Logo
Explore Help
Sign In
studio/sbbb
2
0
Fork 0
You've already forked sbbb
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ccfe8b877a1db4725dc06d6772dafd71f2127d09
sbbb/base/matrix/kustomization.yaml

14 lines
263 B
YAML
Raw Normal View History

feat(matrix): add tuwunel Matrix homeserver deployment manifests Kubernetes manifests for tuwunel — a Rust Matrix homeserver using RocksDB for storage. Includes deployment, service, PVC, ConfigMap (tuwunel.toml), Hydra OAuth2Client for SSO, and Vault secrets for credentials injection. Key design decisions: - enableServiceLinks: false to prevent K8s TUWUNEL_* env var conflicts - strategy: Recreate for RocksDB exclusive lock (no rolling updates) - Identity provider configured entirely via env vars (client_id/secret from hydra-maester Secret, not hardcoded) - OpenSearch model_id injected via ConfigMap from CLI post-apply hook - SSO-only auth (login_with_password=false, single_sso=true) - OpenSearch hybrid neural+BM25 search (768-dim, all-mpnet-base-v2)
2026-03-10 18:52:21 +00:00
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: matrix
resources:
- namespace.yaml
- tuwunel-deployment.yaml
- tuwunel-service.yaml
- tuwunel-config.yaml
- tuwunel-pvc.yaml
- vault-secrets.yaml
- hydra-oauth2client.yaml
Reference in New Issue Copy Permalink
Powered by Gitea Version: 1.25.4 Page: 36ms Template: 3ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API