commit 12c7a5932d8ce384d3bfd14b6f308ba863a4c729
parent 5b718da736768297601d41d80331c2fe43651bfc
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 6 Mar 2024 14:32:22 +0100
Add livekit endpoint ingress
Diffstat:
3 files changed, 40 insertions(+), 16 deletions(-)
diff --git a/apps/base/matrix/element-call/ingress_livekit.yaml b/apps/base/matrix/element-call/ingress_livekit.yaml
@@ -0,0 +1,23 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+ annotations:
+ cert-manager.io/cluster-issuer: letsencrypt-http
+ name: element-call-livekit
+ namespace: element-call
+spec:
+ rules:
+ - host: call-livekit.midnightthoughts.space
+ http:
+ paths:
+ - backend:
+ service:
+ name: element-call-livekit-server
+ port:
+ number: 7881
+ path: /
+ pathType: ImplementationSpecific
+ tls:
+ - hosts:
+ - call-livekit.midnightthoughts.space
+ secretName: call-livekit.midnightthoughts.space-tls
diff --git a/apps/base/matrix/element-call/kustomization.yaml b/apps/base/matrix/element-call/kustomization.yaml
@@ -4,3 +4,4 @@ namespace: element-call
resources:
- repository.yaml
- release.yaml
+ - ingress_livekit.yaml
diff --git a/apps/base/matrix/element-call/release.yaml b/apps/base/matrix/element-call/release.yaml
@@ -23,8 +23,8 @@ spec:
# causing spurious drift detection
force: true
values:
- livekit_key: ENC[AES256_GCM,data:O/GmoPKbSQ87KNMfXy0CZPm+Zkkk9PGsa04IK2gfzJ6lFq9upngWTpjLAjBG91KMEdu16j/SUp0tcyIBa7e9Mw==,iv:AkoXtkQpxcExof7/9kj8fX57J0ltVede+7pDPunpVKc=,tag:rS9KW6rx1NmqaMifaJJUPQ==,type:str]
- livekit_secret: ENC[AES256_GCM,data:QKi4oPNSoUHrLCaSVAm+fl513Rl7gJbKeBu6V/803Hk1FoBZizDYFsUcDgmB3smSN7XNZc76EUvtVItwiiLs+A==,iv:NT6wG+iczsUTScxhEWTyGKVQ8X+OFwjD9pQ6DdoqHmU=,tag:5plc1X4p3FCbtEhMaJnW0A==,type:str]
+ livekit_key: ENC[AES256_GCM,data:hgwBX/xTh39LdWu5vBrNdyuTAYHdit0aHFNrt+QZ/NAMcK3zI+D+K/u/uuJx2UeDj93GKjbIdjWb5zFR7Ld4vA==,iv:cfOcIArR59wDjuJkr1wxliKoht6qdCe8zps3D0TDux0=,tag:4Sk5tvNhbMrUpquh5h3qFA==,type:str]
+ livekit_secret: ENC[AES256_GCM,data:nCCzUSp/Bj7oh+oP7o2a4uZE1TBpiUyIND0ZcKGywBmjbB0/kjJm/oanwQqMwE2mrf50P5ojVcVIcb3fXb5+lg==,iv:tbZmKbiamY7pT+v4f2tTb2M+Mj1WlGa/UI8FxXUfFLo=,tag:d7LuoKE3Vx64itBVUfavXw==,type:str]
livekit_mgmt:
ingress:
enabled: true
@@ -64,23 +64,23 @@ spec:
livekit-server:
livekit:
keys:
