Skip to content

document deploymentMarkers in ci values examples#620

Merged
gaelgatelement merged 1 commit intomainfrom
gaelg/deployment-markers-in-ci-values
Jul 15, 2025
Merged

document deploymentMarkers in ci values examples#620
gaelgatelement merged 1 commit intomainfrom
gaelg/deployment-markers-in-ci-values

Conversation

@gaelgatelement
Copy link
Copy Markdown
Member

@gaelgatelement gaelgatelement commented Jul 15, 2025 •
edited
Loading

This got missed when building deploymentMarkers for syn2mas.

@gaelgatelement gaelgatelement requested a review from a team as a code owner July 15, 2025 12:14
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jul 15, 2025 •
edited
Loading

dyff of changes in rendered templates of CI manifests

Full contents of manifests and dyffs are available in https://github.com/element-hq/ess-helm/actions/runs/16294361400/artifacts/3535988894

matrix-authentication-service-synapse-syn2mas-dry-run-secrets-externally-values.yaml 
@@ Job/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-post
-         app.kubernetes.io/instance: release-name-deployment-markers-post
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-post
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "post"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:legacy_auth:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Job/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-pre
-         app.kubernetes.io/instance: release-name-deployment-markers-pre
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-pre
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "pre"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:legacy_auth:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Role/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ Role/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ RoleBinding/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-post
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-post
-     namespace: ess-ci


@@ RoleBinding/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-pre
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-pre
-     namespace: ess-ci


@@ ServiceAccount/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: post-install,post-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
- automountServiceAccountToken: false


@@ ServiceAccount/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: pre-install,pre-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
- automountServiceAccountToken: false
matrix-authentication-service-synapse-syn2mas-dry-run-secrets-in-helm-values.yaml 
@@ Job/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-post
-         app.kubernetes.io/instance: release-name-deployment-markers-post
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-post
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "post"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:legacy_auth:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Job/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-pre
-         app.kubernetes.io/instance: release-name-deployment-markers-pre
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-pre
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "pre"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:legacy_auth:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Role/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ Role/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ RoleBinding/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-post
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-post
-     namespace: ess-ci


@@ RoleBinding/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-pre
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-pre
-     namespace: ess-ci


@@ ServiceAccount/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: post-install,post-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
- automountServiceAccountToken: false


@@ ServiceAccount/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: pre-install,pre-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
- automountServiceAccountToken: false
matrix-authentication-service-synapse-syn2mas-migrate-secrets-externally-values.yaml 
@@ Job/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-post
-         app.kubernetes.io/instance: release-name-deployment-markers-post
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-post
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "post"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:syn2mas_migrated:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Job/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-pre
-         app.kubernetes.io/instance: release-name-deployment-markers-pre
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-pre
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "pre"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:syn2mas_migrated:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Role/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ Role/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ RoleBinding/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-post
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-post
-     namespace: ess-ci


@@ RoleBinding/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-pre
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-pre
-     namespace: ess-ci


@@ ServiceAccount/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: post-install,post-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
- automountServiceAccountToken: false


@@ ServiceAccount/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: pre-install,pre-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
- automountServiceAccountToken: false
matrix-authentication-service-synapse-syn2mas-migrate-secrets-in-helm-values.yaml 
@@ Job/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-post
-         app.kubernetes.io/instance: release-name-deployment-markers-post
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-post
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "post"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:syn2mas_migrated:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Job/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-pre
-         app.kubernetes.io/instance: release-name-deployment-markers-pre
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-pre
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "pre"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:syn2mas_migrated:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Role/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ Role/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ RoleBinding/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-post
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-post
-     namespace: ess-ci


@@ RoleBinding/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-pre
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-pre
-     namespace: ess-ci


@@ ServiceAccount/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: post-install,post-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
- automountServiceAccountToken: false


@@ ServiceAccount/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: pre-install,pre-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
- automountServiceAccountToken: false
synapse-ingress-additional-paths-values.yaml 
@@ Job/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-post
-         app.kubernetes.io/instance: release-name-deployment-markers-post
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-post
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "post"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:legacy_auth:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Job/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-pre
-         app.kubernetes.io/instance: release-name-deployment-markers-pre
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-pre
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "pre"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:legacy_auth:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Role/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ Role/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ RoleBinding/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-post
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-post
-     namespace: ess-ci


@@ RoleBinding/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-pre
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-pre
-     namespace: ess-ci


@@ ServiceAccount/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: post-install,post-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
- automountServiceAccountToken: false


