Skip to content

Commit cf03440

Browse files
MafyuhMafyuh
committedFeb 18, 2025
test migrate radarr to helm
1 parent 12f171e commit cf03440

17 files changed

+195
-138
lines changed
 

‎kubernetes/apps/production/arr/radarr/deployment.yaml

-59
This file was deleted.

‎kubernetes/apps/production/arr/radarr/helmrelease.yaml

+116
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,116 @@
1+
apiVersion: helm.toolkit.fluxcd.io/v2
2+
kind: HelmRelease
3+
metadata:
4+
name: &app radarr
5+
namespace: arr
6+
spec:
7+
interval: 15m
8+
chart:
9+
spec:
10+
chart: app-template
11+
version: 3.7.1
12+
interval: 30m
13+
sourceRef:
14+
kind: HelmRepository
15+
name: bjw-s
16+
namespace: flux-system
17+
18+
install:
19+
remediation:
20+
retries: 3
21+
upgrade:
22+
remediation:
23+
retries: 3
24+
25+
values:
26+
global:
27+
fullnameOverride: *app
28+
namespace: arr
29+
30+
controllers:
31+
radarr:
32+
enabled: true
33+
type: statefulset
34+
35+
replicas: 1
36+
37+
statefulset:
38+
volumeClaimTemplates:
39+
- name: config
40+
accessMode: ReadWriteMany
41+
size: 3Gi
42+
storageClass: longhorn
43+
globalMounts:
44+
- path: /config
45+
46+
pod:
47+
securityContext:
48+
runAsUser: 65534
49+
runAsGroup: &group 65534
50+
fsGroup: *group
51+
fsGroupChangePolicy: "OnRootMismatch"
52+
53+
containers:
54+
app:
55+
image:
56+
repository: ghcr.io/onedr0p/radarr
57+
tag: 5.18.4.9674
58+
pullPolicy: IfNotPresent
59+
env:
60+
TZ: "${TZ}"
61+
RADARR__INSTANCE_NAME: *app
62+
RADARR__PORT: &port 7878
63+
RADARR__APPLICATION_URL: "https://radarr.${LOCAL_DOMAIN}"
64+
RADARR__THEME: dark
65+
RADARR__LOG_LEVEL: info
66+
67+
probes:
68+
liveness:
69+
enabled: false
70+
71+
securityContext:
72+
allowPrivilegeEscalation: false
73+
capabilities:
74+
drop:
75+
- ALL
76+
77+
resources:
78+
requests:
79+
cpu: 50m
80+
memory: 200Mi
81+
limits:
82+
memory: 400Mi
83+
84+
service:
85+
app:
86+
primary: true
87+
controller: radarr
88+
ports:
89+
http:
90+
port: *port
91+
92+
ingress:
93+
internal:
94+
enabled: true
95+
className: nginx
96+
hosts:
97+
- host: "radarr.${LOCAL_DOMAIN}"
98+
paths:
99+
- path: /
100+
pathType: Prefix
101+
service:
102+
identifier: app
103+
port: http
104+
tls:
105+
- hosts:
106+
- "radarr.${LOCAL_DOMAIN}"
107+
secretName: local-mafyuh-dev-production-tls
108+
109+
persistence:
110+
data:
111+
enabled: true
112+
type: nfs
113+
server: "${NAS_IP}"
114+
path: /mnt/thePool/thePoolShare
115+
globalMounts:
116+
- path: /data

‎kubernetes/apps/production/arr/radarr/ingress.yaml

-22
This file was deleted.

‎kubernetes/apps/production/arr/radarr/kustomization.yaml

+1-3
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,4 @@
11
apiVersion: kustomize.config.k8s.io/v1beta1
22
kind: Kustomization
33
resources:
4-
- deployment.yaml
5-
- service.yaml
6-
- ingress.yaml
4+
- helmrelease.yaml

‎kubernetes/apps/production/arr/radarr/service.yaml

-13
This file was deleted.

