From 910b9d43d2b41d5c8fbadd304d2bc818495ff2c0 Mon Sep 17 00:00:00 2001 From: Daren Lord Date: Tue, 19 Nov 2024 22:25:40 +0000 Subject: [PATCH] postgres-cluster --- ...hedulebackup.yaml => scheduledbackup.yaml} | 0 .../downloads/cifs-pvcs/kustomization.yaml | 13 ++ kubernetes/apps/downloads/ks.yaml | 23 +++ kubernetes/apps/downloads/kustomization.yaml | 23 +++ kubernetes/apps/downloads/namespace.yaml | 11 ++ .../downloads/radarr/app/externalsecret.yaml | 67 +++++++++ .../downloads/radarr/app/helmrelease.yaml | 136 ++++++++++++++++++ .../downloads/radarr/app/kustomization.yaml | 9 ++ kubernetes/apps/downloads/radarr/ks.yaml | 27 ++++ 9 files changed, 309 insertions(+) rename kubernetes/apps/databases/cloudnative-pg/cluster/{schedulebackup.yaml => scheduledbackup.yaml} (100%) create mode 100644 kubernetes/apps/downloads/cifs-pvcs/kustomization.yaml create mode 100644 kubernetes/apps/downloads/ks.yaml create mode 100644 kubernetes/apps/downloads/kustomization.yaml create mode 100644 kubernetes/apps/downloads/namespace.yaml create mode 100644 kubernetes/apps/downloads/radarr/app/externalsecret.yaml create mode 100644 kubernetes/apps/downloads/radarr/app/helmrelease.yaml create mode 100644 kubernetes/apps/downloads/radarr/app/kustomization.yaml create mode 100644 kubernetes/apps/downloads/radarr/ks.yaml diff --git a/kubernetes/apps/databases/cloudnative-pg/cluster/schedulebackup.yaml b/kubernetes/apps/databases/cloudnative-pg/cluster/scheduledbackup.yaml similarity index 100% rename from kubernetes/apps/databases/cloudnative-pg/cluster/schedulebackup.yaml rename to kubernetes/apps/databases/cloudnative-pg/cluster/scheduledbackup.yaml diff --git a/kubernetes/apps/downloads/cifs-pvcs/kustomization.yaml b/kubernetes/apps/downloads/cifs-pvcs/kustomization.yaml new file mode 100644 index 00000000..d32b67bd --- /dev/null +++ b/kubernetes/apps/downloads/cifs-pvcs/kustomization.yaml @@ -0,0 +1,13 @@ +--- +# yaml-language-server: $schema=https://json.schemastore.org/kustomization +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../../../templates/csi-driver-smb/claims/cifs-appdata.yaml + # - ../../../templates/csi-driver-smb/claims/cifs-books.yaml + - ../../../templates/csi-driver-smb/claims/cifs-downloads.yaml + # - ../../../templates/csi-driver-smb/claims/cifs-games.yaml + # - ../../../templates/csi-driver-smb/claims/cifs-misc.yaml + - ../../../templates/csi-driver-smb/claims/cifs-movies.yaml + # - ../../../templates/csi-driver-smb/claims/cifs-music.yaml + - ../../../templates/csi-driver-smb/claims/cifs-tv.yaml diff --git a/kubernetes/apps/downloads/ks.yaml b/kubernetes/apps/downloads/ks.yaml new file mode 100644 index 00000000..42344e30 --- /dev/null +++ b/kubernetes/apps/downloads/ks.yaml @@ -0,0 +1,23 @@ +--- +# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: &app downloads-cifs-pvcs + namespace: flux-system +spec: + targetNamespace: downloads + commonMetadata: + labels: + app.kubernetes.io/name: *app + dependsOn: + - name: csi-driver-smb + path: ./kubernetes/apps/downloaders/cifs-pvcs + prune: true + sourceRef: + kind: GitRepository + name: home-kubernetes + wait: false + interval: 30m + retryInterval: 1m + timeout: 5m diff --git a/kubernetes/apps/downloads/kustomization.yaml b/kubernetes/apps/downloads/kustomization.yaml new file mode 100644 index 00000000..ee67fa03 --- /dev/null +++ b/kubernetes/apps/downloads/kustomization.yaml @@ -0,0 +1,23 @@ +--- +# yaml-language-server: $schema=https://json.schemastore.org/kustomization +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ./namespace.yaml + - ./ks.yaml + # - ./flaresolverr/ks.yaml + # - ./flood/ks.yaml + # - ./lidarr/ks.yaml + # - ./prowlarr/ks.yaml + - ./radarr/ks.yaml + # - ./readarr/ks.yaml + # - ./sabnzbd/ks.yaml + # - ./sonarr/ks.yaml +# - ./unpackerr/ks.yaml +# configMapGenerator: +# - name: authelia-ingress-hv +# namespace: downloads +# files: +# - values.yaml=../security/authelia/app/resources/authelia-ingress-hv.yaml +generatorOptions: + disableNameSuffixHash: true diff --git a/kubernetes/apps/downloads/namespace.yaml b/kubernetes/apps/downloads/namespace.yaml new file mode 100644 index 00000000..50827b01 --- /dev/null +++ b/kubernetes/apps/downloads/namespace.yaml @@ -0,0 +1,11 @@ +--- +# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/namespace-v1.json +apiVersion: v1 +kind: Namespace +metadata: + name: downloads + labels: + kustomize.toolkit.fluxcd.io/prune: disabled + vpn-routed-gateway: "true" + annotations: + volsync.backube/privileged-movers: "true" diff --git a/kubernetes/apps/downloads/radarr/app/externalsecret.yaml b/kubernetes/apps/downloads/radarr/app/externalsecret.yaml new file mode 100644 index 00000000..1767bf22 --- /dev/null +++ b/kubernetes/apps/downloads/radarr/app/externalsecret.yaml @@ -0,0 +1,67 @@ +--- +# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: &name radarr +spec: + target: + name: *name + deletionPolicy: Delete + template: + type: Opaque + data: + # App + RADARR__AUTH__APIKEY: "{{ .RADARR_API_KEY }}" + RADARR__POSTGRES__HOST: &dbHost postgres-rw.databases.svc.cluster.local + RADARR__POSTGRES__PORT: "5432" + RADARR__POSTGRES__USER: &dbUser "{{ .RADARR_POSTGRES_USER }}" + RADARR__POSTGRES__PASSWORD: &dbPass "{{ .RADARR_POSTGRES_PASSWORD }}" + RADARR__POSTGRES__MAINDB: &dbName radarr_main + # Postgres Init + INIT_POSTGRES_DBNAME: *dbName + INIT_POSTGRES_HOST: *dbHost + INIT_POSTGRES_USER: *dbUser + INIT_POSTGRES_PASS: *dbPass + INIT_POSTGRES_SUPER_PASS: "{{ .POSTGRES_ADMIN_PASS }}" + data: + - secretKey: RADARR_API_KEY + sourceRef: + storeRef: + name: bitwarden-login + kind: ClusterSecretStore + remoteRef: + key: &secretApiKey 093af32f-2565-4807-9574-6b6a886a4e03 + property: password + - secretKey: RADARR_POSTGRES_USER + sourceRef: + storeRef: + name: bitwarden-login + kind: ClusterSecretStore + remoteRef: + key: &secretDatabaseKey b99de2a6-f2b4-42c5-8852-87038e6c48fe + property: username + - secretKey: RADARR_POSTGRES_USER + sourceRef: + storeRef: + name: bitwarden-login + kind: ClusterSecretStore + remoteRef: + key: *secretDatabaseKey + property: username + - secretKey: POSTGRES_ADMIN_USER + sourceRef: + storeRef: + name: bitwarden-login + kind: ClusterSecretStore + remoteRef: + key: &secretAdminDatabaseKey 88217883-df53-4c96-aad7-f3b2142382de + property: username + - secretKey: POSTGRES_ADMIN_PASS + sourceRef: + storeRef: + name: bitwarden-login + kind: ClusterSecretStore + remoteRef: + key: *secretAdminDatabaseKey + property: password diff --git a/kubernetes/apps/downloads/radarr/app/helmrelease.yaml b/kubernetes/apps/downloads/radarr/app/helmrelease.yaml new file mode 100644 index 00000000..8f87bab4 --- /dev/null +++ b/kubernetes/apps/downloads/radarr/app/helmrelease.yaml @@ -0,0 +1,136 @@ +--- +# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/helm.toolkit.fluxcd.io/helmrelease_v2.json +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: &app radarr +spec: + interval: 30m + chart: + spec: + chart: app-template + version: 3.5.1 + sourceRef: + kind: HelmRepository + name: bjw-s + namespace: flux-system + install: + remediation: + retries: 3 + upgrade: + cleanupOnFail: true + remediation: + strategy: rollback + retries: 3 + valuesFrom: + - kind: ConfigMap + name: authelia-ingress-hv + values: + controllers: + radarr: + annotations: + reloader.stakater.com/auto: "true" + initContainers: + init-db: + image: + repository: ghcr.io/onedr0p/postgres-init + tag: 16.4@sha256:e41c745b54485341e00efbd27556f0717623a119f0d5107e5ff831aa1322c76f + envFrom: &envFrom + - secretRef: + name: *app + containers: + app: + image: + repository: ghcr.io/onedr0p/radarr-develop + tag: 5.15.0.9412@sha256:3d922f5f80935c1aadbe49597cb4cd509e2890ca0c01d6778ac54825012fdde4 + env: + TZ: "${TIMEZONE}" + RADARR__APP__INSTANCENAME: Radarr + RADARR__APP__THEME: dark + RADARR__AUTH__METHOD: External + RADARR__AUTH__REQUIRED: DisabledForLocalAddresses + RADARR__LOG__DBENABLED: "False" + RADARR__LOG__LEVEL: info + RADARR__SERVER__PORT: &port 80 + RADARR__UPDATE__BRANCH: develop + envFrom: *envFrom + probes: + liveness: &probes + enabled: true + custom: true + spec: + httpGet: + path: /ping + port: *port + initialDelaySeconds: 0 + periodSeconds: 10 + timeoutSeconds: 3 + failureThreshold: 5 + readiness: *probes + startup: + enabled: false + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + capabilities: { drop: ["ALL"] } + resources: + requests: + cpu: 10m + memory: 256M + limits: + memory: 4Gi + defaultPodOptions: + securityContext: + runAsNonRoot: true + runAsUser: 568 + runAsGroup: 568 + fsGroup: 568 + fsGroupChangePolicy: OnRootMismatch + seccompProfile: { type: RuntimeDefault } + service: + app: + controller: *app + ports: + http: + port: *port + ingress: + app: + className: internal + annotations: + external-dns.alpha.kubernetes.io/target: internal.${SECRET_INTERNAL_DOMAIN} + gethomepage.dev/enabled: "true" + gethomepage.dev/group: Downloads + gethomepage.dev/name: Radarr + gethomepage.dev/icon: radarr.png + gethomepage.dev/description: Movie Downloads + gethomepage.dev/widget.type: radarr + gethomepage.dev/widget.url: http://radarr.downloads + gethomepage.dev/widget.key: "{{ `{{HOMEPAGE_VAR_RADARR_TOKEN}}` }}" + nginx.ingress.kubernetes.io/configuration-snippet: ${THEME_PARK_SNIPPET} + hosts: + - host: "{{ .Release.Name }}.${SECRET_DOMAIN}" + paths: + - path: / + service: + identifier: app + port: http + persistence: + config: + existingClaim: radarr-config + tmp: + type: emptyDir + media: + existingClaim: cifs-movies + globalMounts: + - path: /media/movies + downloads: + existingClaim: cifs-downloads + advancedMounts: + radarr: + app: + - path: /downloads/downloaded_movies + readOnly: false + subPath: sabnzbd/downloaded_movies + - path: /downloads/movies-radarr + readOnly: false + subPath: flood/movies-radarr diff --git a/kubernetes/apps/downloads/radarr/app/kustomization.yaml b/kubernetes/apps/downloads/radarr/app/kustomization.yaml new file mode 100644 index 00000000..167417bf --- /dev/null +++ b/kubernetes/apps/downloads/radarr/app/kustomization.yaml @@ -0,0 +1,9 @@ +--- +# yaml-language-server: $schema=https://json.schemastore.org/kustomization +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../../../../templates/volsync + - ./externalsecret.yaml + - ./helmrelease.yaml + - ../../../../templates/gatus/guarded diff --git a/kubernetes/apps/downloads/radarr/ks.yaml b/kubernetes/apps/downloads/radarr/ks.yaml new file mode 100644 index 00000000..62d3a75f --- /dev/null +++ b/kubernetes/apps/downloads/radarr/ks.yaml @@ -0,0 +1,27 @@ +--- +# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json +apiVersion: kustomize.toolkit.fluxcd.io/v1 +kind: Kustomization +metadata: + name: &app radarr + namespace: flux-system +spec: + targetNamespace: downloads + commonMetadata: + labels: + app.kubernetes.io/name: *app + dependsOn: + - name: cloudnative-pg-cluster + - name: downloads-cifs-pvcs + path: ./kubernetes/apps/downloads/radarr/app + prune: true + sourceRef: + kind: GitRepository + name: home-kubernetes + wait: false + interval: 30m + retryInterval: 1m + timeout: 5m + postBuild: + substitute: + APP: *app