Skip to content

Update example-default-enabled-components-values.yaml to include MatrixRTC as it is enabled by default. #516

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update example-default-enabled-components-values.yaml to include MatrixRTC as it is enabled by default. #516

wants to merge 1 commit into from

Conversation

benbz
Copy link
Member

@benbz benbz commented Jun 4, 2025

@benbz benbz requested a review from a team as a code owner June 4, 2025 10:00
@github-actions GitHub Actions
Copy link

github-actions bot commented Jun 4, 2025

dyff of changes in rendered templates of CI manifests

example-default-enabled-components-values.yaml
configmap-release-name-element-web.yaml (changed) 
@@ data.config.json @@
! ± value change in multiline text (three inserts, one deletion)
  {
    "bug_report_endpoint_url": "https://element.io/bugreports/submit",
    "default_server_config": {
      "m.homeserver": {
        "base_url": "https://synapse.ess.localhost",
        "server_name": "ess.localhost"
      }
    },
+   "element_call": {
+     "use_exclusively": true
+   },
    "embedded_pages": {
      "login_for_welcome": true
    },
+   "features": {
+     "feature_element_call_video_rooms": true,
+     "feature_group_calls": true,
+     "feature_new_room_decoration_ui": true,
+     "feature_video_rooms": true
+   },
    "map_style_url": "https://api.maptiler.com/maps/streets/style.json?key=fU3vlMsMn4Jb6dnEIFsx",
    "setting_defaults": {
      "UIFeature.deactivate": false,
      "UIFeature.passwordReset": false,
-     "UIFeature.registration": false
+     "UIFeature.registration": false,
+     "feature_group_calls": true
    },
    "sso_redirect_options": {
      "immediate": false
    }
  }
configmap-release-name-matrix-rtc-sfu.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_configmap.yaml
+ apiVersion: v1
+ kind: ConfigMap
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-voip-server
+     app.kubernetes.io/name: matrix-rtc-sfu
+     app.kubernetes.io/instance: release-name-matrix-rtc-sfu
+     app.kubernetes.io/version: "v1.7.2"
+   name: release-name-matrix-rtc-sfu
+   namespace: ess-ci
+ data:
+   config.yaml: |
+     key_file: /conf/keys.yaml
+     logging:
+       json: false
+       level: info
+       pion_level: error
+     port: 7880
+     prometheus_port: 6789
+     rtc:
+       tcp_port: 30881
+       udp_port: 30882
+       use_external_ip: true
+     turn:
+       enabled: false
+   keys-template.yaml: |
+     ${LIVEKIT_KEY}: ${LIVEKIT_SECRET}
configmap-release-name-synapse-hook.yaml (changed) 
@@ data.01-homeserver-underrides.yaml @@
! ± value change in multiline text (one insert, no deletions)
  report_stats: false
  
  require_auth_for_profile_requests: true
+ # The maximum allowed duration by which sent events can be delayed, as
+ # per MSC4140.
+ max_event_delay_duration: 24h
+ 
+ rc_message:
+   # This needs to match at least e2ee key sharing frequency plus a bit of headroom
+   # Note key sharing events are bursty
+   per_second: 0.5
+   burst_count: 30
+ 
+ rc_delayed_event_mgmt:
+   # This needs to match at least the heart-beat frequency plus a bit of headroom
+   # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
+   per_second: 1
+   burst_count: 20

@@ data.04-homeserver-overrides.yaml @@
! ± value change in multiline text (one insert, no deletions)
  public_baseurl: https://synapse.ess.localhost/
  server_name: ess.localhost
  signing_key_path: /secrets/release-name-generated/SYNAPSE_SIGNING_KEY
  enable_metrics: true
  
  [39 lines unchanged)]
  
  - '2001:db8::/32'
  - 'ff00::/8'
  - 'fec0::/10'
  experimental_features:
+   # MSC3266: Room summary API. Used for knocking over federation
+   msc3266_enabled: true
+   # MSC4222 needed for syncv2 state_after. This allow clients to
+   # correctly track the state of the room.
+   msc4222_enabled: true
    msc3861:
      enabled: true
  
      issuer: http://release-name-matrix-authentication-service.ess-ci.svc.cluster.local:8080/
  
