Merge pull request 'feat(container): update image redis to v20.9.0' (#788) from renovate/redis-20.x into main

Reviewed-on: #788
2025-02-25 12:22:20 +00:00 · 2025-02-25 12:22:20 +00:00 · 9062a7b707
commit 9062a7b707
parent f68f14400d ffdd9d51d5
7 changed files with 270 additions and 1 deletions
--- a/kubernetes/main/apps/media/komf/app/configmap.yaml
+++ b/kubernetes/main/apps/media/komf/app/configmap.yaml
@ -0,0 +1,73 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: komf-config
+  namespace: default
+data:
+  application.yml: |
+    komga:
+      baseUri: "https://comics.${SECRET_NEW_DOMAIN}"
+      komgaUser: "komf@${SECRET_NEW_DOMAIN}"
+      # komgaPassword <- specified with KOMF_KOMGA_PASSWORD env var
+      eventListener:
+        metadataSeriesExcludeFilter: []
+      metadataUpdate:
+        library:
+          "0F1CMFTETE8ER":
+            libraryType: "MANGA"
+            postProcessing:
+              alternativeSeriesTitleLanguages:
+              - "jp"
+              - "en"
+              orderBooks: true
+              languageValue: "en"
+              scoreTagName: "score"
+          "0BH3FYR727XP3":
+            libraryType: "COMIC"
+            overrideExistingCovers: false
+            postProcessing:
+              alternativeSeriesTitleLanguages:
+              - "en"
+              orderBooks: true
+              readingDirectionValue: "LEFT_TO_RIGHT"
+              languageValue: "en"
+              scoreTagName: "score"
+    database:
+      file: "/config/database.sqlite"
+    metadataProviders:
+      malClientId: ""
+      # comicVineApiKey <- specified with KOMF_METADATA_PROVIDERS_COMIC_VINE_API_KEY env var
+      defaultProviders:
+        mangaUpdates:
+          priority: 1
+          enabled: true
+        mal:
+          priority: 20
+        nautiljon:
+          priority: 30
+        aniList:
+          priority: 40
+        yenPress:
+          priority: 50
+        kodansha:
+          priority: 2
+          enabled: true
+        viz:
+          priority: 3
+          enabled: true
+        bookWalker:
+          priority: 4
+          enabled: true
+        mangaDex:
+          priority: 5
+          enabled: true
+        bangumi:
+          priority: 100
+        comicVine:
+          priority: 6
+          enabled: true
+          mediaType: "COMIC"
+        hentag:
+          priority: 120
+    notifications:
+      templatesDirectory: "/config"
--- a/kubernetes/main/apps/media/komf/app/helm-release.yaml
+++ b/kubernetes/main/apps/media/komf/app/helm-release.yaml
@ -0,0 +1,86 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: komf
+spec:
+  interval: 5m
+  chart:
+    spec:
+      chart: app-template
+      version: 3.5.1
+      sourceRef:
+        kind: HelmRepository
+        name: bjws-charts
+        namespace: flux-system
+  values:
+    controllers:
+      komf:
+        containers:
+          app:
+            image:
+              repository: sndxr/komf
+              tag: 1.3.0
+            envFrom:
+            - secretRef:
+                name: komf-credentials
+            probes:
+              liveness: &probes
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /
+                    port: &port 8085
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+                  failureThreshold: 3
+              readiness: *probes
+              startup:
+                enabled: true
+                spec:
+                  failureThreshold: 30
+                  periodSeconds: 10
+            securityContext:
