Automated Manifest Update (#2478)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #2478
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/gitea/CronJob-gitea-backup.yaml

@@ -4,7 +4,7 @@ metadata:
   name: gitea-backup
   labels:
     app.kubernetes.io/controller: backup
-    app.kubernetes.io/instance: gitea-backup
+    app.kubernetes.io/instance: gitea
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gitea-backup
     helm.sh/chart: backup-4.5.0

clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-backup.yaml

@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
   name: gitea-backup
   labels:
-    app.kubernetes.io/instance: gitea-backup
+    app.kubernetes.io/instance: gitea
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: gitea-backup
     helm.sh/chart: backup-4.5.0

clusters/cl01tl/manifests/matrix-synapse/ConfigMap-matrix-synapse.yaml

@@ -30,4 +30,4 @@ data:
     root:
         level: INFO
         handlers: [console]
-  homeserver.yaml: "# NOTE:\n# Secrets are stored in separate configs to better fit K8s concepts\n\n## Server ##\n\nserver_name: \"alexlebens.dev\"\npublic_baseurl: \"https://matrix.alexlebens.dev\"\npid_file: /homeserver.pid\nweb_client: False\nsoft_file_limit: 0\nlog_config: \"/synapse/config/log.yaml\"\nreport_stats: false\n\ninstance_map:\n  main:\n    host: matrix-synapse-replication\n    port: 9093\n\n## Ports ##\n\nlisteners:\n  - port: 8008\n    tls: false\n    bind_addresses: [\"::\"]\n    type: http\n    x_forwarded: true\n\n    resources:\n      - names: \n          - client\n          - federation\n        compress: false\n\n  - port: 9090\n    tls: false\n    bind_addresses: [\"::\"]\n    type: http\n\n    resources:\n      - names: [metrics]\n        compress: false\n\n  - port: 9093\n    tls: false\n    bind_addresses: [\"::\"]\n    type: http\n\n    resources:\n      - names: [replication]\n        compress: false\n\n## Files ##\n\nmedia_store_path: \"/synapse/data/media\"\nuploads_path: \"/synapse/data/uploads\"\n\n## Registration ##\n\nenable_registration: true\n\n## Metrics ###\n\nenable_metrics: true\n\n## Signing Keys ##\n\nsigning_key_path: \"/synapse/keys/signing.key\"\n\n# The trusted servers to download signing keys from.\ntrusted_key_servers:\n  []\n\n## Workers ##\n\n## Extra config ##\n\napp_service_config_files:\n- /synapse/config/conf.d/hookshot-registration.yaml\n- /synapse/config/conf.d/double-puppet-registration.yaml\nenable_metrics: true\nenable_registration_without_verification: true\nexperimental_features:\n  msc2409_to_device_messages_enabled: true\n  msc3202_device_masquerading: true\n  msc3202_transaction_extensions: true\npassword_config:\n  enabled: false\nsso:\n  client_whitelist:\n  - https://chat.alexlebens.dev/\n  update_profile_information: true\n"
+  homeserver.yaml: "# NOTE:\n# Secrets are stored in separate configs to better fit K8s concepts\n\n## Server ##\n\nserver_name: \"alexlebens.dev\"\npublic_baseurl: \"https://matrix.alexlebens.dev\"\npid_file: /homeserver.pid\nweb_client: False\nsoft_file_limit: 0\nlog_config: \"/synapse/config/log.yaml\"\nreport_stats: false\n\ninstance_map:\n  main:\n    host: matrix-synapse-replication\n    port: 9093\n\n## Ports ##\n\nlisteners:\n  - port: 8008\n    tls: false\n    bind_addresses: [\"::\"]\n    type: http\n    x_forwarded: true\n\n    resources:\n      - names: \n          - client\n          - federation\n        compress: false\n\n  - port: 9090\n    tls: false\n    bind_addresses: [\"::\"]\n    type: http\n\n    resources:\n      - names: [metrics]\n        compress: false\n\n  - port: 9093\n    tls: false\n    bind_addresses: [\"::\"]\n    type: http\n\n    resources:\n      - names: [replication]\n        compress: false\n\n## Files ##\n\nmedia_store_path: \"/synapse/data/media\"\nuploads_path: \"/synapse/data/uploads\"\n\n## Registration ##\n\nenable_registration: true\n\n## Metrics ###\n\nenable_metrics: true\n\n## Signing Keys ##\n\nsigning_key_path: \"/synapse/keys/signing.key\"\n\n# The trusted servers to download signing keys from.\ntrusted_key_servers:\n  []\n\n## Workers ##\n\n## Extra config ##\n\napp_service_config_files:\n- /synapse/config/conf.d/hookshot-registration.yaml\n- /synapse/config/conf.d/double-puppet-registration.yaml\nenable_metrics: true\nenable_registration_without_verification: true\npassword_config:\n  enabled: false\nsso:\n  client_whitelist:\n  - https://chat.alexlebens.dev/\n  update_profile_information: true\n"

clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-hookshot.yaml

@@ -47,8 +47,6 @@ spec:
               name: config
               readOnly: true
               subPath: config.yml
-            - mountPath: /data
-              name: data
             - mountPath: /data/passkey.pem
               mountPropagation: None
               name: passkey
@@ -63,9 +61,6 @@ spec:
         - name: config
           secret:
             secretName: matrix-hookshot-config-secret
-        - name: data
-          persistentVolumeClaim:
-            claimName: matrix-hookshot
         - name: passkey
           secret:
             secretName: matrix-hookshot-config-secret

clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml

@@ -21,7 +21,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: 5cdcaa22281b3795ff0c638e0d23230afa08e6766e14428967437e6dbc79c65a
+        checksum/config: 38fb6ebedc848fde652646be23af4fc99cc183866abfc30db48dce7b95197caf
         checksum/secrets: 77c25644da166bfcea38f650cda8968f95f472cde7bd328de2f211ded12b73d0
       labels:
         app.kubernetes.io/name: matrix-synapse

clusters/cl01tl/manifests/matrix-synapse/PersistentVolumeClaim-matrix-hookshot.yaml

@@ -1,19 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: matrix-hookshot
-  labels:
-    app.kubernetes.io/instance: matrix-synapse
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: matrix-hookshot
-    helm.sh/chart: matrix-hookshot-4.5.0
-  annotations:
-    helm.sh/resource-policy: keep
-  namespace: matrix-synapse
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "500Mi"
-  storageClassName: "ceph-block"