@@ ServiceAccount/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: pre-install,pre-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
- automountServiceAccountToken: false
synapse-postgres-secrets-externally-values.yaml 
@@ Job/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-post
-         app.kubernetes.io/instance: release-name-deployment-markers-post
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-post
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "post"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:legacy_auth:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Job/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/job.yaml
- apiVersion: batch/v1
- kind: Job
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
- spec:
-   backoffLimit: 6
-   completionMode: NonIndexed
-   completions: 1
-   manualSelector: false
-   parallelism: 1
-   podReplacementPolicy: TerminatingOrFailed
-   template:
-     metadata:
-       annotations:
-       labels:
-         app.kubernetes.io/managed-by: Helm
-         app.kubernetes.io/part-of: matrix-stack
-         app.kubernetes.io/component: matrix-tools
-         app.kubernetes.io/name: deployment-markers-pre
-         app.kubernetes.io/instance: release-name-deployment-markers-pre
-         app.kubernetes.io/version: "0.5.4"
-     spec:
-       restartPolicy: OnFailure
-       automountServiceAccountToken: true
-       serviceAccountName: release-name-deployment-markers-pre
-       securityContext:
-         fsGroup: 10010
-         runAsGroup: 10010
-         runAsNonRoot: true
-         runAsUser: 10010
-         seccompProfile:
-           type: RuntimeDefault
-         supplementalGroups: []
-       containers:
-         - name: deployment-markers
-           image: "ghcr.io/element-hq/ess-helm/matrix-tools:0.5.4"
-           imagePullPolicy: Always
-           securityContext:
-             allowPrivilegeEscalation: false
-             capabilities:
-               drop:
-                 - ALL
-             readOnlyRootFilesystem: true
-           resources:
-             limits:
-               memory: 200Mi
-             requests:
-               cpu: 50m
-               memory: 50Mi
-           env:
-             - name: NAMESPACE
-               value: ess-ci
-           command:
-             - "/matrix-tools"
-             - "deployment-markers"
-             - "-step"
-             - "pre"
-             - "-markers"
-             - "release-name-markers:MATRIX_STACK_MSC3861:legacy_auth:legacy_auth"
-             - "-labels"
-             - "app.kubernetes.io/managed-by=Helm,app.kubernetes.io/part-of=matrix-stack,app.kubernetes.io/component=matrix-tools,app.kubernetes.io/name=deployment-markers,app.kubernetes.io/instance=release-name-deployment-markers,app.kubernetes.io/version=0.5.4"


@@ Role/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ Role/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/role.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: Role
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- rules:
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     verbs: ["create"]
-   - apiGroups: [""]
-     resources: ["configmaps"]
-     resourceNames: ["release-name-markers"]
-     verbs: ["get", "update"]


@@ RoleBinding/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": post-install,post-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-post
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-post
-     namespace: ess-ci


@@ RoleBinding/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/rolebinding.yaml
- apiVersion: rbac.authorization.k8s.io/v1
- kind: RoleBinding
- metadata:
-   name: release-name-deployment-markers-pre
-   namespace: ess-ci
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-pre
-     app.kubernetes.io/instance: release-name-deployment-markers-pre
-     app.kubernetes.io/version: "0.5.4"
-   annotations:
-     "helm.sh/hook": pre-install,pre-upgrade
-     "helm.sh/hook-weight": "-20"
- roleRef:
-   apiGroup: rbac.authorization.k8s.io
-   kind: Role
-   name: release-name-deployment-markers-pre
- subjects:
-   - kind: ServiceAccount
-     name: release-name-deployment-markers-pre
-     namespace: ess-ci


@@ ServiceAccount/ess-ci/release-name-deployment-markers-post @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- metadata:
-   annotations:
-     helm.sh/hook: post-install,post-upgrade
-     helm.sh/hook-weight: "-20"
-   labels:
-     helm.sh/chart: "matrix-stack-25.7.1-dev"
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/part-of: matrix-stack
-     app.kubernetes.io/component: matrix-tools
-     app.kubernetes.io/name: deployment-markers-post
-     app.kubernetes.io/instance: release-name-deployment-markers-post
-     app.kubernetes.io/version: "0.5.4"
-   name: release-name-deployment-markers-post
-   namespace: ess-ci
- automountServiceAccountToken: false


@@ ServiceAccount/ess-ci/release-name-deployment-markers-pre @@
- ---
- # Source: matrix-stack/templates/deployment-markers/serviceaccount.yaml
- apiVersion: v1
- kind: ServiceAccount
- m...*[Comment body truncated]*

@gaelgatelement gaelgatelement force-pushed the gaelg/deployment-markers-in-ci-values branch 4 times, most recently from 4c343e0 to 04c4714 Compare July 15, 2025 12:25
@gaelgatelement gaelgatelement force-pushed the gaelg/deployment-markers-in-ci-values branch from 04c4714 to 7db053b Compare July 15, 2025 13:17
benbz
benbz approved these changes Jul 15, 2025
View reviewed changes
Copy link
Copy Markdown
Member

@benbz benbz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I um'ed and ah'ed about all the syn2mas values files setting deploymentMarkers.enabled: true but I think this is good as it is

@gaelgatelement gaelgatelement merged commit eca1dc1 into main Jul 15, 2025
67 checks passed
@gaelgatelement gaelgatelement deleted the gaelg/deployment-markers-in-ci-values branch July 15, 2025 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@benbz benbz benbz approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@gaelgatelement @benbz
⚡