From f8f9c34f172b5f6485c0160289ca403f9ea5e5f2 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Sat, 13 Dec 2025 03:13:44 +0000 Subject: [PATCH 1/3] chore: Update manifests after change --- .../Deployment-matrix-hookshot.yaml | 5 +++++ ...PersistentVolumeClaim-matrix-hookshot.yaml | 19 +++++++++++++++++++ 2 files changed, 24 insertions(+) create mode 100644 clusters/cl01tl/manifests/matrix-synapse/PersistentVolumeClaim-matrix-hookshot.yaml diff --git a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-hookshot.yaml b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-hookshot.yaml index 068a73c3e..81a85cc70 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-hookshot.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-hookshot.yaml @@ -47,6 +47,8 @@ spec: name: config readOnly: true subPath: config.yml + - mountPath: /data + name: data - mountPath: /data/passkey.pem mountPropagation: None name: passkey @@ -61,6 +63,9 @@ spec: - name: config secret: secretName: matrix-hookshot-config-secret + - name: data + persistentVolumeClaim: + claimName: matrix-hookshot - name: passkey secret: secretName: matrix-hookshot-config-secret diff --git a/clusters/cl01tl/manifests/matrix-synapse/PersistentVolumeClaim-matrix-hookshot.yaml b/clusters/cl01tl/manifests/matrix-synapse/PersistentVolumeClaim-matrix-hookshot.yaml new file mode 100644 index 000000000..f4407718c --- /dev/null +++ b/clusters/cl01tl/manifests/matrix-synapse/PersistentVolumeClaim-matrix-hookshot.yaml @@ -0,0 +1,19 @@ +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: matrix-hookshot + labels: + app.kubernetes.io/instance: matrix-synapse + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: matrix-synapse + helm.sh/chart: matrix-hookshot-4.5.0 + annotations: + helm.sh/resource-policy: keep + namespace: matrix-synapse +spec: + accessModes: + - "ReadWriteOnce" + resources: + requests: + storage: "500Mi" + storageClassName: "ceph-block" -- 2.49.1 From c18b45fa43b4373ed824926f10ff4bf2d5dd87c1 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Sat, 13 Dec 2025 03:18:27 +0000 Subject: [PATCH 2/3] chore: Update manifests after change --- .../manifests/matrix-synapse/ConfigMap-matrix-synapse.yaml | 2 +- .../manifests/matrix-synapse/Deployment-matrix-synapse.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/clusters/cl01tl/manifests/matrix-synapse/ConfigMap-matrix-synapse.yaml b/clusters/cl01tl/manifests/matrix-synapse/ConfigMap-matrix-synapse.yaml index 958b4ec46..5cff01e46 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/ConfigMap-matrix-synapse.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/ConfigMap-matrix-synapse.yaml @@ -30,4 +30,4 @@ data: root: level: INFO handlers: [console] - homeserver.yaml: "# NOTE:\n# Secrets are stored in separate configs to better fit K8s concepts\n\n## Server ##\n\nserver_name: \"alexlebens.dev\"\npublic_baseurl: \"https://matrix.alexlebens.dev\"\npid_file: /homeserver.pid\nweb_client: False\nsoft_file_limit: 0\nlog_config: \"/synapse/config/log.yaml\"\nreport_stats: false\n\ninstance_map:\n main:\n host: matrix-synapse-replication\n port: 9093\n\n## Ports ##\n\nlisteners:\n - port: 8008\n tls: false\n bind_addresses: [\"::\"]\n type: http\n x_forwarded: true\n\n resources:\n - names: \n - client\n - federation\n compress: false\n\n - port: 9090\n tls: false\n bind_addresses: [\"::\"]\n type: http\n\n resources:\n - names: [metrics]\n compress: false\n\n - port: 9093\n tls: false\n bind_addresses: [\"::\"]\n type: http\n\n resources:\n - names: [replication]\n compress: false\n\n## Files ##\n\nmedia_store_path: \"/synapse/data/media\"\nuploads_path: \"/synapse/data/uploads\"\n\n## Registration ##\n\nenable_registration: true\n\n## Metrics ###\n\nenable_metrics: true\n\n## Signing Keys ##\n\nsigning_key_path: \"/synapse/keys/signing.key\"\n\n# The trusted servers to download signing keys from.\ntrusted_key_servers:\n []\n\n## Workers ##\n\n## Extra config ##\n\nenable_metrics: true\nenable_registration_without_verification: true\npassword_config:\n enabled: false\nsso:\n client_whitelist:\n - https://chat.alexlebens.dev/\n update_profile_information: true\n" + homeserver.yaml: "# NOTE:\n# Secrets are stored in separate configs to better fit K8s concepts\n\n## Server ##\n\nserver_name: \"alexlebens.dev\"\npublic_baseurl: \"https://matrix.alexlebens.dev\"\npid_file: /homeserver.pid\nweb_client: False\nsoft_file_limit: 0\nlog_config: \"/synapse/config/log.yaml\"\nreport_stats: false\n\ninstance_map:\n main:\n host: matrix-synapse-replication\n port: 9093\n\n## Ports ##\n\nlisteners:\n - port: 8008\n tls: false\n bind_addresses: [\"::\"]\n type: http\n x_forwarded: true\n\n resources:\n - names: \n - client\n - federation\n compress: false\n\n - port: 9090\n tls: false\n bind_addresses: [\"::\"]\n type: http\n\n resources:\n - names: [metrics]\n compress: false\n\n - port: 9093\n tls: false\n bind_addresses: [\"::\"]\n type: http\n\n resources:\n - names: [replication]\n compress: false\n\n## Files ##\n\nmedia_store_path: \"/synapse/data/media\"\nuploads_path: \"/synapse/data/uploads\"\n\n## Registration ##\n\nenable_registration: true\n\n## Metrics ###\n\nenable_metrics: true\n\n## Signing Keys ##\n\nsigning_key_path: \"/synapse/keys/signing.key\"\n\n# The trusted servers to download signing keys from.\ntrusted_key_servers:\n []\n\n## Workers ##\n\n## Extra config ##\n\nenable_metrics: true\nenable_registration_without_verification: true\nexperimental_features:\n msc2409_to_device_messages_enabled: true\n msc3202_device_masquerading: true\n msc3202_transaction_extensions: true\npassword_config:\n enabled: false\nsso:\n client_whitelist:\n - https://chat.alexlebens.dev/\n update_profile_information: true\n" diff --git a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml index 698f325ec..341676742 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml @@ -21,7 +21,7 @@ spec: template: metadata: annotations: - checksum/config: 1308bd8794657ac11a15c811b223bae716e991d1ce02a54ef5f7bd1f614a93ee + checksum/config: 1313673c68ad16a104eadc2d655c528b8bbc3ac49b93329ccac2e1c9465dc83b checksum/secrets: 77c25644da166bfcea38f650cda8968f95f472cde7bd328de2f211ded12b73d0 labels: app.kubernetes.io/name: matrix-synapse -- 2.49.1 From 31ed270a4949b02756566908a56174b9eec126ba Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Sat, 13 Dec 2025 03:22:17 +0000 Subject: [PATCH 3/3] chore: Update manifests after change --- .../matrix-synapse/Deployment-matrix-synapse.yaml | 14 -------------- 1 file changed, 14 deletions(-) diff --git a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml index 341676742..c1161e5ec 100644 --- a/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml +++ b/clusters/cl01tl/manifests/matrix-synapse/Deployment-matrix-synapse.yaml @@ -120,14 +120,6 @@ spec: name: matrix-synapse-config-secret readOnly: true subPath: config.yaml - - mountPath: /synapse/config/conf.d/hookshot-registration.yaml - name: matrix-hookshot-config-secret - readOnly: true - subPath: hookshot-registration.yaml - - mountPath: /synapse/config/conf.d/double-puppet-registration.yaml - name: double-puppet-registration-secret - readOnly: true - subPath: double-puppet-registration.yaml resources: requests: cpu: 10m @@ -155,9 +147,3 @@ spec: - name: matrix-synapse-config-secret secret: secretName: matrix-synapse-config-secret - - name: matrix-hookshot-config-secret - secret: - secretName: matrix-hookshot-config-secret - - name: double-puppet-registration-secret - secret: - secretName: double-puppet-registration-secret -- 2.49.1