⚠️ MAJOR Update: drop Bitnami subchart, add CNPG cluster subchart, drop MAS subchart (adds it directly to this chart), add support for matrix-rtc #49

Merged
jessebot merged 72 commits from add-httproute-option into main 2026-08-30 21:51:56 +00:00
Owner

Changes

⚠️ This is a MAJOR update.

  • We are officially dropping support for the baked in Bitnami PostgreSQL sub-chart as the containers are no longer open-source and we haven't actually been using them in well over a year now, so we aren't testing them regularly either.

  • We have replaced the Bitnami PostgreSQL sub-chart with the CNPG cluster sub-chart. This also has baked in backup, restore, and upgrade functionality. Learn more in the CNPG docs.
    Note: This requires you to already have the CNPG Operator installed to your cluster ahead of time

  • We are officially bundling MAS (Matrix Authentication Service) directly into this chart. This means we are dropping support for the external MAS sub-chart.

  • We now support HttpRoute resources for synapse, matrix-federation, and MAS

  • This adds support for matrix-rtc (to support element calls)

  • adds optional haproxy

Co-Authored by: @cloudymax

# Changes ⚠️ This is a **MAJOR** update. - We are officially dropping support for the baked in Bitnami PostgreSQL sub-chart as the containers are no longer open-source and we haven't actually been using them in well over a year now, so we aren't testing them regularly either. - We have replaced the Bitnami PostgreSQL sub-chart with the [CNPG cluster](https://github.com/cloudnative-pg/charts/tree/main/charts/cluster) sub-chart. This also has baked in backup, restore, and upgrade functionality. Learn more in the [CNPG docs](https://cloudnative-pg.io/docs/1.30/). *Note: This requires you to already have the [CNPG Operator](https://github.com/cloudnative-pg/charts/tree/main/charts/cloudnative-pg) installed to your cluster ahead of time* - We are officially bundling MAS (Matrix Authentication Service) directly into this chart. This means we are *dropping* support for the external MAS sub-chart. - We now support HttpRoute resources for synapse, matrix-federation, and MAS - This adds support for matrix-rtc (to support element calls) - adds optional haproxy Co-Authored by: @cloudymax
get ready for bundled MAS
Some checks failed
Helm Lint / lint (pull_request) Has been cancelled
Check PR Labels / check-pr-labels (pull_request) Has been cancelled
Check PR Labels / check-labels (pull_request) Has been cancelled
2667748489
jessebot changed title from MAJOR Update: drop Bitnami subchart, add CNPG cluster subchart, drop MAS subchart to ⚠️ MAJOR Update: drop Bitnami subchart, add CNPG cluster subchart, drop MAS subchart 2026-08-21 09:35:08 +00:00
clean up our workflows - permissions are deprecated and new harbor instance
Some checks failed
Helm Lint / lint (pull_request) Has been cancelled
Check PR Labels / check-pr-labels (pull_request) Has been cancelled
Check PR Labels / check-labels (pull_request) Has been cancelled
933ad056ea
clean up README for this chart
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
d9c5394b8f
clean up database secret
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
1113cc6136
fix the httproute labels
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
9c804a23d9
update mas image
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
fd89928632
try quoting the client id
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
e9aea6abd7
update the env vars for mas
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
3357a3346d
update the ENV vars
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
6bbeafaa51
fix ssl templating for postgresql
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
262ae36044
quote client_ids
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
60d2ce8232
clean up userinfo var
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
c7228d3963
comment out the client section
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
9d4946dbf4
no clients ever
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
371c7d5653
remove commented clients section for mas
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
a02c1ab711
always quote the client id
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
9aac1f98c5
update matrix client secret
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
ddb22a4580
remove oidc section from matrix
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
a0d73b8fa7
fix mas url
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
048fb2a024
use new mas.config instead of mas.mas
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
85ddb215f4
fix how we pass in mas.secret
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
44f8b5067d
clean up more httproute stuff
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
b8a1a67f88
try regular expression
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
0362bdde05
clean up element to match upstream values
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
1c71d5d973
fix security headers
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
342e2ddbe1
clean up the reference to http_customizations
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
31a85ce3db
update some configmap stuff for synapse and mas
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