  [22 lines unchanged)]
  
  instance_map:
    main:
      host: release-name-synapse-main.ess-ci.svc.cluster.local.
      port: 9093
configmap-release-name-synapse.yaml (changed) 
@@ data.01-homeserver-underrides.yaml @@
! ± value change in multiline text (one insert, no deletions)
  report_stats: false
  
  require_auth_for_profile_requests: true
+ # The maximum allowed duration by which sent events can be delayed, as
+ # per MSC4140.
+ max_event_delay_duration: 24h
+ 
+ rc_message:
+   # This needs to match at least e2ee key sharing frequency plus a bit of headroom
+   # Note key sharing events are bursty
+   per_second: 0.5
+   burst_count: 30
+ 
+ rc_delayed_event_mgmt:
+   # This needs to match at least the heart-beat frequency plus a bit of headroom
+   # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
+   per_second: 1
+   burst_count: 20

@@ data.04-homeserver-overrides.yaml @@
! ± value change in multiline text (one insert, no deletions)
  public_baseurl: https://synapse.ess.localhost/
  server_name: ess.localhost
  signing_key_path: /secrets/release-name-generated/SYNAPSE_SIGNING_KEY
  enable_metrics: true
  
  [39 lines unchanged)]
  
  - '2001:db8::/32'
  - 'ff00::/8'
  - 'fec0::/10'
  experimental_features:
+   # MSC3266: Room summary API. Used for knocking over federation
+   msc3266_enabled: true
+   # MSC4222 needed for syncv2 state_after. This allow clients to
+   # correctly track the state of the room.
+   msc4222_enabled: true
    msc3861:
      enabled: true
  
      issuer: http://release-name-matrix-authentication-service.ess-ci.svc.cluster.local:8080/
  
  [22 lines unchanged)]
  
  instance_map:
    main:
      host: release-name-synapse-main.ess-ci.svc.cluster.local.
      port: 9093
configmap-release-name-well-known-haproxy.yaml (changed) 
@@ data.client @@
! ± value change in multiline text (one insert, one deletion)
  {
    "m.homeserver": {
      "base_url": "https://synapse.ess.localhost"
    },
    "org.matrix.msc2965.authentication": {
      "account": "https://mas.ess.localhost/account",
      "issuer": "https://mas.ess.localhost/"
-   }
+   },
+   "org.matrix.msc4143.rtc_foci": [
+     {
+       "livekit_service_url": "https://mrtc.ess.localhost",
+       "type": "livekit"
+     }
+   ]
  }
deployment-release-name-element-web.yaml (changed) 
@@ metadata.labels.k8s.element.io/element-web-config-hash @@
! ± value change
- 018905256c91d691989b200a04593a04d85c0176
+ 046cc7afacfd5062191ee1458b0a6dc1fd50425a

@@ spec.template.metadata.labels.k8s.element.io/element-web-config-hash @@
! ± value change
- 018905256c91d691989b200a04593a04d85c0176
+ 046cc7afacfd5062191ee1458b0a6dc1fd50425a
deployment-release-name-haproxy.yaml (changed) 
@@ metadata.labels.k8s.element.io/wellknowndelegation-haproxy-config-hash @@
! ± value change
- ff05a8a5e3a1f96ac7e04ef4efcfeaa9e035d0ce
+ e11809780b72891a9d29cdcbd86081e2104a5b23

