comms: drop legacy synapse configmaps

services/comms/kustomization.yaml

@@ -20,7 +20,6 @@ resources:
   - mas-admin-client-secret-ensure-job.yaml
   - mas-db-ensure-job.yaml
   - comms-secrets-ensure-job.yaml
-  - synapse-signingkey-ensure-job.yaml
   - synapse-seeder-admin-ensure-job.yaml
   - synapse-user-seed-job.yaml
   - mas-local-users-ensure-job.yaml
@@ -49,26 +48,6 @@ configMapGenerator:
       - bot.py=scripts/atlasbot/bot.py
     options:
       disableNameSuffixHash: true
-  - name: othrys-synapse-redis-health
-    files:
-      - ping_readiness_local.sh=scripts/synapse/redis/ping_readiness_local.sh
-      - ping_liveness_local.sh=scripts/synapse/redis/ping_liveness_local.sh
-      - ping_readiness_master.sh=scripts/synapse/redis/ping_readiness_master.sh
-      - ping_liveness_master.sh=scripts/synapse/redis/ping_liveness_master.sh
-      - ping_readiness_local_and_master.sh=scripts/synapse/redis/ping_readiness_local_and_master.sh
-      - ping_liveness_local_and_master.sh=scripts/synapse/redis/ping_liveness_local_and_master.sh
-    options:
-      disableNameSuffixHash: true
-  - name: othrys-synapse-redis-scripts
-    files:
-      - start-master.sh=scripts/synapse/redis/start-master.sh
-    options:
-      disableNameSuffixHash: true
-  - name: othrys-synapse-matrix-synapse-scripts
-    files:
-      - signing-key.sh=scripts/synapse/signing-key.sh
-    options:
-      disableNameSuffixHash: true
   - name: atlas-kb
     files:
       - INDEX.md=knowledge/INDEX.md

services/comms/synapse-signingkey-ensure-job.yaml

@@ -1,42 +0,0 @@
-# services/comms/synapse-signingkey-ensure-job.yaml
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: othrys-synapse-signingkey-ensure-6
-  namespace: comms
-spec:
-  backoffLimit: 2
-  template:
-    spec:
-      serviceAccountName: othrys-synapse-signingkey-job
-      restartPolicy: OnFailure
-      volumes:
-        - name: work
-          emptyDir: {}
-      initContainers:
-        - name: generate
-          image: ghcr.io/element-hq/synapse:v1.144.0
-          command: ["/bin/sh", "-c"]
-          args:
-            - |
-              set -euo pipefail
-              generate_signing_key -o /work/signing.key
-          volumeMounts:
-            - name: work
-              mountPath: /work
-      containers:
-        - name: patch
-          image: registry.bstein.dev/bstein/kubectl:1.35.0
-          command: ["/bin/sh", "-c"]
-          args:
-            - |
-              set -euo pipefail
-              if kubectl -n comms get secret othrys-synapse-signingkey -o jsonpath='{.data.signing\.key}' 2>/dev/null | grep -q .; then
-                exit 0
-              fi
-              kubectl -n comms create secret generic othrys-synapse-signingkey \
-                --from-file=signing.key=/work/signing.key \
-                --dry-run=client -o yaml | kubectl -n comms apply -f - >/dev/null
-          volumeMounts:
-            - name: work
-              mountPath: /work