-
Notifications
You must be signed in to change notification settings - Fork 45
Synapse: default to TLS 1.2 or later for outbound federation #609
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
de2607d
to
430e906
Compare
dyff of changes in rendered templates of CI manifestsFull contents of manifests and dyffs are available in https://github.com/element-hq/ess-helm/actions/runs/16144194124/artifacts/3486173801 example-default-enabled-components-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
matrix-authentication-service-synapse-syn2mas-dry-run-secrets-externally-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-syn2mas - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
@@ Job/ess-ci/release-name-syn2mas - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
matrix-authentication-service-synapse-syn2mas-dry-run-secrets-in-helm-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-syn2mas - metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55
@@ Job/ess-ci/release-name-syn2mas - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d22790a71f25e589db0a3d4606b91f21ea34f9ec
+ 62471156c3b7ab2d63075428f3b6c0db85130ca4
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d22790a71f25e589db0a3d4606b91f21ea34f9ec
+ 62471156c3b7ab2d63075428f3b6c0db85130ca4
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55
matrix-authentication-service-synapse-syn2mas-migrate-secrets-externally-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-syn2mas - metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f
@@ Job/ess-ci/release-name-syn2mas - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f
matrix-authentication-service-synapse-syn2mas-migrate-secrets-in-helm-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-syn2mas - metadata.labels.k8s.element.io/synapse-config-hash @@
- a61678a3d8d9531f8d69f8ff7accbc8a315fbd80
+ ce9a32a580f36248432bab63e6136897ddd6cc9d
@@ Job/ess-ci/release-name-syn2mas - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- a61678a3d8d9531f8d69f8ff7accbc8a315fbd80
+ ce9a32a580f36248432bab63e6136897ddd6cc9d
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- a61678a3d8d9531f8d69f8ff7accbc8a315fbd80
+ ce9a32a580f36248432bab63e6136897ddd6cc9d
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- a61678a3d8d9531f8d69f8ff7accbc8a315fbd80
+ ce9a32a580f36248432bab63e6136897ddd6cc9d
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 53c7cb7842d1462ac62235026692c4861ab99e34
+ 2378aef743a6d6eec6a41fd3c10a21f8232b747b
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 53c7cb7842d1462ac62235026692c4861ab99e34
+ 2378aef743a6d6eec6a41fd3c10a21f8232b747b
pytest-matrix-authentication-service-syn2mas-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
pytest-matrix-authentication-service-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
pytest-matrix-rtc-synapse-wellknown-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 346246755af07047475d9e34f058ac25a7738169
+ f26a2eac014acbbf93032482288d5007572b5a1b
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 346246755af07047475d9e34f058ac25a7738169
+ f26a2eac014acbbf93032482288d5007572b5a1b
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 346246755af07047475d9e34f058ac25a7738169
+ f26a2eac014acbbf93032482288d5007572b5a1b
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 346246755af07047475d9e34f058ac25a7738169
+ f26a2eac014acbbf93032482288d5007572b5a1b
pytest-synapse-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 67964794a25288400fa8a0feed6082ab4b3e9887
+ cf9baa7a56edb4efc322443f6983370b91d07478
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 67964794a25288400fa8a0feed6082ab4b3e9887
+ cf9baa7a56edb4efc322443f6983370b91d07478
@@ StatefulSet/ess-ci/release-name-synapse-event-persist - metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385
@@ StatefulSet/ess-ci/release-name-synapse-event-persist - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385
@@ StatefulSet/ess-ci/release-name-synapse-media-repo - metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385
@@ StatefulSet/ess-ci/release-name-synapse-media-repo - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385
@@ StatefulSet/ess-ci/release-name-synapse-sliding-sync - metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385
@@ StatefulSet/ess-ci/release-name-synapse-sliding-sync - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385
quick-setup-certificates-pg-external-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
quick-setup-certificates-pg-with-helm-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
quick-setup-external-cert-pg-external-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
quick-setup-external-cert-pg-with-helm-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
quick-setup-letsencrypt-pg-external-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
quick-setup-letsencrypt-pg-with-helm-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
quick-setup-wildcard-cert-pg-external-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317
quick-setup-wildcard-cert-pg-with-helm-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h
[seven lines unchanged)]
# This needs to match at least the heart-beat frequency plus a bit of headroom
# Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
per_second: 1
burst_count: 20
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec
synapse-checkov-with-workers-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 3250963c3f925d3ccddafb476703e61de0ce38a1
+ e6b931aa82c7ef7eea8a7fc097de9a9cdf7a8f6f
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 3250963c3f925d3ccddafb476703e61de0ce38a1
+ e6b931aa82c7ef7eea8a7fc097de9a9cdf7a8f6f
@@ StatefulSet/ess-ci/release-name-synapse-appservice - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
@@ StatefulSet/ess-ci/release-name-synapse-appservice - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
@@ StatefulSet/ess-ci/release-name-synapse-client-reader - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
