_$${vol}"
 			done
 		fi
 	done

From 5471dbfc0e57babdc5f95c1c788fbd3a61c9e9d7 Mon Sep 17 00:00:00 2001
From: Nikita Zinkevich <n.zinkevich@yadro.com>
Date: Thu, 9 Jan 2025 11:23:42 +0300
Subject: [PATCH 34/41] [#98] s3_gate: Fix custom user wallets folder creation
 during compose up

Make custom wallets volume to point to the `wallets` directory in the project's root.

Signed-off-by: Nikita Zinkevich <n.zinkevich@yadro.com>
---
 README.md                           | 9 +++++----
 services/s3_gate/docker-compose.yml | 6 ++----
 2 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index 8e4b714..415885e 100644
--- a/README.md
+++ b/README.md
@@ -143,7 +143,7 @@ Registers user wallet and issues s3 credentials.
 
 Usage and default parameter values:
 ```sh
-make s3cred [password=""] [contract_password=s3] [wallet=/user_wallet.json] [gate_public_key=0313b1ac3a8076e155a7e797b24f0b650cccad5941ea59d7cfd51a024a8b2a06bf]
+make s3cred [password=""] [contract_password=s3] [wallet=""] [gate_public_key=0313b1ac3a8076e155a7e797b24f0b650cccad5941ea59d7cfd51a024a8b2a06bf]
 ```
 
 As soon as the storage node is in the network map (see above) you can generate S3
@@ -159,8 +159,9 @@ $ make s3cred
   "container_id": "EXArWh8x1zeHG3851s1RtoCo7dowxF6rhLGA15nbMffT"
 }                   
 ```
-Running without any parameters will result in defaults which are based on the private key from
-`/user-wallet.json` file and `/wallet.json` contract wallet.
+Running without any parameters results in defaults which are based on the private key from
+`/wallets/wallet.json` user wallet and `/wallet.json` contract wallet.
+If `wallet` parameter is set, gate searches custom user wallet file in `/wallets` directory.
 
 Now let's configure an S3 client (AWS CLI will be used as example):
 
@@ -172,7 +173,7 @@ Default region name []: us-east-1
 Default output format []: json
 ```
 
-If you need to create credentials for different users, put user wallets to `wallets` dir and specify them via `wallet` parameter.
+If you need to create credentials for different users, put user wallet to `wallets` dir and specify it via `wallet` parameter.
 Pass wallet password in `password` parameter if it's not default. The same is for `contract_wallet` and `gate_public_key` params.
 
 ```sh
diff --git a/services/s3_gate/docker-compose.yml b/services/s3_gate/docker-compose.yml
index f7fc28d..3c1f9f6 100644
--- a/services/s3_gate/docker-compose.yml
+++ b/services/s3_gate/docker-compose.yml
@@ -14,10 +14,8 @@ services:
     volumes:
       # Gate wallet
       - ./wallet.json:/wallet.json
-      # Custom user wallets
-      - ./wallets:/wallets
-      # Default user wallet
-      - ./../../wallets/wallet.json:/wallets/wallet.json
+      # Folder for custom user wallets
+      - ./../../wallets/:/wallets/
       - ./tls.key:/tls.key
       - ./tls.crt:/tls.crt
       - ./../../vendor/hosts:/etc/hosts

From 0981202d6bcc0c454d55cfb1cb5c9b355e217170 Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 21 Mar 2025 18:47:17 +0300
Subject: [PATCH 35/41] [#100] Use docker images as vendor binary source

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 .env                              | 6 ++++--
 services/ir/artifacts.mk          | 8 +++-----
 services/morph_chain/artifacts.mk | 4 ++--
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.env b/.env
index 824a4db..053f179 100644
--- a/.env
+++ b/.env
@@ -36,11 +36,13 @@ LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a0567
 #LOCODE_DB_PATH=/path/to/locode_db
 
 # FrostFS CLI binary
-FROSTFS_CLI_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/v${NODE_VERSION}/frostfs-cli
+FROSTFS_CLI_VERSION=0.44.4
+FROSTFS_CLI_IMAGE=git.frostfs.info/truecloudlab/frostfs-cli
 #FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
 
 # FrostFS ADM tool binary
-FROSTFS_ADM_URL=https://git.frostfs.info/TrueCloudLab/frostfs-node/releases/download/v${NODE_VERSION}/frostfs-adm
+FROSTFS_ADM_VERSION=0.44.4
+FROSTFS_ADM_IMAGE=git.frostfs.info/truecloudlab/frostfs-adm
 #FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
 
 # Compiled FrostFS Smart Contracts
diff --git a/services/ir/artifacts.mk b/services/ir/artifacts.mk
index 0cdbdbb..1c2cf5d 100644
--- a/services/ir/artifacts.mk
+++ b/services/ir/artifacts.mk
@@ -30,11 +30,9 @@ get.cli:
 	@mkdir -p ./vendor
 
 ifeq (${FROSTFS_CLI_PATH},)
-	@echo "⇒ Download FrostFS CLI binary from ${FROSTFS_CLI_URL}"
-	@curl \
-		-ksSL "${FROSTFS_CLI_URL}" \
-		-o ${FROSTFS_CLI_FILE} 
-	@chmod +x ${FROSTFS_CLI_FILE}
+	echo "⇒ Download FrostFS CLI binary from ${FROSTFS_CLI_IMAGE}:${FROSTFS_CLI_VERSION}"
+	$(shell docker cp `docker create --name tmp ${FROSTFS_CLI_IMAGE}:${FROSTFS_CLI_VERSION}`:/bin/frostfs-cli ${FROSTFS_CLI_FILE} && docker rm tmp >/dev/null)
+	chmod +x ${FROSTFS_CLI_FILE}
 else
 	@echo "⇒ Copy local binary from ${FROSTFS_CLI_PATH}"
 	@cp ${FROSTFS_CLI_PATH} ${FROSTFS_CLI_FILE}
diff --git a/services/morph_chain/artifacts.mk b/services/morph_chain/artifacts.mk
index 77a7ae3..4a4504a 100644
--- a/services/morph_chain/artifacts.mk
+++ b/services/morph_chain/artifacts.mk
@@ -23,8 +23,8 @@ get.adm: FROSTFS_ADM_DEST=./vendor/frostfs-adm
 get.adm:
 
 ifeq (${FROSTFS_ADM_PATH},)
-	@echo "⇒ Download FrostFS ADM binary from ${FROSTFS_ADM_URL}"
-	@curl -skSL ${FROSTFS_ADM_URL} -o ${FROSTFS_ADM_DEST}
+	@echo "⇒ Download FrostFS ADM binary from ${FROSTFS_ADM_IMAGE}:${FROSTFS_ADM_VERSION}"
+	$(shell docker cp `docker create --name tmp ${FROSTFS_ADM_IMAGE}:${FROSTFS_ADM_VERSION}`:/bin/frostfs-adm ${FROSTFS_ADM_DEST} && docker rm tmp >/dev/null)
 	@chmod +x ${FROSTFS_ADM_DEST}
 else
 	@echo "⇒ Copy frostfs-adm binary from ${FROSTFS_ADM_PATH}"

From ea91d8823274fa5eac9bd86a49369c6267a3fc6f Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 21 Mar 2025 18:54:24 +0300
Subject: [PATCH 36/41] [#100] Add target to prepare storage for service
 components

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 Makefile                                | 22 ++++++++++++++++++++--
 cli-cfg.yml                             |  3 +++
 services/morph_chain/docker-compose.yml |  1 +
