From 9f07d099c13f372dc284a82672f5cf25f8347529 Mon Sep 17 00:00:00 2001
From: fchinembiri <fchinembiri24@gmail.com>
Date: Tue, 2 Jun 2026 15:33:09 +0200
Subject: [PATCH] feat: setup Mattermost Calls and conferencing

---
 k8s/fix-ufw-ds-v2.yaml         |  3 +++
 k8s/nextgen/20-mattermost.yaml | 18 +++++++++++++++++-
 2 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/k8s/fix-ufw-ds-v2.yaml b/k8s/fix-ufw-ds-v2.yaml
index cde153a..40dc93a 100644
--- a/k8s/fix-ufw-ds-v2.yaml
+++ b/k8s/fix-ufw-ds-v2.yaml
@@ -16,6 +16,7 @@ spec:
       containers:
       - name: fix
         image: alpine
+        imagePullPolicy: IfNotPresent
         securityContext:
           privileged: true
         command: ["nsenter", "--target", "1", "--mount", "--uts", "--ipc", "--net", "--pid", "--", "sh", "-c"]
@@ -34,6 +35,7 @@ spec:
               ufw allow 80/tcp
               ufw allow 443/tcp
               ufw allow 8443/tcp
+              ufw allow 8443/udp
               ufw allow 10250/tcp
               ufw allow from 10.42.0.0/16
               ufw allow from 10.43.0.0/16
@@ -49,6 +51,7 @@ spec:
               firewall-cmd --permanent --add-port=80/tcp
               firewall-cmd --permanent --add-port=443/tcp
               firewall-cmd --permanent --add-port=8443/tcp
+              firewall-cmd --permanent --add-port=8443/udp
               firewall-cmd --permanent --add-port=10250/tcp
               firewall-cmd --permanent --add-source=10.42.0.0/16
               firewall-cmd --permanent --add-source=10.43.0.0/16
diff --git a/k8s/nextgen/20-mattermost.yaml b/k8s/nextgen/20-mattermost.yaml
index 0af6590..ec1528d 100644
--- a/k8s/nextgen/20-mattermost.yaml
+++ b/k8s/nextgen/20-mattermost.yaml
@@ -19,8 +19,13 @@ spec:
   selector:
     app: mattermost
   ports:
-    - port: 8065
+    - name: http
+      port: 8065
       targetPort: 8065
+    - name: calls
+      port: 8443
+      targetPort: 8443
+      protocol: UDP
   type: ClusterIP
 ---
 apiVersion: v1
@@ -109,8 +114,19 @@ spec:
               value: "https://chat.techarvest.co.zw"
             - name: MM_PLUGINSETTINGS_ENABLEUPLOADS
               value: "true"
+            - name: MM_PLUGINSETTINGS_PLUGINSTATES
+              value: '{"com.mattermost.calls":{"Enable":true}}'
+            - name: MM_PLUGINSETTINGS_PLUGINS_COM.MATTERMOST.CALLS_UDPLISTENADDRESS
+              value: ":8443"
+            - name: MM_PLUGINSETTINGS_PLUGINS_COM.MATTERMOST.CALLS_ICEHOSTOVERRIDE
+              value: "167.86.68.48"
+            - name: MM_PLUGINSETTINGS_PLUGINS_COM.MATTERMOST.CALLS_ALLOWSESSIONNATIVE
+              value: "true"
           ports:
             - containerPort: 8065
+            - containerPort: 8443
+              protocol: UDP
+              hostPort: 8443
           volumeMounts:
             - name: mattermost-plugins
               mountPath: /mattermost/plugins