Skip to content

Conversation

benbz
Copy link
Member

@benbz benbz commented Jul 8, 2025

Implemented as an underride, so can be overridden by additional configuration. Just setting a more appropriate default

@benbz benbz requested a review from a team as a code owner July 8, 2025 13:10
@benbz benbz force-pushed the bbz/synapse-minimum-tls-version branch from de2607d to 430e906 Compare July 8, 2025 13:10
Copy link

github-actions bot commented Jul 8, 2025

dyff of changes in rendered templates of CI manifests

Full contents of manifests and dyffs are available in https://github.com/element-hq/ess-helm/actions/runs/16144194124/artifacts/3486173801

example-default-enabled-components-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e

matrix-authentication-service-synapse-syn2mas-dry-run-secrets-externally-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-syn2mas - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf

@@ Job/ess-ci/release-name-syn2mas - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf

matrix-authentication-service-synapse-syn2mas-dry-run-secrets-in-helm-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-syn2mas - metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55

@@ Job/ess-ci/release-name-syn2mas - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d22790a71f25e589db0a3d4606b91f21ea34f9ec
+ 62471156c3b7ab2d63075428f3b6c0db85130ca4

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d22790a71f25e589db0a3d4606b91f21ea34f9ec
+ 62471156c3b7ab2d63075428f3b6c0db85130ca4



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55

matrix-authentication-service-synapse-syn2mas-migrate-secrets-externally-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-syn2mas - metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f

@@ Job/ess-ci/release-name-syn2mas - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 336b89b2f858236b522c030dd0a9da0dc52ecb43
+ 4f6be2545a273c49433e816e3899111d05584a9f

matrix-authentication-service-synapse-syn2mas-migrate-secrets-in-helm-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-syn2mas - metadata.labels.k8s.element.io/synapse-config-hash @@
- a61678a3d8d9531f8d69f8ff7accbc8a315fbd80
+ ce9a32a580f36248432bab63e6136897ddd6cc9d

@@ Job/ess-ci/release-name-syn2mas - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- a61678a3d8d9531f8d69f8ff7accbc8a315fbd80
+ ce9a32a580f36248432bab63e6136897ddd6cc9d



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- a61678a3d8d9531f8d69f8ff7accbc8a315fbd80
+ ce9a32a580f36248432bab63e6136897ddd6cc9d

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- a61678a3d8d9531f8d69f8ff7accbc8a315fbd80
+ ce9a32a580f36248432bab63e6136897ddd6cc9d



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 53c7cb7842d1462ac62235026692c4861ab99e34
+ 2378aef743a6d6eec6a41fd3c10a21f8232b747b

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 53c7cb7842d1462ac62235026692c4861ab99e34
+ 2378aef743a6d6eec6a41fd3c10a21f8232b747b

pytest-matrix-authentication-service-syn2mas-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

pytest-matrix-authentication-service-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e

pytest-matrix-rtc-synapse-wellknown-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 346246755af07047475d9e34f058ac25a7738169
+ f26a2eac014acbbf93032482288d5007572b5a1b

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 346246755af07047475d9e34f058ac25a7738169
+ f26a2eac014acbbf93032482288d5007572b5a1b



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 346246755af07047475d9e34f058ac25a7738169
+ f26a2eac014acbbf93032482288d5007572b5a1b

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 346246755af07047475d9e34f058ac25a7738169
+ f26a2eac014acbbf93032482288d5007572b5a1b

pytest-synapse-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 67964794a25288400fa8a0feed6082ab4b3e9887
+ cf9baa7a56edb4efc322443f6983370b91d07478

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 67964794a25288400fa8a0feed6082ab4b3e9887
+ cf9baa7a56edb4efc322443f6983370b91d07478



@@ StatefulSet/ess-ci/release-name-synapse-event-persist - metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385

@@ StatefulSet/ess-ci/release-name-synapse-event-persist - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385



@@ StatefulSet/ess-ci/release-name-synapse-media-repo - metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385

@@ StatefulSet/ess-ci/release-name-synapse-media-repo - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385



@@ StatefulSet/ess-ci/release-name-synapse-sliding-sync - metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385

@@ StatefulSet/ess-ci/release-name-synapse-sliding-sync - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 2caacbcdfce835a5a81a2ede81f1b3592cd9a529
+ 6184a7175111af0640ee267b81afa9cb29ca8385

quick-setup-certificates-pg-external-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

quick-setup-certificates-pg-with-helm-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

quick-setup-external-cert-pg-external-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

quick-setup-external-cert-pg-with-helm-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

quick-setup-letsencrypt-pg-external-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

quick-setup-letsencrypt-pg-with-helm-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

quick-setup-wildcard-cert-pg-external-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dd5bc8065c55f0c4e7ac08ecc738dd558e4a412f
+ 8c845f3914080d8277da93f945723c0cd3ff5317

quick-setup-wildcard-cert-pg-with-helm-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'
  # The maximum allowed duration by which sent events can be delayed, as
  # per MSC4140.
  max_event_delay_duration: 24h
  
  
  [seven lines unchanged)]
  
    # This needs to match at least the heart-beat frequency plus a bit of headroom
    # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
    per_second: 1
    burst_count: 20



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 4f49c0ff4ceb0048c29ee51196de7aa25c38512d
+ 183e19941c695d72f53562ef43d0a02d0fc477ec

synapse-checkov-with-workers-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 3250963c3f925d3ccddafb476703e61de0ce38a1
+ e6b931aa82c7ef7eea8a7fc097de9a9cdf7a8f6f

