From 4838b9c388992c21c1dc992c1d8b5eaa9c3409c0 Mon Sep 17 00:00:00 2001 From: Andrew Ridgway Date: Tue, 18 Aug 2026 21:44:28 +1000 Subject: [PATCH] ci: wire Matrix appservice env vars into the steward-env secret Add STEWARD__MATRIX__* literals to the deployment secret so the Matrix appservice bot is configured when the cluster secret is created. Values come from gitea repo vars/secrets (MATRIX_HOMESERVER_URL, MATRIX_AS_TOKEN, etc.) and are only populated when those are set. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus --- .gitea/workflows/build_push.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.gitea/workflows/build_push.yml b/.gitea/workflows/build_push.yml index 709215c..29e0ad7 100644 --- a/.gitea/workflows/build_push.yml +++ b/.gitea/workflows/build_push.yml @@ -65,5 +65,13 @@ jobs: --from-literal=OPENAI_BASE_URL=${{ vars.OPENAI_BASE_URL }} \ --from-literal=OPENAI_MODEL=${{ vars.OPENAI_MODEL }} \ --from-literal=THREAD_MEMORY_PATH=/data/thread_memory.json \ + --from-literal=STEWARD__MATRIX__HOMESERVER_URL=${{ vars.MATRIX_HOMESERVER_URL }} \ + --from-literal=STEWARD__MATRIX__HOMESERVER_DOMAIN=${{ vars.MATRIX_HOMESERVER_DOMAIN }} \ + --from-literal=STEWARD__MATRIX__AS_TOKEN=${{ secrets.MATRIX_AS_TOKEN }} \ + --from-literal=STEWARD__MATRIX__HS_TOKEN=${{ secrets.MATRIX_HS_TOKEN }} \ + --from-literal=STEWARD__MATRIX__BOT_LOCALPART=${{ vars.MATRIX_BOT_LOCALPART }} \ + --from-literal=STEWARD__MATRIX__LISTEN_PORT=8000 \ + --from-literal=STEWARD__MATRIX__ALLOWED_ROOM_IDS=${{ vars.MATRIX_ALLOWED_ROOM_IDS }} \ + --from-literal=STEWARD__MATRIX__ALLOWED_USER_IDS=${{ vars.MATRIX_ALLOWED_USER_IDS }} \ --namespace=steward kubectl apply -f kube/steward_deployment.yaml && kubectl apply -f kube/steward_service.yaml