- bQXMwwlTCTbxDd6xRHYaaK5gzOzyb1gzS5E89vrJ96ONp3kEH4Ljh9su5L3BQc33: ENC[AES256_GCM,data:sEfT/1+o7KwvWU8riI8gTgcO0zoCK+aCk4bS66ltvsINQEwAcc9iHkndKuEDmTgbe6GOu9zo4OEfMXp32S3uIg==,iv:UG6cu8Vg2b6KMPxo/PAoHAolgVI+63W/3TOpr1BrxfQ=,tag:h1PB/snhiWL+IqMNHw1dfA==,type:str]
- iHMQVcTZSmUek9m55nFcvpGWaAR1nGpQggvEmvKyWqWbu099EjSZ2sQkU1ZMpR1h: ENC[AES256_GCM,data:kRRtn2uM61zcmjwkYnZT+fjx4M3qe0oimizhAiJu01I91/Yixqi90O3Z2zwpw/oYljZ5xJAIZc/uTQ+i+BzRxw==,iv:NZPmH2kVZm6eQJa2HUC+flYjNsfzxqZNHmbmRw2iVeM=,tag:qVLLwgxe561Ypps3luOz6w==,type:str]
+ bQXMwwlTCTbxDd6xRHYaaK5gzOzyb1gzS5E89vrJ96ONp3kEH4Ljh9su5L3BQc33: ENC[AES256_GCM,data:a0Ho8zXZ/PTvVGHulgVGoPX25aPdSXphpnQTqn7e1rvRpX1wCE/DVODQr759T4XiVowGuF+2DsXpj/yT6a7tUw==,iv:LjLl//pMBh0ZVZE0oclUxne1Frtf6V8OBO3PudSvhgw=,tag:6dc1YOd8V33KDJw9eFcGvQ==,type:str]
+ iHMQVcTZSmUek9m55nFcvpGWaAR1nGpQggvEmvKyWqWbu099EjSZ2sQkU1ZMpR1h: ENC[AES256_GCM,data:e2zwg47K+S4zUBDYukzwWw3GY1HbvHe5u6H5sTjdnc36goEnTl5QpYWRvRWbmALHRrOMjEipxBOprAK91L4W8g==,iv:N+IUz+n0hKcsrJLMC19moxwtflyfuumsT6iQk5e0QMc=,tag:CH/m0t7JhZlQOQoZwzo1sw==,type:str]
redis:
address: element-call-redis-master:6379
db: 0
- password: ENC[AES256_GCM,data:mpux6/uOi0xq3v1osGkCqHtf8m+GexzV3gEahDFPKo+lTbUET1NVs21yXQplSusvhVZ1LNq258Kh+Ii+pCT4VQ==,iv:zjye8R7a7cnYspl68v6I2ztO6V2KeDlXdA4J1CyYJOA=,tag:run3FsL2lz3Ve+teggYNWA==,type:str]
+ password: ENC[AES256_GCM,data:Bkqv6vlv1DkOV3rVrW+78hyeuvirz8YimtIQXRB1jeMIvun7i/9zWZPpZ9uBJzH0D6okZrIwMEz7Un0EQ6Ar+w==,iv:IrwrfFaj2yNjp/xKoKbLYtrOzJalqWiT8B/ONrwsEP8=,tag:Wff9HM1yMmr01Z/2ECVQ1A==,type:str]
redis:
auth:
- password: ENC[AES256_GCM,data:39RWrqqX/I+Qo9EERMD8fIEfAUGe97gE1KO9s93CflTgDeBAIoMvPYIeGyNB1iX+umve+bb03vjPtddOHYQliA==,iv:hsTtg4GJs8tnEZ2VNARxjiDjJxov2/xnKydHZUaL7do=,tag:zcKpKT9AyuXAv1bcB0pXdA==,type:str]
+ password: ENC[AES256_GCM,data:jVnwCDBbvgHINJ7Poz9oQLiMkXjhl0d/XD+jQcCn7aJMRjc3OSF6bIhMu4Q+8HZLXU/VluR9Pxfj8pREzdA24Q==,iv:I214aG/5q9d332bZbMHShv8+znFXs3UjDlb3Aoftz0M=,tag:ZYfXq0opkIYDap6Tvi1BRQ==,type:str]
egress:
egress:
- api_key: ENC[AES256_GCM,data:jVT5ZdKvcskqFeW1LQ6bSlB29Ydty3TNFnyLzbGM1EeRRZmZPCJ/LWJx5IA9t7E5QX3CwDTEQGk6rY6kgtoeLw==,iv:yaZErGOjoPtRMaPcPSTuCUYDscrbIK3CGu5oAC0J2y0=,tag:qqsKvTuMaMydfnDIGlJlTA==,type:str]
- api_secret: ENC[AES256_GCM,data:VtCb8x3eQOOxb9ZvOU9JUbonuZ9yFhar0147IKUwCxx78Q97Rv7d7S5hQP83Bx2MjeCxbHKBu3k4ry6as7Gq2g==,iv:BpjtZQKQ3uUs6srWDlFcnC9q1U2yOvqzT+62sw/sDGM=,tag:HSPYaWXNUUxawDcyj2W3Fg==,type:str]