 wallets/system-wallet.json              |  1 +
 4 files changed, 25 insertions(+), 2 deletions(-)
 create mode 100644 cli-cfg.yml
 create mode 100644 wallets/system-wallet.json

diff --git a/Makefile b/Makefile
index f24ec9d..b3b342d 100644
--- a/Makefile
+++ b/Makefile
@@ -58,9 +58,8 @@ get: $(foreach SVC, $(GET_SVCS), get.$(SVC))
 
 # Start environment
 .PHONY: up
-up: up/basic
+up: up/basic up/pre-services
 	@$(foreach SVC, $(START_SVCS), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
-	./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml --account=`docker container exec morph_chain neo-go wallet dump-keys -w /wallets/s3-wallet.json | head -1 | awk '{print $1}'` || die "Couldn't set s3-gw wallet as proxy wallet"
 	@echo "Full FrostFS Developer Environment is ready"
 
 # Build up FrostFS
@@ -98,6 +97,25 @@ up/bootstrap: get vendor/hosts
 		|| die "Failed to create subject for the wallet"; \
 	fi
 	echo "FrostFS sidechain environment is deployed"
+	
+# Prepare to start services
+.PHONY: up/pre-services
+up/pre-services:
+	@source ./bin/helper.sh
+	@echo "Prepare storage for services"; \
+	if [ -z "$$(./vendor/frostfs-cli -c cli-cfg.yml container list)" ]; then \
+		subj_key=`docker container exec -it morph_chain neo-go wallet dump-keys -w /wallets/system-wallet.json | tail -1 | tr -d ' \r\n'` \
+		&& echo "Subject key: $${subj_key}" \
+		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid create-subject --namespace "" --subject-key $${subj_key} --subject-name system \
+		|| die "Failed to create subject for system wallet"; \
+		proxy_acc=`docker container exec -it morph_chain neo-go wallet dump-keys -w /wallets/system-wallet.json | head -1 | cut -d" " -f1` \
+		&& echo "Proxy acc: $${proxy_acc}" \
+		&& ./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml --account=$${proxy_acc} || die "Failed to register S3 gateway as proxy acc"; \
+		cid=`./vendor/frostfs-cli -c cli-cfg.yml container create -p "REP 4" --nns-name "cors" --nns-zone "container" --await | grep CID | cut -d" " -f2` \
+		&& echo "CORS Container: $${cid}" \
+		&& ./vendor/frostfs-cli -c cli-cfg.yml ape-manager add --target-type container --target-name $${cid} --rule "allow Object.* *" || die "Failed to create CORS container"
+	fi
+	@echo "Storage is prepared";
 
 # Build up certain service
 .PHONY: up/%
diff --git a/cli-cfg.yml b/cli-cfg.yml
new file mode 100644
index 0000000..9a5c7eb
--- /dev/null
+++ b/cli-cfg.yml
@@ -0,0 +1,3 @@
+wallet: ./wallets/system-wallet.json
+password: ""
+rpc-endpoint: s01.frostfs.devenv:8080
diff --git a/services/morph_chain/docker-compose.yml b/services/morph_chain/docker-compose.yml
index 6b83716..c3a1481 100644
--- a/services/morph_chain/docker-compose.yml
+++ b/services/morph_chain/docker-compose.yml
@@ -19,6 +19,7 @@ services:
     - ./config.yml:/wallets/config.yml
     - ./../../vendor/hosts:/etc/hosts
     - ./../../wallets/wallet.json:/wallets/wallet.json
+    - ./../../wallets/system-wallet.json:/wallets/system-wallet.json
