k/matrix/bridges/telegram: initial commit

kustomizations/matrix/bridges/mautrix-telegram/kustomization.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+labels:
+- includeSelectors: true
+  pairs:
+    app.kubernetes.io/name: mautrix-telegram
+    app.kubernetes.io/part-of: matrix
+    app.kubernetes.io/component: bridge
+resources:
+- statefulset.yaml
+- service.yaml
+generators:
+  - secret-generator.yaml
+images:
+  - name: dock.mau.dev/mautrix/telegram
+    newTag: v0.15.1@sha256:e328dcf5893a3ec782212d9bb008e4f81ac3cf4e3c7abc3a49cf6b277749b32d

kustomizations/matrix/bridges/mautrix-telegram/secret-generator.yaml

@@ -0,0 +1,6 @@
+apiVersion: viaduct.ai/v1
+kind: ksops
+metadata:
+  name: telegram-ksops-secrets
+files:
+  - config-secrets.enc.yaml

kustomizations/matrix/bridges/mautrix-telegram/service.yaml

@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: mautrix-telegram
+spec:
+  publishNotReadyAddresses: true
+  ports:
+    - name: http
+      protocol: TCP
+      port: 29335
+      targetPort: 29335
+  selector: {}
+  type: ClusterIP

kustomizations/matrix/bridges/mautrix-telegram/statefulset.yaml

@@ -0,0 +1,42 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: mautrix-telegram-bridge
+spec:
+  template:
+    spec:
+      containers:
+        - name: telegram-mautrix
+          image: dock.mau.dev/mautrix/telegram
+          command:
+            - python3
+          args:
+            - -m
+            - mautrix_telegram
+            - -n
+            - -c
+            - /data/secrets.yaml
+          ports:
+            - name: http
+              containerPort: 29335
+              protocol: TCP
+          volumeMounts:
+            - name: config-secrets
+              mountPath: /data/secrets.yaml
+              subPath: config.yaml
+          livenessProbe:
+            httpGet:
+              path: /_matrix/mau/live
+              port: http
+              scheme: HTTP
+            initialDelaySeconds: 120
+          readinessProbe:
+            httpGet:
+              path: /_matrix/mau/ready
+              port: http
+              scheme: HTTP
+            initialDelaySeconds: 10
+      volumes:
+        - name: config-secrets
+          secret:
+            secretName: mautrix-telegram