d10d3fe4ff
add httproute for mas
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
7541dca62f
fix httproute name
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
9c8bf3f0c7
fix httproute mas labels
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
6a96c1b680
attempt to add matrix rtc
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
2e2c185713
remove old volumemount
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
bf992153de
remove all references to the signing key
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
d3807ff2a5
fix pod security context for sfu
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
9c50cc7946
remove generated thingy
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
829cc0915e
do less
Some checks failed
Helm Lint / lint (pull_request) Has been cancelled
Check PR Labels / check-pr-labels (pull_request) Has been cancelled
Check PR Labels / check-labels (pull_request) Has been cancelled
eb585e6e32
no extra volumes by default
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
2fad49624d
use the livekit secret env var instead of the mounted secret
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
458932bde3
fix ports
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
eeeaa8e784
update the ports
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
f59d0a15d7
update health-checks and also use with for the securitycontext
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
8e48fefa56
add the matrix sfu service
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
6aad42f889
add some optional ingress and httproutes
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
6c7ecd8c4a
make synapse aware of the rtc server
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
82df3be425
fix experimental features
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
41ce9515da
fix spacing
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
5870f01405
labele verything foreverrrrrrr
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
2ed5df9d9d
add haproxy
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
986d69677a
add more configmaps
All checks were successful
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
Helm Lint / lint (pull_request) Successful in 2s
733edf6dac
finish up adding the haproxy stuff
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
18810525a1
clean up the well known
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
dd83f09825
fix labels
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
54e7092362
expose rtc-tcp and rtc-muxed-udp connections on Livekit SUF service, wiatch to manual IP
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
02c7d7ad3c
fix helper
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
07a833777d
fix duplicated name for port
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
7d34c54724
update configmap
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
106b1f9515
fix more service types
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
51cd3f29c8
update synapse httproute
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
d35dd2fad8
dedupe names
All checks were successful
Helm Lint / lint (pull_request) Successful in 3s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
07047c40c2
allow disabling haproxy
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
0e97bbd1b8
update context
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
8a0b884721
fix target port
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
9fd733672c
fix rtc port
All checks were successful
Helm Lint / lint (pull_request) Successful in 1s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
88f2e0fbf7
update httproutes and ingresses
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
9dd3ac430c
more sfu services
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
a8e5cfa3ab
update sfu configmap
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
118405ae87
use external ip again
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
ac960e18c1
don't restrict room creation
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 1s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
1f5ce52219
its working wooooo
All checks were successful
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
Helm Lint / lint (pull_request) Successful in 2s
49312dc98e
jessebot changed title from ⚠️ MAJOR Update: drop Bitnami subchart, add CNPG cluster subchart, drop MAS subchart to ⚠️ MAJOR Update: drop Bitnami subchart, add CNPG cluster subchart, drop MAS subchart (adds it directly to this chart), add support for matrix-rtc 2026-08-30 21:41:21 +00:00
cloudymax approved these changes 2026-08-30 21:49:32 +00:00
add note on extra well-known
All checks were successful
Helm Lint / lint (pull_request) Successful in 2s
Check PR Labels / check-labels (pull_request) Successful in 0s
Check PR Labels / check-pr-labels (pull_request) Successful in 0s
Bump Semver / check-labels (pull_request) Successful in 0s
Bump Semver / check-pr-labels (pull_request) Successful in 0s
Bump Semver / bump-semver-1 (pull_request) Successful in 17s
Bump Semver / bump-semver (pull_request) Successful in 0s
4b0d38b49b
jessebot deleted branch add-httproute-option 2026-08-30 21:51:56 +00:00
Sign in to join this conversation.
No description provided.