capacitor: fix for rbac, radarr,sabnzbd fix secret

kubernetes/apps/capacitor/capacitor/app/helmrelease.yaml

@@ -78,7 +78,7 @@ spec:
                 memory: 127Mi
 
     serviceAccount:
-      create: true
+      create: false
       name: capacitor
 
     service:

kubernetes/apps/capacitor/capacitor/app/kustomization.yaml

@@ -4,4 +4,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./helmrelease.yaml
-  # - ./rbac.yaml
+  - ./rbac.yaml

kubernetes/apps/capacitor/capacitor/app/rbac.yaml

@@ -1,48 +1,50 @@
----
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: capacitor
+  namespace: flux-system
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: capacitor
 rules:
-  - apiGroups:
+- apiGroups:
-      - networking.k8s.io
+    - networking.k8s.io
-      - apps
+    - apps
-      - ""
+    - ""
-    resources:
+  resources:
-      - pods
+    - pods
-      - pods/log
+    - pods/log
-      - ingresses
+    - ingresses
-      - deployments
+    - deployments
-      - services
+    - services
-      - secrets
+    - secrets
-      - events
+    - events
-      - configmaps
+    - configmaps
-    verbs:
+  verbs:
-      - get
+    - get
-      - watch
+    - watch
-      - list
+    - list
-  - apiGroups:
+- apiGroups:
-      - source.toolkit.fluxcd.io
+    - source.toolkit.fluxcd.io
-      - kustomize.toolkit.fluxcd.io
+    - kustomize.toolkit.fluxcd.io
-      - helm.toolkit.fluxcd.io
+    - helm.toolkit.fluxcd.io
-    resources:
+    - infra.contrib.fluxcd.io
-      - gitrepositories
+  resources:
-      - ocirepositories
+    - gitrepositories
-      - buckets
+    - ocirepositories
-      - helmrepositories
+    - buckets
-      - helmcharts
+    - helmrepositories
-      - kustomizations
+    - helmcharts
-      - helmreleases
+    - kustomizations
-    verbs:
+    - helmreleases
-      - get
+    - terraforms
-      - watch
+  verbs:
-      - list
+    - get
-      - patch # to allow force reconciling by adding an annotation
+    - watch
+    - list
+    - patch # to allow force reconciling by adding an annotation
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

kubernetes/apps/downloads/sabnzbd/app/externalsecret.yaml

@@ -3,7 +3,7 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: &name radarr
+  name: &name sabnzbd
 spec:
   target:
     name: *name