iac/kubernetes/apps/arr/maintainerr/app/helmrelease.yaml at 8876afa7dc6fa693ed0f13987e96c66fe1c645e3 · Mafyuh/iac · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
---
# yaml-language-server: $schema=https://schemas.mafyuh.dev/helm.toolkit.fluxcd.io/helmrelease_v2.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: &app maintainerr
  namespace: arr
spec:
  interval: 15m
  chartRef:
    kind: OCIRepository
    name: maintainerr
  values:
    global:
      fullnameOverride: *app
      namespace: arr

    controllers:
      maintainerr:
        enabled: true
        type: deployment

        replicas: 1

        pod:
          securityContext:
            runAsUser: 1000
            runAsGroup: &group 1000
            fsGroup: *group
            fsGroupChangePolicy: "OnRootMismatch"

        containers:
          app:
            image:
              repository: ghcr.io/maintainerr/maintainerr
              tag: 3.13.0
              pullPolicy: IfNotPresent
            env:
              TZ: "America/New_York"
            probes:
              liveness:
                enabled: false

            securityContext:
              allowPrivilegeEscalation: false
              capabilities:
                drop:
                  - ALL

            resources:
              requests:
                cpu: 25m
                memory: 150Mi
              limits:
                memory: 512Mi

    service:
      app:
        primary: true
        controller: maintainerr
        ports:
          http:
            port: &port 6246

    route:
      internal:
        enabled: true
        kind: HTTPRoute
        hostnames: ["{{ .Release.Name }}.local.mafyuh.dev"]
        rules:
          - matches:
              - path:
                  type: PathPrefix
                  value: /
            backendRefs:
              - name: maintainerr
                port: *port
        parentRefs:
          - name: envoy-internal
            namespace: kube-system
            sectionName: https

    persistence:
      data:
        enabled: true
        type: persistentVolumeClaim
        accessMode: ReadWriteOnce
        size: 2Gi
        storageClass: ceph-block
        globalMounts:
          - path: /opt/data