Skip to content

Latest commit

 

History

History
15 lines (11 loc) · 1.25 KB

README.md

File metadata and controls

15 lines (11 loc) · 1.25 KB
Raw

k8s-manifests

A collection fo Kubernetes manifests

Synapse

Deploys a Synapse server and a Postgresql database in a bare-metal cluster

Notes:

  • homeserver.yaml is encrypted (server-sealed-secrets.yaml) using Bitnami's sealed-secrets controller as it contains database credentials
  • as it is a bare-metal cluster, we use openebs to provide with storage. The storage class used is openebs-jiva-csi-sc
  • for networking, we have an Nginx ingress controller - bound to the VMs' host network - that reads the rule of server-ingress.yaml and route traffic to the server (Nginx ingress controller -> ingress -> service -> synapse server)
  • for federation, we cannot use port 8448 with the ingress controller, so we leverage delegation (see nginx.ingress.kubernetes.io/configuration-snippet in server-ingress.yaml)
  • a CronJob backs up the db to AWS s3 every day at midnight using this Docker image
  • we need the name of a retained pvc in postgres-pvc.yml. We do this so that if postgres app goes down, its pv featuring /var/lib/postgresql/data won't be lost. See how to retain the volume here: openebs/openebs#479 (comment))