     - ./../s3_gate/wallet.json:/wallets/s3-wallet.json
     - ./../storage/wallet01.json:/wallets/storage/wallet01.json
     - ./../storage/wallet02.json:/wallets/storage/wallet02.json
diff --git a/wallets/system-wallet.json b/wallets/system-wallet.json
new file mode 100644
index 0000000..2f57db1
--- /dev/null
+++ b/wallets/system-wallet.json
@@ -0,0 +1 @@
+{"version":"1.0","accounts":[{"address":"NQijiVKHbL22PfF2AJQukv1CX75itxgzht","key":"6PYQKrpme57VqaucxuF7dDoSZRRA8d94oatHcScqhiFBauCXQvFDaYwEWa","label":"","contract":{"script":"DCEDRdLtpFIWeYyI7doTKRhIl4qYjaybGDveTyGpbqjsLZNBVuezJw==","parameters":[{"name":"parameter0","type":"Signature"}],"deployed":false},"lock":false,"isDefault":false}],"scrypt":{"n":16384,"r":8,"p":8},"extra":{"Tokens":null}}
\ No newline at end of file

From e0141c11545ecf107bf50fe5da293a1390ba2695 Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Fri, 21 Mar 2025 18:55:43 +0300
Subject: [PATCH 37/41] [#100] Update components to the latest versions

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 .env                              | 16 ++++++++--------
 services/http_gate/cfg/config.yml |  3 +++
 services/s3_gate/cfg/config.yml   |  3 +++
 3 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/.env b/.env
index 053f179..dec29ce 100644
--- a/.env
+++ b/.env
@@ -12,20 +12,20 @@ NEOGO_VERSION=0.106.3
 NEOGO_IMAGE=nspccdev/neo-go
 
 # FrostFS InnerRing nodes
-IR_VERSION=0.44.4
+IR_VERSION=0.45.0-rc.3
 IR_IMAGE=git.frostfs.info/truecloudlab/frostfs-ir
 
 # FrostFS Storage nodes
-NODE_VERSION=0.44.4
+NODE_VERSION=0.45.0-rc.3
 NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
 
 # HTTP Gate
-HTTP_GW_VERSION=0.32.0
-HTTP_GW_IMAGE=truecloudlab/frostfs-http-gw
+HTTP_GW_VERSION=0.33.0-rc.2
+HTTP_GW_IMAGE=git.frostfs.info/truecloudlab/frostfs-http-gw
 
 # S3 Gate
-S3_GW_VERSION=0.32.0
-S3_GW_IMAGE=truecloudlab/frostfs-s3-gw
+S3_GW_VERSION=0.33.0-rc.2
+S3_GW_IMAGE=git.frostfs.info/truecloudlab/frostfs-s3-gw
 
 # Lifecycler
 S3_LIFECYCLER_VERSION=0.1.3
@@ -36,12 +36,12 @@ LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a0567
 #LOCODE_DB_PATH=/path/to/locode_db
 
 # FrostFS CLI binary
-FROSTFS_CLI_VERSION=0.44.4
+FROSTFS_CLI_VERSION=0.45.0-rc.3
 FROSTFS_CLI_IMAGE=git.frostfs.info/truecloudlab/frostfs-cli
 #FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
 
 # FrostFS ADM tool binary
-FROSTFS_ADM_VERSION=0.44.4
+FROSTFS_ADM_VERSION=0.45.0-rc.3
 FROSTFS_ADM_IMAGE=git.frostfs.info/truecloudlab/frostfs-adm
 #FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
 
diff --git a/services/http_gate/cfg/config.yml b/services/http_gate/cfg/config.yml
index 1684c58..2f15e44 100644
--- a/services/http_gate/cfg/config.yml
+++ b/services/http_gate/cfg/config.yml
@@ -22,3 +22,6 @@ server:
 wallet:
   path: /wallet.json  # Path to wallet 
   passphrase: one  # Passphrase to decrypt wallet
+  
+containers:
+  cors: cors.container
diff --git a/services/s3_gate/cfg/config.yml b/services/s3_gate/cfg/config.yml
index 03e84e0..3d8e400 100644
--- a/services/s3_gate/cfg/config.yml
