diff --git a/trymos/image_build/files/usr/share/trymos/launch.sh b/trymos/image_build/files/usr/share/trymos/launch.sh
index eaa2c95..e07c46f 100755
--- a/trymos/image_build/files/usr/share/trymos/launch.sh
+++ b/trymos/image_build/files/usr/share/trymos/launch.sh
@@ -16,7 +16,7 @@
 
 export RELEASE_OPENSTACK_K8S=/srv/release-openstack-k8s
 export CERT_REPO_DIR=/srv/certs
-export CSR_CONF="${CERT_REPO_DIR}/api-csr.yaml"
+export CSR_CONF="${CERT_REPO_DIR}/api-csr.json"
 export SSL_BARE_NAME='api'
 
 function get_instance_type {
@@ -252,7 +252,7 @@
 
     kubectl apply -f ${RELEASE_OPENSTACK_K8S}/release/ci/30-coredns.yaml
 
-    wait_for_pods coredns "" 300
+    wait_for_pods coredns "" 600
 
     EXTERNAL_DNS_IP=$(kubectl -n coredns get services coredns-coredns -o jsonpath='{.status.loadBalancer.ingress[].ip}')
     if [ -z ${EXTERNAL_DNS_IP} ]; then
@@ -282,6 +282,9 @@
     kubectl apply -f ${RELEASE_OPENSTACK_K8S}/release/3rd-party/30-metallb.yaml
     # NOTE(vsaienko): unless PRODX-7154 is resolved, update calico daemonset to satisfy metallb podsecuritypolicy.
     kubectl -n kube-system patch ds calico-node --type='json' -p='[{"op": "replace", "path": "/spec/template/spec/containers/0/securityContext/allowPrivilegeEscalation", "value": true}]'
+    info "Waiting for MetalLB pods to be deployed"
+    wait_for_pods metallb "" 600
+    kubectl apply -f ${RELEASE_OPENSTACK_K8S}/release/3rd-party/31-metallb-address-pools.yaml
 }
 
 function install_ceph {