‎kubernetes/apps/production/cert-manager/issuers/secret-cf-token.yaml

+8-8
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
namespace: cert-manager
66
type: Opaque
77
stringData:
8-
cloudflare-token: ENC[AES256_GCM,data:QDWamL3h0NLZzezOq5Sxo64K+7nivtl2pmpCbWk6rUFzKXJR7ym6Mg==,iv:Uf6v8dHRvx7dFs9ES5e+YWIo12WtrrXqK1xJ8z/gOO4=,tag:6undZMM8eDXXRp12cRX+dA==,type:str]
8+
cloudflare-token: ENC[AES256_GCM,data:9I2VZBJrnat4TZ50fEVGS+N2ba6OVUvJWodhZhHCMMQm3scJ9Rqgvg==,iv:u3yKtpXWObitpJ92Brd9VceIAjgCaXQ92J/VIgrN7SE=,tag:iJEGLae7Uvj+5PtkmKfYkw==,type:str]
99
sops:
1010
kms: []
1111
gcp_kms: []
@@ -15,14 +15,14 @@ sops:
1515
- recipient: age18z6wevr8ze5azvq7nfty3l29s7887l8n5mefr64avhlthtr4uvnqw90nfs
1616
enc: |
1717
-----BEGIN AGE ENCRYPTED FILE-----
18-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjRzV5Sy80OGJGQXRiNkND
19-
azlFZG1CNllYbG5kQ0VHRXNhbjdRcEN6TUU0Ckc2RjMza2laWS9Zb21tNmE0eUw3
20-
RG9SclYrWEFxYWs2ck95VWQ3MlJDUlEKLS0tIDg0dXYxZUFlUTNiQ2VWUElIdU1J
21-
ajRYUzRGREhIenNjdnlwMmtvVCthTHMKI74UwAsVX1QKQSez4E+Ks9VAF2QwbRDa
22-
rO/PdBYJK+MwCptCEiinxaSc5BDAyE0wYiC6Tmldz6ZHYTv1ADe21Q==
18+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArSTBHMlNiaU1qMDdqdUtB
19+
UkF4QmxwYURFWHVqeW1VRE4reXRGQVNzS25rCnlzOFNFUFprUzJET0Q2ZktkM3ZT
20+
NHFYeFpKMW9Za2V5dGZ1NFRHeCt4azgKLS0tIFpIM3I3bmgyQ25nUUZCVWh0ZDd1
21+
cWpzK3FuTC9McXdMUERvSUtVVzE0KzAKmU4J3YzOr5Xcr8eGtMoUJIT87biX/pkh
22+
IHrrhcfYWr2JZY5BqC1AK6EN3+uNFqrKIs7MrV0Ogb5X02BP/9D77w==
2323
-----END AGE ENCRYPTED FILE-----
24-
lastmodified: "2025-02-08T18:43:20Z"
25-
mac: ENC[AES256_GCM,data:fuTN6KncxLvzw7o3ENVYKCIcmxDDbvOeIyfn/H1M5rtw3C8WiRnuz4XviYTh2y6EHv9FGEOI5RiRmtEtqiux7xn81DBobmAdgl/RFsrMsKus0SVpGn4PmZYfO/8R9xknyX93fbYicnahYpM3aHvwQx1njK64ywN+Hp0U+PZfMoQ=,iv:4EgN+gBOwkNty9uPSb1/wDOKTEHUUEtkeDEJDkB2/EE=,tag:Meb79CBfm3tot4vKf1OOmg==,type:str]
24+
lastmodified: "2025-02-18T02:56:04Z"
25+
mac: ENC[AES256_GCM,data:InOhXZOhW9mkXv7pYOxihCDbdswQyuC6g5xzb/0dBhq+j4tRz6MUGMyducc3WiPybMaCsBi7X50tOrcRhe4CyH//nr6N8xKaKhxQYgxt47QOakHhGPtNvyBCw4au21KF34ZIEN0jRKVryCYj2X3WD3tNT9jFn4FfgLUx6xx9WYg=,iv:FtkgRp7Ib5DLib0y617mdeVy/EHWKKNcG18wbR/lAdM=,tag:i+TFxjplYuRT1ZhqXfXeBw==,type:str]
2626
pgp: []
2727
encrypted_regex: ^(data|stringData)$
2828
version: 3.9.4

‎kubernetes/cluster/production/charts/bjw-s-chart.yaml

+10
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
apiVersion: source.toolkit.fluxcd.io/v1
3+
kind: HelmRepository
4+
metadata:
5+
name: bjw-s
6+
namespace: flux-system
7+
spec:
8+
interval: 30m
9+
url: https://bjw-s.github.io/helm-charts
10+
timeout: 3m

‎kubernetes/secrets/kustomization.yaml renamed to ‎kubernetes/cluster/production/charts/kustomization.yaml

+1-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,4 @@
11
apiVersion: kustomize.config.k8s.io/v1beta1
22
kind: Kustomization
33
resources:
4-
- flux.yaml
5-
- qbitty-secrets.yaml
4+
- bjw-s-chart.yaml

‎kubernetes/cluster/production/config/cluster-config.yaml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
apiVersion: v1
2+
kind: ConfigMap
3+
metadata:
4+
name: cluster-config
5+
namespace: flux-system
6+
data:
7+
TZ: "America/New_York"