@@ spec.template.metadata.labels.k8s.element.io/wellknowndelegation-haproxy-config-hash @@
! ± value change
- ff05a8a5e3a1f96ac7e04ef4efcfeaa9e035d0ce
+ e11809780b72891a9d29cdcbd86081e2104a5b23
deployment-release-name-matrix-rtc-authorisation-service.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_jwt_deployment.yaml
+ apiVersion: apps/v1
+ kind: Deployment
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-authorisation-service
+     app.kubernetes.io/name: matrix-rtc-authorisation-service
+     app.kubernetes.io/instance: release-name-matrix-rtc-authorisation-service
+     app.kubernetes.io/version: "0.2.3"
+     k8s.element.io/matrix-rtc-authorisation-service-secret-hash: da39a3ee5e6b4b0d3255bfef95601890afd80709
+   name: release-name-matrix-rtc-authorisation-service
+   namespace: ess-ci
+ spec:
+   replicas: 1
+   selector:
+     matchLabels:
+       app.kubernetes.io/instance: release-name-matrix-rtc-authorisation-service
+   strategy:
+     type: RollingUpdate
+     rollingUpdate:
+       maxUnavailable: 1
+       maxSurge: 2
+   template:
+     metadata:
+       labels:
+         app.kubernetes.io/managed-by: Helm
+         app.kubernetes.io/part-of: matrix-stack
+         app.kubernetes.io/component: matrix-rtc-authorisation-service
+         app.kubernetes.io/name: matrix-rtc-authorisation-service
+         app.kubernetes.io/instance: release-name-matrix-rtc-authorisation-service
+         app.kubernetes.io/version: "0.2.3"
+         k8s.element.io/matrix-rtc-authorisation-service-secret-hash: da39a3ee5e6b4b0d3255bfef95601890afd80709
+     spec:
+       automountServiceAccountToken: false
+       serviceAccountName: release-name-matrix-rtc-authorisation-service
+       securityContext:
+         fsGroup: 10033
+         runAsGroup: 10033
+         runAsNonRoot: true
+         runAsUser: 10033
+         seccompProfile:
+           type: RuntimeDefault
+         supplementalGroups: []
+       containers:
+         - name: matrix-rtc-authorisation-service
+           image: "ghcr.io/element-hq/lk-jwt-service:0.2.3"
+           imagePullPolicy: Always
+           securityContext:
+             allowPrivilegeEscalation: false
+             capabilities:
+               drop:
+                 - ALL
+             readOnlyRootFilesystem: true
+           env:
+             - name: "LIVEKIT_KEY"
+               value: "matrix-rtc"
+             - name: "LIVEKIT_SECRET_FROM_FILE"
+               value: "/secrets/release-name-generated/ELEMENT_CALL_LIVEKIT_SECRET"
+             - name: "LIVEKIT_URL"
+               value: "wss://mrtc.ess.localhost"
+           ports:
+             - containerPort: 8080
+               name: http
+               protocol: TCP
+           livenessProbe:
+             failureThreshold: 3
+             periodSeconds: 10
+             successThreshold: 1
+             timeoutSeconds: 1
+             httpGet:
+               path: /healthz
+               port: http
+           readinessProbe:
+             failureThreshold: 3
+             periodSeconds: 10
+             successThreshold: 1
+             timeoutSeconds: 1
+             httpGet:
+               path: /healthz
+               port: http
+           startupProbe:
+             failureThreshold: 3
+             periodSeconds: 10
+             successThreshold: 1
+             timeoutSeconds: 1
+             httpGet:
+               path: /healthz
+               port: http
+           resources:
+             limits:
+               memory: 20Mi
+             requests:
+               cpu: 50m
+               memory: 20Mi
+           volumeMounts:
+             - mountPath: /secrets/release-name-generated
+               name: "secret-0"
+               readOnly: true
+       volumes:
+         - secret:
+             secretName: release-name-generated
+           name: secret-0
deployment-release-name-matrix-rtc-sfu.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_deployment.yaml
