kustomizations/matrix/bridges/mautrix-slack/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+labels:
+- includeSelectors: true
+  pairs:
+    app.kubernetes.io/name: slack
+    app.kubernetes.io/part-of: matrix
+    app.kubernetes.io/component: bridge
+resources:
+- statefulset.yaml
+- service.yaml
+generators:
+  - secret-generator.yaml

kustomizations/matrix/bridges/mautrix-slack/secret-generator.yaml

@@ -0,0 +1,6 @@
+apiVersion: viaduct.ai/v1
+kind: ksops
+metadata:
+  name: slack-ksops-secrets
+files:
+  - config-secrets.enc.yaml

kustomizations/matrix/bridges/mautrix-slack/service.yaml

@@ -0,0 +1,13 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: slack
+spec:
+  publishNotReadyAddresses: true
+  ports:
+    - name: http
+      protocol: TCP
+      port: 29335
+      targetPort: 29335
+  selector: {}
+  type: ClusterIP

kustomizations/matrix/bridges/mautrix-slack/statefulset.yaml

@@ -0,0 +1,40 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: slack-bridge
+spec:
+  template:
+    spec:
+      containers:
+        - name: slack-mautrix
+          image: dock.mau.dev/mautrix/slack
+          command:
+            - /usr/bin/mautrix-slack
+          args:
+            - -n
+            - -c
+            - /data/config.yaml
+          ports:
+            - name: http
+              containerPort: 29335
+              protocol: TCP
+          volumeMounts:
+            - name: config-secrets
+              mountPath: /data/secrets.yaml
+              subPath: config.yaml
+          livenessProbe:
+            httpGet:
+              path: /_matrix/mau/live
+              port: http
+              scheme: HTTP
+            initialDelaySeconds: 120
+          readinessProbe:
+            httpGet:
+              path: /_matrix/mau/ready
+              port: http
+              scheme: HTTP
+            initialDelaySeconds: 10
+      volumes:
+        - name: config-secrets
+          secret:
+            secretName: slack-config