‎kubernetes/cluster/production/config/cluster-secrets.yaml

+29
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: cluster-secrets
5+
namespace: flux-system
6+
data:
7+
PUBLIC_DOMAIN: ENC[AES256_GCM,data:M+nn0P7olNwEyc+3XUM37g==,iv:EHupf7+9evYWrJZNFGe/I0sgcocs0UnU2j5gcCsoMqs=,tag:9N7R8sgfA5y/ePoD/tepFw==,type:str]
8+
LOCAL_DOMAIN: ENC[AES256_GCM,data:7ljyWJK8kOADFW5/uk9aNaRf7dnoTSqU,iv:ppr7vv8W2EfnF3b5rYBSXND/qNdQwZPEIMjAgae81+A=,tag:s7wybl3msr0RMyAAEej2jA==,type:str]
9+
NAS_IP: ENC[AES256_GCM,data:z04M4Xe8lekw4zEqB6a2YQ==,iv:Qwgy94CR+jBvhCTOPa4dxxai0cidGt9BnSReUwedol8=,tag:Qnm/pxGTdMUUE59aOqObOg==,type:str]
10+
sops:
11+
kms: []
12+
gcp_kms: []
13+
azure_kv: []
14+
hc_vault: []
15+
age:
16+
- recipient: age18z6wevr8ze5azvq7nfty3l29s7887l8n5mefr64avhlthtr4uvnqw90nfs
17+
enc: |
18+
-----BEGIN AGE ENCRYPTED FILE-----
19+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUWmVDYWFUM2g1Z3A4L09y
20+
VlJGNVNIb0o5ZkoyMXRLMFVDVjNtbllIVWhjClRaaDNPblI3amNSTjFXSmtJZ1kz
21+
dVRqa05yZnJhblFaUW1IbnB5RXMyMzAKLS0tIGtyMnV4ZXlWclBRa1UrVkNPV0dh
22+
UnJqT1FORU5SaGNTK0Y3V3RYMlRjeEkKQOfr3ruilfkb8lfuWrQaeB44b9nf+TSq
23+
QgvmCElVNleZ369lr92ZfNQXgIehuVQku3h8xElXtL0SyZmRrbKneg==
24+
-----END AGE ENCRYPTED FILE-----
25+
lastmodified: "2025-02-18T03:04:17Z"
26+
mac: ENC[AES256_GCM,data:kwxezyC/r2vsbCXAU6yGAjpzOQHuQZQvRDAl53ZT59DP9+P3rL+eRG6mpKPuack1TvlcQddUgFEMXxoilPcpiZpG967fLQlBIN+e61bGBsHiHT7zHcnudi33ZruAG1E/Fsx3qk/aQBak+C2j9JzuaApaDWx8Oboxkm4/Ks+wHI8=,iv:hOdZy2E3JmWX82jJAl8XalI4FaCVHfxBMWg7R2liWeA=,tag:on3NuJJTxp1+SEKsSnGYgA==,type:str]
27+
pgp: []
28+
encrypted_regex: ^(data|stringData)$
29+
version: 3.9.4

‎kubernetes/cluster/production/config/kustomization.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
resources:
4+
- cluster-config.yaml
5+
- qbitty-secrets.yaml
6+
- cluster-secrets.yaml

‎kubernetes/cluster/production/flux-system/apps.yaml

+3-1
Original file line numberDiff line numberDiff line change
@@ -17,4 +17,6 @@ spec:
1717
postBuild:
1818
substituteFrom:
1919
- kind: ConfigMap
20-
name: cluster-config
20+
name: cluster-config
21+
- kind: Secret
22+
name: cluster-secrets

‎kubernetes/cluster/production/flux-system/secrets.yaml

+7-1
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ metadata:
55
namespace: flux-system
66
spec:
77
interval: 5m
8-
path: "./kubernetes/secrets"
8+
path: "./kubernetes/cluster/production/config"
99
sourceRef:
1010
kind: GitRepository
1111
name: flux-system
@@ -14,3 +14,9 @@ spec:
1414
secretRef:
1515
name: sops-age
1616
prune: true
17+
postBuild:
18+
substituteFrom:
19+
- kind: ConfigMap
20+
name: cluster-config
21+
- kind: Secret
22+
name: cluster-secrets

‎kubernetes/cluster/production/kustomization.yaml

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
resources:
4+
- charts/
5+
- config/
6+
- flux-system/

‎kubernetes/kustomization.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -2,4 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
22
kind: Kustomization
33
resources:
44
- apps/
5-
- cluster/production/flux-system/
5+
- cluster/production/

‎kubernetes/secrets/flux.yaml

-28
This file was deleted.

0 commit comments

Comments
 (0)
Please sign in to comment.