ci: wire Matrix appservice env vars into the steward-env secret

Add STEWARD__MATRIX__* literals to the deployment secret so the Matrix
appservice bot is configured when the cluster secret is created. Values
come from gitea repo vars/secrets (MATRIX_HOMESERVER_URL, MATRIX_AS_TOKEN,
etc.) and are only populated when those are set.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
This commit is contained in:
Andrew Ridgway 2026-08-18 21:44:28 +10:00
parent c8f3600b32
commit 4838b9c388
Signed by: armistace
GPG Key ID: C8D9EAC514B47EF1

View File

@ -65,5 +65,13 @@ jobs:
--from-literal=OPENAI_BASE_URL=${{ vars.OPENAI_BASE_URL }} \
--from-literal=OPENAI_MODEL=${{ vars.OPENAI_MODEL }} \
--from-literal=THREAD_MEMORY_PATH=/data/thread_memory.json \
--from-literal=STEWARD__MATRIX__HOMESERVER_URL=${{ vars.MATRIX_HOMESERVER_URL }} \
--from-literal=STEWARD__MATRIX__HOMESERVER_DOMAIN=${{ vars.MATRIX_HOMESERVER_DOMAIN }} \
--from-literal=STEWARD__MATRIX__AS_TOKEN=${{ secrets.MATRIX_AS_TOKEN }} \
--from-literal=STEWARD__MATRIX__HS_TOKEN=${{ secrets.MATRIX_HS_TOKEN }} \
--from-literal=STEWARD__MATRIX__BOT_LOCALPART=${{ vars.MATRIX_BOT_LOCALPART }} \
--from-literal=STEWARD__MATRIX__LISTEN_PORT=8000 \
--from-literal=STEWARD__MATRIX__ALLOWED_ROOM_IDS=${{ vars.MATRIX_ALLOWED_ROOM_IDS }} \
--from-literal=STEWARD__MATRIX__ALLOWED_USER_IDS=${{ vars.MATRIX_ALLOWED_USER_IDS }} \
--namespace=steward
kubectl apply -f kube/steward_deployment.yaml && kubectl apply -f kube/steward_service.yaml