+ api_key: ENC[AES256_GCM,data:RbZ4sWA/UP1rlWwNLA6lYulB0mEnED0PGfptsd/+2ovzum0Famk3HqEjAuduIazAZmeXwK/D/pR++/qRDfxnQA==,iv:mgmRZT7AZ3egZjZcE2+U4onm/e1UE1UJjYUHR2FeTkU=,tag:QrKE8xGOWQ4TCynSRB+wKA==,type:str]
+ api_secret: ENC[AES256_GCM,data:CgowY1z7DSg7q7WQuKXEI4DFW/aLWAbAEm/FNsoJsRKWUFvohjYhWxOmPfcJvkwG59nLu/SAAevvs8uFoSfJ4g==,iv:56dRTwTehMXr1eligsLiZ2fXSNwtu2HicGGGy5g316A=,tag:vl6McElumf7FF2walXxd7g==,type:str]
ws_url: ws://element-call-livekit-server:7880
redis:
address: element-call-redis-master:6379
- password: ENC[AES256_GCM,data:8FJCURcQDZtBC7lEqnFt2aEGCW1vHDJZzCqC0RXZPGvYRzuxG0avyPXdu6gAXTJnkp75K9apU/XG0H4Hb98gxw==,iv:cdcqiYZ8VphOX5TXUDYDcMxRaxUXRZBy891yHvEx7Tw=,tag:tkqzZBwSgwW5pZ2e9I5mOQ==,type:str]
+ password: ENC[AES256_GCM,data:gOhIhr7kFAvJXSpC1A9w+c/Sz2G9um8EPbDZTnjDjySZCRwfYVgQ1zrEcom9WexUbWFCKR3PAvWXNb9HiK/AyQ==,iv:3/6+qjBo1ANabddeSsORSW0JGb8SvKPOFT5oZYi4bRk=,tag:lh7z8oW/i48eVTCDzn5Jjw==,type:str]
db: 0
sops:
kms: []
@@ -91,14 +91,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkQ044REhSRk5vUlhjUFpz
- ZGtrQ2p2MjB0Z21zREZuaDBIbzU1MlhHSHp3CmFKYXVFUVZoY1gvc3VSS3B0VmdN
- RmtIaG80QTRJK0YvRmVRY2Q0TytObjQKLS0tIDB2YUllQkxDeksyYkJHNHFSNG5l
- bTFERk80TFd6TnJoSTlEekZERG5xWmMKso2Y0/JBhkuoRa8/oI1q+KO6avuSYRS2
- vL3NHnU1+T1neGvxcI5OQ05T0Gkii20AwEvpIXAb6gJ7XcUsQjrXPQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmblhnaWR6ekFVKzVRb2FK
+ MWZCdGFjVFgwaWRMcmdxcVZkU1JrRlVpOFU4CjdJTmhqMlorNlVZV0V5TU9pd3Bo
+ WFhSU2QrSmJNVXA3K25hYUdnQnJROVUKLS0tIFdQMmE1T2E0aGEzNFArWWk5dHFB
+ Y2pGVUVFT0ZBK29yZUoyVktyMVc0UmMKOUZdMJoWSOWS8DHGev0pY0PQLjYCDNo/
+ uO7LUyAZa0h/9ylfoMPmhmloLv8nu7+N28h1MMyQ4V3zNlQmvhpwaw==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-03-06T11:01:51Z"
- mac: ENC[AES256_GCM,data:krigNmLcL9hYMOGNDV4I6o9o/mK02s7Y+1nsUG9zkVhPjDcziTzlRrXy7kS/CAs5BlWIoY/PoPeEst5it/lPIDrqHVMFIwhsGCefC+2Xba/v5nG9lGQ+36pT0XSkfrX1JXt3dN/aJGqE7x20ZsDWF0/7BC2vsjTBoZPufvTttfg=,iv:F3vNX6i5ecJV3FZg2fhJZIawGP0D+qIjWnUhEN2qZW0=,tag:ixewCAPgJssGSuTsFqE2SQ==,type:str]
+ lastmodified: "2024-03-06T13:20:25Z"
+ mac: ENC[AES256_GCM,data:bJcR8+wP24b1obxgvlmckBpwpgjyc8cWky3Bngr2nou95qUE4B+CayoOBA0gaq5YcWtfzaoONxked8Hivsgw/uzDgC73gCAJveSWC7gZZ1z+e6ZFuGGVdUB7kDvNV7jWvt8xGbswj/4YQTNazC9U2h1U51Qop8XPX+LevDRKZQY=,iv:Y9GUZO2XKS5uju9EcLUcnwwxCpXKAmGTjXA980jBXF8=,tag:YtK2Y9qUBV+2EefEpRID8w==,type:str]
pgp: []
encrypted_regex: ^(api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
version: 3.8.1