+ apiVersion: apps/v1
+ kind: Deployment
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-voip-server
+     app.kubernetes.io/name: matrix-rtc-sfu
+     app.kubernetes.io/instance: release-name-matrix-rtc-sfu
+     app.kubernetes.io/version: "v1.7.2"
+     k8s.element.io/matrix-rtc-sfu-config-hash: e37e9d2ffca689000c5663f8a8cd486cf0461ee1
+   name: release-name-matrix-rtc-sfu
+   namespace: ess-ci
+ spec:
+   replicas: 1
+   selector:
+     matchLabels:
+       app.kubernetes.io/instance: release-name-matrix-rtc-sfu
+   strategy:
+     type: RollingUpdate
+     rollingUpdate:
+       maxUnavailable: 1
+       maxSurge: 2
+   template:
+     metadata:
+       labels:
+         app.kubernetes.io/managed-by: Helm
+         app.kubernetes.io/part-of: matrix-stack
+         app.kubernetes.io/component: matrix-rtc-voip-server
+         app.kubernetes.io/name: matrix-rtc-sfu
+         app.kubernetes.io/instance: release-name-matrix-rtc-sfu
+         app.kubernetes.io/version: "v1.7.2"
+         k8s.element.io/matrix-rtc-sfu-config-hash: e37e9d2ffca689000c5663f8a8cd486cf0461ee1
+     spec:
+       automountServiceAccountToken: false
+       serviceAccountName: release-name-matrix-rtc-sfu
+       securityContext:
+         fsGroup: 10030
+         runAsGroup: 10030
+         runAsNonRoot: true
+         runAsUser: 10030
+         seccompProfile:
+           type: RuntimeDefault
+         supplementalGroups: []
+       initContainers:
+         - name: render-config
+           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.4.0"
+           imagePullPolicy: Always
+           securityContext:
+             allowPrivilegeEscalation: false
+             capabilities:
+               drop:
+                 - ALL
+             readOnlyRootFilesystem: true
+           command:
+             - "/matrix-tools"
+             - render-config
+             - -output
+             - /conf/keys.yaml
+             - /config-templates/keys-template.yaml
+           env:
+             - name: "LIVEKIT_KEY"
+               value: "matrix-rtc"
+             - name: LIVEKIT_SECRET
+               value: >-
+                 {{ readfile "/secrets/release-name-generated/ELEMENT_CALL_LIVEKIT_SECRET" }}
+           resources:
+             limits:
+               memory: 4Gi
+             requests:
+               cpu: 100m
+               memory: 150Mi
+           volumeMounts:
+             - mountPath: /config-templates
+               name: plain-config
+               readOnly: true
+             - mountPath: /secrets/release-name-generated
+               name: "secret-0"
+               readOnly: true
+             - mountPath: /conf
+               name: rendered-config
+               readOnly: false
+       hostNetwork: false
+       containers:
+         - name: sfu
+           args:
+             - --config
+             - /conf/config.yaml
+           image: "docker.io/livekit/livekit-server:v1.7.2"
+           imagePullPolicy: Always
+           securityContext:
+             allowPrivilegeEscalation: false
+             capabilities:
+               drop:
+                 - ALL
+             readOnlyRootFilesystem: true
+           ports:
+             - containerPort: 6789
+               name: metrics
+               protocol: TCP
+             - containerPort: 7880
+               name: http
+               protocol: TCP
+             - containerPort: 30881
+               name: rtc-tcp
+               protocol: TCP
+             - containerPort: 30882
+               name: rtc-muxed-udp
+               protocol: TCP
+           livenessProbe:
+             failureThreshold: 3
+             periodSeconds: 10
+             successThreshold: 1
+             timeoutSeconds: 1
+             httpGet:
+               path: /
+               port: http
+           readinessProbe:
+             failureThreshold: 3
+             periodSeconds: 10
+             successThreshold: 1