@@ StatefulSet/ess-ci/release-name-synapse-client-reader - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
@@ StatefulSet/ess-ci/release-name-synapse-event-persist - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
@@ StatefulSet/ess-ci/release-name-synapse-event-persist - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
@@ StatefulSet/ess-ci/release-name-synapse-fed-reader - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
@@ StatefulSet/ess-ci/release-name-synapse-fed-reader - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b
synapse-ingress-additional-paths-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
synapse-minimal-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
synapse-postgres-secrets-externally-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 1f490ad140b086a0469968959f7d7c16d23bbb8f
+ d193b7b6871d096cd93e7c0e8a2c5022a8c051bb
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 1f490ad140b086a0469968959f7d7c16d23bbb8f
+ d193b7b6871d096cd93e7c0e8a2c5022a8c051bb
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 1f490ad140b086a0469968959f7d7c16d23bbb8f
+ d193b7b6871d096cd93e7c0e8a2c5022a8c051bb
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 1f490ad140b086a0469968959f7d7c16d23bbb8f
+ d193b7b6871d096cd93e7c0e8a2c5022a8c051bb
synapse-postgres-secrets-in-helm-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 01f34ae1929c769282f65818e2656f36c971c549
+ 33aa517b50e1bc9943c7f14276b4051af6c2dec9
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 01f34ae1929c769282f65818e2656f36c971c549
+ 33aa517b50e1bc9943c7f14276b4051af6c2dec9
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 56dec5483e7759980b3f25960b977a1d8c8f57a5
+ 7cee5ecb8a2abe99ad7cd4430aee8013ed2d8d31
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 56dec5483e7759980b3f25960b977a1d8c8f57a5
+ 7cee5ecb8a2abe99ad7cd4430aee8013ed2d8d31
synapse-secrets-externally-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf
synapse-secrets-in-helm-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d22790a71f25e589db0a3d4606b91f21ea34f9ec
+ 62471156c3b7ab2d63075428f3b6c0db85130ca4
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d22790a71f25e589db0a3d4606b91f21ea34f9ec
+ 62471156c3b7ab2d63075428f3b6c0db85130ca4
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55
synapse-worker-example-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dfe955107e412e0fac18df547d206fa15c2f0155
+ a107d6f6592f1be513dee855defcbed86f0091d2
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dfe955107e412e0fac18df547d206fa15c2f0155
+ a107d6f6592f1be513dee855defcbed86f0091d2
@@ StatefulSet/ess-ci/release-name-synapse-appservice - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-appservice - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-background - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-background - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-client-reader - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-client-reader - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-encryption - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-encryption - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-event-creator - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-event-creator - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-event-persist - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-event-persist - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-fed-inbound - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-fed-inbound - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-fed-reader - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-fed-reader - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-fed-sender - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-fed-sender - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-initial-sync - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-initial-sync - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-media-repo - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-media-repo - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-presence-write - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-presence-write - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-push-rules - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-push-rules - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-pusher - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-pusher - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-receipts-accnt - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-receipts-accnt - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-sliding-sync - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-sliding-sync - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-sso-login - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-sso-login - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-synchrotron - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-synchrotron - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-typing - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-typing - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-user-dir - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
@@ StatefulSet/ess-ci/release-name-synapse-user-dir - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a
well-known-synapse-mas-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e
well-known-synapse-values.yaml@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
report_stats: false
require_auth_for_profile_requests: true
+
+ federation_client_minimum_tls_version: '1.2'
@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec
|
gaelgatelement
approved these changes
Jul 8, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Implemented as an underride, so can be overridden by additional configuration. Just setting a more appropriate default