+++ b/services/s3_gate/cfg/config.yml
@@ -47,3 +47,6 @@ frostfsid:
 
 policy:
   enabled: false
+ 
+containers:
+  cors: cors.container

From 018e33c1f9048df8e6c580bde535df535a297838 Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Thu, 27 Mar 2025 17:34:37 +0300
Subject: [PATCH 38/41] [#101] Fix s3 gateway initialization

Was broken in #100

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index b3b342d..fcc09a3 100644
--- a/Makefile
+++ b/Makefile
@@ -108,7 +108,7 @@ up/pre-services:
 		&& echo "Subject key: $${subj_key}" \
 		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid create-subject --namespace "" --subject-key $${subj_key} --subject-name system \
 		|| die "Failed to create subject for system wallet"; \
-		proxy_acc=`docker container exec -it morph_chain neo-go wallet dump-keys -w /wallets/system-wallet.json | head -1 | cut -d" " -f1` \
+		proxy_acc=`docker container exec -it morph_chain neo-go wallet dump-keys -w /wallets/s3-wallet.json | head -1 | cut -d" " -f1` \
 		&& echo "Proxy acc: $${proxy_acc}" \
 		&& ./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml --account=$${proxy_acc} || die "Failed to register S3 gateway as proxy acc"; \
 		cid=`./vendor/frostfs-cli -c cli-cfg.yml container create -p "REP 4" --nns-name "cors" --nns-zone "container" --await | grep CID | cut -d" " -f2` \

From 6ef4d4aa0ad7f99f948c0cf19bda4f0faa191c37 Mon Sep 17 00:00:00 2001
From: Evgenii Stratonikov <e.stratonikov@yadro.com>
Date: Fri, 28 Mar 2025 14:07:50 +0300
Subject: [PATCH 39/41] [#102] Makefile: Parallelize GAS transfer

The last version of the `frostfs-adm` allows to work with multiple
wallets in `refill-gas` and `proxy-add-account` commands.
This makes `up/bootstrap` target take ~6s less time.
The Makefile stuff is not obvious, but it seem to work as expected.

Refs TrueCloudLab/frostfs-node#1590, TrueCloudLab/frostfs-node#1578

Signed-off-by: Evgenii Stratonikov <e.stratonikov@yadro.com>
---
 Makefile | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/Makefile b/Makefile
index fcc09a3..911d168 100644
--- a/Makefile
+++ b/Makefile
@@ -72,6 +72,8 @@ up/basic: up/bootstrap
 
 # Start bootstrap services
 .PHONY: up/bootstrap
+up/bootstrap: STORAGE_WALLETS = $(wildcard ./services/storage/wallet*.json)
+up/bootstrap: STORAGE_ACCOUNTS = $(foreach wallet,$(STORAGE_WALLETS),$(shell docker container exec morph_chain neo-go wallet dump-keys -w /wallets/storage/$(notdir $(wallet)) | head -1 | awk '{print $$1}' ))
 up/bootstrap: get vendor/hosts
 	@$(foreach SVC, $(START_BOOTSTRAP), $(shell docker-compose -f services/$(SVC)/docker-compose.yml up -d))
 	@source ./bin/helper.sh
@@ -80,13 +82,16 @@ up/bootstrap: get vendor/hosts
 	@./vendor/frostfs-adm --config frostfs-adm.yml morph \
 		ape add-rule-chain --target-type namespace --target-name "" \
 		--rule 'allow Container.* *' --chain-id "allow_container_ops"
-	@for f in ./services/storage/wallet*.json; do \
-		echo "Transfer GAS to wallet $${f}" \
-		&& ./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas --storage-wallet $${f} --gas 10.0 \