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 3250963c3f925d3ccddafb476703e61de0ce38a1
+ e6b931aa82c7ef7eea8a7fc097de9a9cdf7a8f6f



@@ StatefulSet/ess-ci/release-name-synapse-appservice - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b

@@ StatefulSet/ess-ci/release-name-synapse-appservice - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b



@@ StatefulSet/ess-ci/release-name-synapse-client-reader - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b

@@ StatefulSet/ess-ci/release-name-synapse-client-reader - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b



@@ StatefulSet/ess-ci/release-name-synapse-event-persist - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b

@@ StatefulSet/ess-ci/release-name-synapse-event-persist - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b



@@ StatefulSet/ess-ci/release-name-synapse-fed-reader - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b

@@ StatefulSet/ess-ci/release-name-synapse-fed-reader - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 922bf3be9a83d6b92b4a79bfd200c979bdd5a162
+ 601057ceddcbac4a699cbbc11ba236de18a9780b

synapse-ingress-additional-paths-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

synapse-minimal-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

synapse-postgres-secrets-externally-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 1f490ad140b086a0469968959f7d7c16d23bbb8f
+ d193b7b6871d096cd93e7c0e8a2c5022a8c051bb

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 1f490ad140b086a0469968959f7d7c16d23bbb8f
+ d193b7b6871d096cd93e7c0e8a2c5022a8c051bb



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 1f490ad140b086a0469968959f7d7c16d23bbb8f
+ d193b7b6871d096cd93e7c0e8a2c5022a8c051bb

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 1f490ad140b086a0469968959f7d7c16d23bbb8f
+ d193b7b6871d096cd93e7c0e8a2c5022a8c051bb

synapse-postgres-secrets-in-helm-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 01f34ae1929c769282f65818e2656f36c971c549
+ 33aa517b50e1bc9943c7f14276b4051af6c2dec9

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 01f34ae1929c769282f65818e2656f36c971c549
+ 33aa517b50e1bc9943c7f14276b4051af6c2dec9



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 56dec5483e7759980b3f25960b977a1d8c8f57a5
+ 7cee5ecb8a2abe99ad7cd4430aee8013ed2d8d31

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 56dec5483e7759980b3f25960b977a1d8c8f57a5
+ 7cee5ecb8a2abe99ad7cd4430aee8013ed2d8d31

synapse-secrets-externally-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- daa23a5b4fe3958b6cad65a36ea0d26e80e27a9c
+ e88a5f07f78a6459e8c01d2c23d639390f20c7bf

synapse-secrets-in-helm-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d22790a71f25e589db0a3d4606b91f21ea34f9ec
+ 62471156c3b7ab2d63075428f3b6c0db85130ca4

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d22790a71f25e589db0a3d4606b91f21ea34f9ec
+ 62471156c3b7ab2d63075428f3b6c0db85130ca4



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- aeba4567fc4c80930aa1224678101ff955b2fc10
+ 00813e213028eeb9bb55639190ce997744d48c55

synapse-worker-example-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- dfe955107e412e0fac18df547d206fa15c2f0155
+ a107d6f6592f1be513dee855defcbed86f0091d2

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- dfe955107e412e0fac18df547d206fa15c2f0155
+ a107d6f6592f1be513dee855defcbed86f0091d2



@@ StatefulSet/ess-ci/release-name-synapse-appservice - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-appservice - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-background - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-background - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-client-reader - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-client-reader - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-encryption - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-encryption - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-event-creator - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-event-creator - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-event-persist - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-event-persist - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-fed-inbound - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-fed-inbound - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-fed-reader - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-fed-reader - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-fed-sender - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-fed-sender - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-initial-sync - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-initial-sync - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-media-repo - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-media-repo - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-presence-write - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-presence-write - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-push-rules - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-push-rules - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-pusher - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-pusher - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-receipts-accnt - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-receipts-accnt - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-sliding-sync - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-sliding-sync - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-sso-login - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-sso-login - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-synchrotron - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-synchrotron - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-typing - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-typing - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a



@@ StatefulSet/ess-ci/release-name-synapse-user-dir - metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

@@ StatefulSet/ess-ci/release-name-synapse-user-dir - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 39a68812877dadb18a6a9c12a89fd4182af8a180
+ 72250866b199c455398e6b731f7cf57255dc245a

well-known-synapse-mas-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- 568cfba0d4fac91cc80dabb4d638974f92a7341f
+ c071ffe8d3b1a6d42c470138a21141cf7b966f0e

well-known-synapse-values.yaml
@@ ConfigMap/ess-ci/release-name-synapse-hook - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ ConfigMap/ess-ci/release-name-synapse - data.01-homeserver-underrides.yaml @@
  report_stats: false
  
  require_auth_for_profile_requests: true
+ 
+ federation_client_minimum_tls_version: '1.2'



@@ Job/ess-ci/release-name-synapse-check-config - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

@@ Job/ess-ci/release-name-synapse-check-config - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec



@@ StatefulSet/ess-ci/release-name-synapse-main - metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

@@ StatefulSet/ess-ci/release-name-synapse-main - spec.template.metadata.labels.k8s.element.io/synapse-config-hash @@
- d1085b801803fab91258c1fe50d5ff682872fa08
+ 163f144a41c1367d4169337a581398d069fba4ec

@benbz benbz merged commit 9af63a3 into main Jul 8, 2025
67 checks passed
@benbz benbz deleted the bbz/synapse-minimum-tls-version branch July 8, 2025 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants