MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: acdc1531 by MarcusVRP at 2025-07-31T10:14:05-03:00 feat(matrix): upgrade - - - - - 2 changed files: - apps/base/matrix/deploy.yaml - apps/base/matrix/pvc.yaml Changes: ===================================== apps/base/matrix/deploy.yaml ===================================== @@ -18,57 +18,81 @@ spec: app: synapse tier: backend spec: - initContainers: - - name: render-synapse-config - image: alpine - command: ['sh', '-c', 'echo "${HOMESERVER_YAML}" > /data/homeserver.yaml && echo "${LOG_CONFIG}" > /data/matrix.c3sl.ufpr.br.log.config'] - volumeMounts: - - name: synapse-persistent-storage - mountPath: /data - env: - - name: HOMESERVER_YAML - valueFrom: - secretKeyRef: - name: matrix - key: synapseHomeserverYaml - - name: LOG_CONFIG - valueFrom: - secretKeyRef: - name: matrix - key: synapseLogConfig - - name: fix-perms - image: alpine - command: ['sh', '-c', 'chown -R 991:991 /data && chmod -R 700 /data'] - volumeMounts: - - name: synapse-persistent-storage - mountPath: /data containers: - image: harbor.c3sl.ufpr.br/root/synapse name: synapse env: - name: SYNAPSE_SERVER_NAME value: matrix.c3sl.ufpr.br - - name: SYNAPSE_REPORT_STATS - value: 'no' + - containerPort: 8008 + name: synapse + # ======== POSTGRES ======== # - name: POSTGRES_HOST - value: postgres.c3sl.ufpr.br + valueFrom: + secretKeyRef: + name: matrix + key: synapsePostgresHost - name: POSTGRES_USER - value: synapse + valueFrom: + secretKeyRef: + name: matrix + key: synapsePostgresUser - name: POSTGRES_DB - value: synapse + valueFrom: + secretKeyRef: + name: matrix + key: synapsePostgresDatabase - name: POSTGRES_PASSWORD valueFrom: secretKeyRef: - name: synapse-postgres - key: password - ports: - - containerPort: 8008 - name: synapse + name: matrix + key: synapsePostgresPassword + # ======== OPENID ======== # + - name: OIDC_IDP_NAME + value: DInf/C3SL + - name: OIDC_ISSUER + value: https://keycloak.c3sl.ufpr.br/realms/DInfC3SL + - name: OIDC_CLIENT_ID + valueFrom: + secretKeyRef: + name: matrix + key: synapseOidcClientId + - name: OIDC_CLIENT_SECREt + valueFrom: + secretKeyRef: + name: matrix + key: synapseOidcClientSecret + # ======== S3 ======== # + - name: S3_BUCKET_NAME + valueFrom: + secretKeyRef: + name: matrix + key: synapseS3BucketName + - name: S3_REGION_NAME + valueFrom: + secretKeyRef: + name: matrix + key: synapseS3RegionName + - name: S3_ENDPOINT_URL + valueFrom: + secretKeyRef: + name: matrix + key: synapseS3EndpointURL + - name: S3_ACCESS_KEY_ID + valueFrom: + secretKeyRef: + name: matrix + key: synapseS3AccessKeyId + - name: S3_SECRET_ACCESS_KEY + valueFrom: + secretKeyRef: + name: matrix + key: synapseS3SecretAccessKey volumeMounts: - - name: synapse-persistent-storage + - name: synapse-data mountPath: /data volumes: - - name: synapse-persistent-storage + - name: synapse-data persistentVolumeClaim: claimName: synapse --- @@ -93,19 +117,6 @@ spec: app: element tier: frontend spec: - initContainers: - - name: set-configjson - image: alpine - command: ['sh', '-c', 'echo "${CONFIG_JSON}" > /app/config.json'] - volumeMounts: - - name: element - mountPath: /app/ - env: - - name: CONFIG_JSON - valueFrom: - secretKeyRef: - name: matrix - key: elementConfigJson containers: - image: vectorim/element-web name: element @@ -113,9 +124,10 @@ spec: - containerPort: 80 name: element volumeMounts: - - name: element - mountPath: /app/ + - name: element-config + mountPath: /app/config.json + subPath: elementConfigJson volumes: - - name: element - persistentVolumeClaim: - claimName: element + - name: element-config + secret: + secretName: matrix ===================================== apps/base/matrix/pvc.yaml ===================================== @@ -11,17 +11,3 @@ spec: resources: requests: storage: 10Gi ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: element - namespace: matrix - labels: - app: element -spec: - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 5Gi View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/acdc1531f11923a481618f8... -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/acdc1531f11923a481618f8... You're receiving this email because of your account on gitlab.c3sl.ufpr.br.