iac/kubernetes/apps/suggestarr/helm-release.yml at e77064341c8a62bd1e775fdb1339c17ecafc27e5 · chkpwd/iac · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s-labs/helm-charts/common-4.5.0/charts/library/common/values.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: suggestarr
spec:
  interval: 1h
  chart:
    spec:
      chart: app-template
      version: 5.0.1
      interval: 30m
      sourceRef:
        kind: HelmRepository
        name: bjw-s-labs
        namespace: flux-system
  values:
    controllers:
      suggestarr:
        type: statefulset
        annotations:
          reloader.stakater.com/auto: "true"
        replicas: 1
        statefulset:
          volumeClaimTemplates:
            - name: config
              accessMode: ReadWriteOnce
              size: "${VOLSYNC_CAPACITY}"
              storageClass: ceph-block
              dataSourceRef:
                kind: ReplicationDestination
                apiGroup: volsync.backube
                name: "${APP}"
              globalMounts:
                - path: /app/config/config_files
        pod:
          securityContext:
            runAsUser: 1999
            runAsGroup: &group 1999
            fsGroup: *group
            fsGroupChangePolicy: "OnRootMismatch"
        containers:
          app:
            image:
              repository: docker.io/ciuse99/suggestarr
              tag: v2.12.0
              pullPolicy: IfNotPresent
            env:
              TZ: "America/New_York"
              PYTHONDONTWRITEBYTECODE: "1"
            probes:
              liveness:
                enabled: true
                custom: true
                spec:
                  httpGet:
                    path: /api/health/live
                    port: &port 5000
                  initialDelaySeconds: 10
                  periodSeconds: 10
                  timeoutSeconds: 1
                  failureThreshold: 3
              readiness:
                enabled: true
                custom: true
                spec:
                  httpGet:
                    path: /api/health/live
                    port: *port
                  initialDelaySeconds: 10
                  periodSeconds: 10
                  timeoutSeconds: 1
                  failureThreshold: 3
              startup:
                enabled: false
            securityContext:
              allowPrivilegeEscalation: false
              readOnlyRootFilesystem: true
              capabilities:
                drop:
                  - ALL
            resources:
              requests:
                cpu: 50m
                memory: 500Mi
              limits:
                memory: 1Gi
    service:
      app:
        controller: suggestarr
        ports:
          http:
            port: *port
    rawResources:
      ciliumnetworkpolicy:
        forceRename: suggestarr
        manifest:
          apiVersion: cilium.io/v2
          kind: CiliumNetworkPolicy
          spec:
            endpointSelector:
              matchLabels:
                app.kubernetes.io/name: suggestarr
                app.kubernetes.io/instance: suggestarr
            ingress:
              - fromEndpoints:
                  - matchLabels:
                      k8s:io.kubernetes.pod.namespace: networking
                      gateway.networking.k8s.io/gateway-name: private
                toPorts:
                  - ports:
                      - port: "5000"
                        protocol: TCP
              - fromEndpoints:
                  - matchLabels:
                      k8s:io.kubernetes.pod.namespace: media
                      app.kubernetes.io/name: jellyfin
                  - matchLabels:
                      k8s:io.kubernetes.pod.namespace: media
                      app.kubernetes.io/name: seerr
            egress:
              - toEndpoints:
                  - matchLabels:
                      k8s:io.kubernetes.pod.namespace: media
                      app.kubernetes.io/name: jellyfin
              - toEndpoints:
                  - matchLabels:
                      k8s:io.kubernetes.pod.namespace: media
                      app.kubernetes.io/name: seerr
    route:
      private:
        kind: HTTPRoute
        hostnames: ["{{ .Release.Name }}.chkpwd.com"]
        parentRefs:
          - name: private
            namespace: networking
            sectionName: https
    persistence:
      tmp:
        type: emptyDir
        globalMounts:
          - path: /tmp