-		|| die "Failed to transfer GAS to alphabet wallets"; \
-		echo "Register storage wallet $${f} in proxy contract" \
-		&& ./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml --account=`docker container exec morph_chain neo-go wallet dump-keys -w /wallets/storage/$${f##*/} | head -1 | awk '{print $1}'` || die "Couldn't set storage allet as proxy wallet"
-		done
+
+	echo -e "Transfer GAS to storage wallets: $(foreach wallet,$(STORAGE_WALLETS),\n\t$(wallet))"
+	./vendor/frostfs-adm -c frostfs-adm.yml morph refill-gas \
+		$(foreach wallet,$(STORAGE_WALLETS),--storage-wallet $(wallet)) \
+		--gas 10.0 \
+		|| die "Failed to transfer GAS to alphabet wallets"
+	echo -e "Register storage accounts in proxy contract: $(foreach account,$(STORAGE_ACCOUNTS),\n\t$(account))"
+	./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml \
+		$(foreach account,$(STORAGE_ACCOUNTS),--account=$(account)) \
+		|| die "Couldn't set storage allet as proxy wallet"
 	@echo "Create frostfsid subject for ./wallets/wallet.json"; \
 	if [ -n "$$(./vendor/frostfs-adm -c frostfs-adm.yml morph frostfsid list-subjects --namespace '')" ]; then \
 		echo "Subject already exists"; \

From 8608ba46ff2b6bc07a3d662ce0ace00bd137a31e Mon Sep 17 00:00:00 2001
From: Alex Vanin <a.vanin@yadro.com>
Date: Tue, 8 Apr 2025 14:51:37 +0300
Subject: [PATCH 40/41] [#104] Update components to the latest versions

New S3 gateway version supports MFADelete
feature that requires container with MFA
objects.

Signed-off-by: Alex Vanin <a.vanin@yadro.com>
---
 .env                            | 12 ++++++------
 Makefile                        |  5 ++++-
 services/s3_gate/cfg/config.yml |  1 +
 3 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/.env b/.env
index dec29ce..9c4531d 100644
--- a/.env
+++ b/.env
@@ -12,19 +12,19 @@ NEOGO_VERSION=0.106.3
 NEOGO_IMAGE=nspccdev/neo-go
 
 # FrostFS InnerRing nodes
-IR_VERSION=0.45.0-rc.3
+IR_VERSION=0.45.0-rc.6
 IR_IMAGE=git.frostfs.info/truecloudlab/frostfs-ir
 
 # FrostFS Storage nodes
-NODE_VERSION=0.45.0-rc.3
+NODE_VERSION=0.45.0-rc.6
 NODE_IMAGE=git.frostfs.info/truecloudlab/frostfs-storage
 
 # HTTP Gate
-HTTP_GW_VERSION=0.33.0-rc.2
+HTTP_GW_VERSION=0.33.0-rc.3
 HTTP_GW_IMAGE=git.frostfs.info/truecloudlab/frostfs-http-gw
 
 # S3 Gate
-S3_GW_VERSION=0.33.0-rc.2
+S3_GW_VERSION=0.33.0-rc.3
 S3_GW_IMAGE=git.frostfs.info/truecloudlab/frostfs-s3-gw
 
 # Lifecycler
@@ -36,12 +36,12 @@ LOCODE_DB_URL=https://git.frostfs.info/attachments/a2e8def7-52b6-49f1-89cd-a0567
 #LOCODE_DB_PATH=/path/to/locode_db
 
 # FrostFS CLI binary
-FROSTFS_CLI_VERSION=0.45.0-rc.3
+FROSTFS_CLI_VERSION=0.45.0-rc.6
 FROSTFS_CLI_IMAGE=git.frostfs.info/truecloudlab/frostfs-cli
 #FROSTFS_CLI_PATH=/path/to/frostfs-cli-binary
 
 # FrostFS ADM tool binary
-FROSTFS_ADM_VERSION=0.45.0-rc.3
+FROSTFS_ADM_VERSION=0.45.0-rc.6
 FROSTFS_ADM_IMAGE=git.frostfs.info/truecloudlab/frostfs-adm
 #FROSTFS_ADM_PATH=/path/to/frostfs-adm-binary
 
diff --git a/Makefile b/Makefile
index 911d168..56e5f7c 100644
--- a/Makefile
+++ b/Makefile
@@ -118,7 +118,10 @@ up/pre-services:
 		&& ./vendor/frostfs-adm morph proxy-add-account --config frostfs-adm.yml --account=$${proxy_acc} || die "Failed to register S3 gateway as proxy acc"; \
 		cid=`./vendor/frostfs-cli -c cli-cfg.yml container create -p "REP 4" --nns-name "cors" --nns-zone "container" --await | grep CID | cut -d" " -f2` \
 		&& echo "CORS Container: $${cid}" \
-		&& ./vendor/frostfs-cli -c cli-cfg.yml ape-manager add --target-type container --target-name $${cid} --rule "allow Object.* *" || die "Failed to create CORS container"
+		&& ./vendor/frostfs-cli -c cli-cfg.yml ape-manager add --target-type container --target-name $${cid} --rule "allow Object.* *" || die "Failed to create CORS container"; \
+		cid=`./vendor/frostfs-cli -c cli-cfg.yml container create -p "REP 4" --nns-name "mfa" --nns-zone "container" --await | grep CID | cut -d" " -f2` \
+		&& echo "MFA Container: $${cid}" \
+		&& ./vendor/frostfs-cli -c cli-cfg.yml ape-manager add --target-type container --target-name $${cid} --rule "allow Object.* *" || die "Failed to create MFA container"
 	fi
 	@echo "Storage is prepared";
 
diff --git a/services/s3_gate/cfg/config.yml b/services/s3_gate/cfg/config.yml
index 3d8e400..369325c 100644
--- a/services/s3_gate/cfg/config.yml
+++ b/services/s3_gate/cfg/config.yml
@@ -50,3 +50,4 @@ policy:
  
 containers:
   cors: cors.container
+  mfa: mfa.container

From df8249f2aeabbbe8caab4229e42321027269cb74 Mon Sep 17 00:00:00 2001
From: Nikita Zinkevich <n.zinkevich@yadro.com>
Date: Fri, 11 Apr 2025 15:49:20 +0300
Subject: [PATCH 41/41] [#105] Add website container creation

Signed-off-by: Nikita Zinkevich <n.zinkevich@yadro.com>
---
 Makefile                        | 3 +++
 services/s3_gate/cfg/config.yml | 1 +
 2 files changed, 4 insertions(+)

diff --git a/Makefile b/Makefile
index 56e5f7c..1f97c5f 100644
--- a/Makefile
+++ b/Makefile
@@ -122,6 +122,9 @@ up/pre-services:
 		cid=`./vendor/frostfs-cli -c cli-cfg.yml container create -p "REP 4" --nns-name "mfa" --nns-zone "container" --await | grep CID | cut -d" " -f2` \
 		&& echo "MFA Container: $${cid}" \
 		&& ./vendor/frostfs-cli -c cli-cfg.yml ape-manager add --target-type container --target-name $${cid} --rule "allow Object.* *" || die "Failed to create MFA container"
+		cid=`./vendor/frostfs-cli -c cli-cfg.yml container create -p "REP 4" --nns-name "website" --nns-zone "container" --await | grep CID | cut -d" " -f2` \
+		&& echo "Website configuration Container: $${cid}" \
+		&& ./vendor/frostfs-cli -c cli-cfg.yml ape-manager add --target-type container --target-name $${cid} --rule "allow Object.* *" || die "Failed to create Website configuration container"
 	fi
 	@echo "Storage is prepared";
 
diff --git a/services/s3_gate/cfg/config.yml b/services/s3_gate/cfg/config.yml
index 369325c..e5c0b53 100644
--- a/services/s3_gate/cfg/config.yml
+++ b/services/s3_gate/cfg/config.yml
@@ -51,3 +51,4 @@ policy:
 containers:
   cors: cors.container
   mfa: mfa.container
+  website: website.container