+             timeoutSeconds: 1
+             httpGet:
+               path: /
+               port: http
+           startupProbe:
+             failureThreshold: 3
+             periodSeconds: 10
+             successThreshold: 1
+             timeoutSeconds: 1
+             httpGet:
+               path: /
+               port: http
+           resources:
+             limits:
+               memory: 4Gi
+             requests:
+               cpu: 100m
+               memory: 150Mi
+           volumeMounts:
+             - mountPath: "/conf/keys.yaml"
+               name: rendered-config
+               subPath: keys.yaml
+               readOnly: true
+             - mountPath: /secrets/release-name-generated
+               name: "secret-0"
+               readOnly: true
+             - mountPath: /conf/config.yaml
+               name: plain-config
+               subPath: config.yaml
+       volumes:
+         - configMap:
+             defaultMode: 420
+             name: release-name-matrix-rtc-sfu
+           name: plain-config
+         - secret:
+             secretName: release-name-generated
+           name: secret-0
+         - emptyDir:
+             medium: Memory
+           name: "rendered-config"
ingress-release-name-matrix-rtc.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/ingress.yaml
+ apiVersion: networking.k8s.io/v1
+ kind: Ingress
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc
+     app.kubernetes.io/name: matrix-rtc
+     app.kubernetes.io/instance: release-name-matrix-rtc
+     app.kubernetes.io/version: "0.2.3"
+   name: release-name-matrix-rtc
+   namespace: ess-ci
+ spec:
+   tls:
+     - hosts:
+         - "mrtc.ess.localhost"
+   rules:
+     - host: "mrtc.ess.localhost"
+       http:
+         paths:
+           - path: /sfu/get
+             pathType: Prefix
+             backend:
+               service:
+                 name: "release-name-matrix-rtc-authorisation-service"
+                 port:
+                   name: http
+           - path: /
+             pathType: Prefix
+             backend:
+               service:
+                 name: "release-name-matrix-rtc-sfu"
+                 port:
+                   number: 7880
job-release-name-init-secrets.yaml (changed) 
@@ spec.template.spec.containers.init-secrets.command @@
! - one list entry removed:
- - "release-name-generated:POSTGRES_SYNAPSE_PASSWORD:rand32,release-name-generated:POSTGRES_MATRIX_AUTHENTICATION_SERVICE_PASSWORD:rand32,release-name-generated:POSTGRES_ADMIN_PASSWORD:rand32,release-name-generated:SYNAPSE_MACAROON:rand32,release-name-generated:SYNAPSE_REGISTRATION_SHARED_SECRET:rand32,release-name-generated:SYNAPSE_SIGNING_KEY:signingkey,release-name-generated:MAS_SYNAPSE_SHARED_SECRET:rand32,release-name-generated:MAS_SYNAPSE_OIDC_CLIENT_SECRET:rand32,release-name-generated:MAS_ENCRYPTION_SECRET:hex32,release-name-generated:MAS_RSA_PRIVATE_KEY:rsa,release-name-generated:MAS_ECDSA_PRIME256V1_PRIVATE_KEY:ecdsaprime256v1"
! + one list entry added:
+   - "release-name-generated:POSTGRES_SYNAPSE_PASSWORD:rand32,release-name-generated:POSTGRES_MATRIX_AUTHENTICATION_SERVICE_PASSWORD:rand32,release-name-generated:POSTGRES_ADMIN_PASSWORD:rand32,release-name-generated:ELEMENT_CALL_LIVEKIT_SECRET:rand32,release-name-generated:SYNAPSE_MACAROON:rand32,release-name-generated:SYNAPSE_REGISTRATION_SHARED_SECRET:rand32,release-name-generated:SYNAPSE_SIGNING_KEY:signingkey,release-name-generated:MAS_SYNAPSE_SHARED_SECRET:rand32,release-name-generated:MAS_SYNAPSE_OIDC_CLIENT_SECRET:rand32,release-name-generated:MAS_ENCRYPTION_SECRET:hex32,release-name-generated:MAS_RSA_PRIVATE_KEY:rsa,release-name-generated:MAS_ECDSA_PRIME256V1_PRIVATE_KEY:ecdsaprime256v1"
job-release-name-synapse-check-config.yaml (changed) 
@@ metadata.labels.k8s.element.io/synapse-config-hash @@
! ± value change
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ ffd376db69292c0bb560f475341364d38bba1d0b

