capacitor: fix for rbac, radarr,sabnzbd fix secret

kubernetes/apps/capacitor/capacitor/app/helmrelease.yaml

@@ -78,7 +78,7 @@ spec:
                 memory: 127Mi
 
     serviceAccount:
-      create: true
+      create: false
       name: capacitor
 
     service:

kubernetes/apps/capacitor/capacitor/app/kustomization.yaml

@@ -4,4 +4,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./helmrelease.yaml
-  # - ./rbac.yaml
+  - ./rbac.yaml

kubernetes/apps/capacitor/capacitor/app/rbac.yaml

@@ -1,15 +1,15 @@
----
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: capacitor
+  namespace: flux-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: capacitor
 rules:
-  - apiGroups:
+- apiGroups:
     - networking.k8s.io
     - apps
     - ""
@@ -26,10 +26,11 @@ rules:
     - get
     - watch
     - list
-  - apiGroups:
+- apiGroups:
     - source.toolkit.fluxcd.io
     - kustomize.toolkit.fluxcd.io
     - helm.toolkit.fluxcd.io
+    - infra.contrib.fluxcd.io
   resources:
     - gitrepositories
     - ocirepositories
@@ -38,6 +39,7 @@ rules:
     - helmcharts
     - kustomizations
     - helmreleases
+    - terraforms
   verbs:
     - get
     - watch

kubernetes/apps/downloads/sabnzbd/app/externalsecret.yaml

@@ -3,7 +3,7 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: &name radarr
+  name: &name sabnzbd
 spec:
   target:
     name: *name