base/matrix/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: matrix

resources:
  - namespace.yaml
  - tuwunel-deployment.yaml
  - tuwunel-service.yaml
  - tuwunel-config.yaml
  - tuwunel-pvc.yaml
  - vault-secrets.yaml
  - hydra-oauth2client.yaml
feat(matrix): add tuwunel Matrix homeserver deployment manifests Kubernetes manifests for tuwunel — a Rust Matrix homeserver using RocksDB for storage. Includes deployment, service, PVC, ConfigMap (tuwunel.toml), Hydra OAuth2Client for SSO, and Vault secrets for credentials injection. Key design decisions: - enableServiceLinks: false to prevent K8s TUWUNEL_* env var conflicts - strategy: Recreate for RocksDB exclusive lock (no rolling updates) - Identity provider configured entirely via env vars (client_id/secret from hydra-maester Secret, not hardcoded) - OpenSearch model_id injected via ConfigMap from CLI post-apply hook - SSO-only auth (login_with_password=false, single_sso=true) - OpenSearch hybrid neural+BM25 search (768-dim, all-mpnet-base-v2) 2026-03-10 18:52:21 +00:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`

			`namespace: matrix`

			`resources:`
			`- namespace.yaml`
			`- tuwunel-deployment.yaml`
			`- tuwunel-service.yaml`
			`- tuwunel-config.yaml`
			`- tuwunel-pvc.yaml`
			`- vault-secrets.yaml`
			`- hydra-oauth2client.yaml`