@@ spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
! ± value change
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ ffd376db69292c0bb560f475341364d38bba1d0b
secret-release-name-matrix-rtc-authorisation-service.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_jwt_secret.yaml
+ apiVersion: v1
+ kind: Secret
+ metadata:
+   name: release-name-matrix-rtc-authorisation-service
+   namespace: ess-ci
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-authorisation-service
+     app.kubernetes.io/name: matrix-rtc-authorisation-service
+     app.kubernetes.io/instance: release-name-matrix-rtc-authorisation-service
+     app.kubernetes.io/version: "0.2.3"
+ type: Opaque
+ data:
service-release-name-matrix-rtc-authorisation-service.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_jwt_service.yaml
+ apiVersion: v1
+ kind: Service
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-authorisation-service
+     app.kubernetes.io/name: matrix-rtc-authorisation-service
+     app.kubernetes.io/instance: release-name-matrix-rtc-authorisation-service
+     app.kubernetes.io/version: "0.2.3"
+   name: release-name-matrix-rtc-authorisation-service
+   namespace: ess-ci
+ spec:
+   type: ClusterIP
+   ports:
+     - name: http
+       port: 8080
+       targetPort: http
+   selector:
+     app.kubernetes.io/instance: "release-name-matrix-rtc-authorisation-service"
service-release-name-matrix-rtc-sfu-muxed-udp.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_rtc_udp_muxer_service.yaml
+ apiVersion: v1
+ kind: Service
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-voip-server
+     app.kubernetes.io/name: matrix-rtc-sfu-rtc
+     app.kubernetes.io/instance: release-name-matrix-rtc-sfu-rtc
+     app.kubernetes.io/version: "v1.7.2"
+   name: release-name-matrix-rtc-sfu-muxed-udp
+   namespace: ess-ci
+ spec:
+   type: NodePort
+   externalTrafficPolicy: Local
+   ports:
+     - name: "rtc-muxed-udp"
+       protocol: "UDP"
+       port: 30882
+       targetPort: 30882
+       nodePort: 30882
+   selector:
+     app.kubernetes.io/instance: "release-name-matrix-rtc-sfu"
service-release-name-matrix-rtc-sfu-tcp.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_rtc_tcp_service.yaml
+ apiVersion: v1
+ kind: Service
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-voip-server
+     app.kubernetes.io/name: matrix-rtc-sfu-rtc
+     app.kubernetes.io/instance: release-name-matrix-rtc-sfu-rtc
+     app.kubernetes.io/version: "v1.7.2"
+   name: release-name-matrix-rtc-sfu-tcp
+   namespace: ess-ci
+ spec:
+   type: NodePort
+   externalTrafficPolicy: Local
+   ports:
+     - name: "rtc-tcp"
+       protocol: "TCP"
+       port: 30881
+       targetPort: 30881
+       nodePort: 30881
+   selector:
+     app.kubernetes.io/instance: "release-name-matrix-rtc-sfu"
service-release-name-matrix-rtc-sfu.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_service.yaml
+ apiVersion: v1
+ kind: Service
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-voip-server
+     app.kubernetes.io/name: matrix-rtc-sfu
+     app.kubernetes.io/instance: release-name-matrix-rtc-sfu
+     app.kubernetes.io/version: "v1.7.2"
+   name: release-name-matrix-rtc-sfu
+   namespace: ess-ci
+ spec:
+   type: ClusterIP
+   ports:
+     - name: http
+       port: 7880
+       targetPort: http
+   selector:
+     app.kubernetes.io/instance: "release-name-matrix-rtc-sfu"
serviceaccount-release-name-matrix-rtc-authorisation-service.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_jwt_serviceaccount.yaml
+ apiVersion: v1
+ kind: ServiceAccount
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-authorisation-service
+     app.kubernetes.io/name: matrix-rtc-authorisation-service
+     app.kubernetes.io/instance: release-name-matrix-rtc-authorisation-service
+     app.kubernetes.io/version: "0.2.3"
+   name: release-name-matrix-rtc-authorisation-service
+   namespace: ess-ci
+ automountServiceAccountToken: false
serviceaccount-release-name-matrix-rtc-sfu.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_serviceaccount.yaml
+ apiVersion: v1
+ kind: ServiceAccount
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-voip-server
+     app.kubernetes.io/name: matrix-rtc-sfu
+     app.kubernetes.io/instance: release-name-matrix-rtc-sfu
+     app.kubernetes.io/version: "v1.7.2"
+   name: release-name-matrix-rtc-sfu
+   namespace: ess-ci
+ automountServiceAccountToken: false
servicemonitor-release-name-matrix-rtc-authorisation-service.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_jwt_service_monitor.yaml
+ apiVersion: monitoring.coreos.com/v1
+ kind: ServiceMonitor
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-authorisation-service
+     app.kubernetes.io/name: matrix-rtc-authorisation-service
+     app.kubernetes.io/instance: release-name-matrix-rtc-authorisation-service
+     app.kubernetes.io/version: "0.2.3"
+   name: release-name-matrix-rtc-authorisation-service
+   namespace: ess-ci
+ spec:
+   endpoints:
+     - interval: 30s
+       port: http
+   selector:
+     matchLabels:
+       app.kubernetes.io/part-of: matrix-stack
+       app.kubernetes.io/component: matrix-rtc-authorisation-service
+       app.kubernetes.io/instance: release-name-matrix-rtc-authorisation-service
servicemonitor-release-name-matrix-rtc-sfu.yaml (added) 
+ ---
+ # Source: matrix-stack/templates/matrix-rtc/sfu_service_monitor.yaml
+ apiVersion: monitoring.coreos.com/v1
+ kind: ServiceMonitor
+ metadata:
+   labels:
+     helm.sh/chart: "matrix-stack-25.5.2-dev"
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/part-of: matrix-stack
+     app.kubernetes.io/component: matrix-rtc-voip-server
+     app.kubernetes.io/name: matrix-rtc-sfu
+     app.kubernetes.io/instance: release-name-matrix-rtc-sfu
+     app.kubernetes.io/version: "v1.7.2"
+   name: release-name-matrix-rtc-sfu
+   namespace: ess-ci
+ spec:
+   endpoints:
+     - interval: 30s
+       port: http
+   selector:
+     matchLabels:
+       app.kubernetes.io/part-of: matrix-stack
+       app.kubernetes.io/component: matrix-rtc-voip-server
+       app.kubernetes.io/instance: release-name-matrix-rtc-sfu
statefulset-release-name-synapse-main.yaml (changed) 
@@ metadata.labels.k8s.element.io/synapse-config-hash @@
! ± value change
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ ffd376db69292c0bb560f475341364d38bba1d0b

@@ spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
! ± value change
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ ffd376db69292c0bb560f475341364d38bba1d0b

@benbz benbz mentioned this pull request Jun 16, 2025
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@benbz