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+              capabilities: { drop: ["ALL"] }
+    defaultPodOptions:
+      securityContext:
+        runAsUser: 10000
+        runAsGroup: 10000
+        fsGroup: 10000
+        fsGroupChangePolicy: OnRootMismatch
+    service:
+      app:
+        controller: komf
+        ports:
+          http:
+            port: *port
+    ingress:
+      app:
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-production
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+          traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd
+        hosts:
+          - host: "komf.${SECRET_NEW_DOMAIN}"
+            paths:
+              - path: /
+                service:
+                  identifier: app
+                  port: http
+                  
+    persistence:
+      database:
+        existingClaim: komf
+        globalMounts:
+          - path: /config
+      config:
+        name: komf-config
+        type: configMap
+        defaultMode: 0777
+        globalMounts:
+        - path: /config/application.yml
+          subPath: application.yml
--- a/kubernetes/main/apps/media/komf/app/kustomization.yaml
+++ b/kubernetes/main/apps/media/komf/app/kustomization.yaml
@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../../../../../common/templates/volsync
+- ./secret.sops.yaml
+- ./configmap.yaml
+- ./helm-release.yaml
--- a/kubernetes/main/apps/media/komf/app/secret.sops.yaml
+++ b/kubernetes/main/apps/media/komf/app/secret.sops.yaml
@ -0,0 +1,71 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: komf-credentials
+stringData:
+    KOMF_KOMGA_PASSWORD: ENC[AES256_GCM,data:OK/oiS+e4bcb95YN04UzX4SJaskarQTkztLo5lHE0h0=,iv:mgWhsvmE6nYsb763wVyMQBvvCadiDamhme+O+C4rh9o=,tag:7J8WI8H+u4zZGANpw75C+Q==,type:str]
+    KOMF_METADATA_PROVIDERS_COMIC_VINE_API_KEY: ENC[AES256_GCM,data:f9C6pFWgGQhiF+f3GqyYoM/hybHGnNc2JX+HfsoGruBKVr+FotV54A==,iv:Sfd6Fs8NGLbRRv8Q9wbDoGlhYpCZdt0KrhrLQlbBhBY=,tag:i/fEXvQ574nEL/txK6e0Iw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2025-02-24T23:44:55Z"
+    mac: ENC[AES256_GCM,data:4sBI8DsSEzSomNghQjaIqoCip94jGxBaTE5da83GPm+LkEUo2nIe+50fFYmvAx14tdIRWT626XQ14hDaWAqy7gp3utqOPDOARWFP0YSz8Ha/Tv5Su9V4vlbXLX46MFsrJoVz/bpQVg4lLIpxxveRS2hvlZ0oHQV5N9oOThXS9vo=,iv:BSFs48JMiazr2cfXrACvZAeC3SBlUbVH+HNqhu91UaE=,tag:91aLFqMvafROuZr/aimbAw==,type:str]
+    pgp:
+        - created_at: "2025-02-24T23:44:55Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAyqlIeyoxYovARAAuphhZLT4EV844l6DVY6W2NJEdCjd02X9xP1PBQmRnMJq
+            ff42OfpMN6ud12i7C1Ba/BBHZgupGlg9a6N/Pgj90LZe5qRPwLij6/6Ose2v6/F2
+            A5FPH4XeOIgOV0CSEQs1CFmFX6aL4kOYZ9fU6Lb6G5OSuojs9soSxeqMkqi62dJw
+            8H1d+/BvUuJMExX//KeA8P/6rXYV3RXShAHIObmfZI80xkCwETxS1NR73LgaBljE
+            ba3/SMVUPnyeB3oEq+/0EkHZGWq6pS85KCfcAub5znWdHdKi8aQYNXSUrgQ6dtfw
+            6QF6Tl7IWz+VrhRFb0ZdKvucrdUZQSbKCGM6njd8IW8m2h+Eafs9jypkHfVwhBv2
+            h/eV3BJZ0xvmy+WKU6o0aKRPcer0KbVHZ3Q2RdUcjDth3OIoHkRwV9Sx8tpuN2oi
+            5Nb29UllXp7SCXgTDTUJWOcee2jrqGWwKJru+Y72opEVkG+6/Cw5raU1S7TBT5dY
+            JcV35Au+e2fMPdeb70Gxb/yfxmgHOthTsaPxnVtKS1N+jWtcFkZxMn/IYBiK7nVB
+            rhoEEgqE4QsIlSwdYd0Ov0KLrcZ3upln9oTuqdfNbOdX9bd+cZg8IatumKTUI0/0
+            G7ANRCWi96Bx+XCfeWjFCe4X4TMGLOK2I7VIbUEQ9ns3qJYGXTcu4EFv+pePhu+F
+            AgwDXjg0p2IN1X8BD/9V8OH/pzn303owOjztf7Pf4nJVnSsnJE15wodWuZV/graN
+            gFc4/gMscXni8ydT6TYoVsT6e66ly3MSK/rWeMoEXpwZ56TT9Nr7b1bXAym/Vgxx
+            Cv2q3yjlfns+6G+tXxArpPjvcRqV13mOdtRitnpUX8v+SQoqI0wsM99y+N6DzyDb
+            D6sXqBCggM/VNTKcpU6ao5iTv8MiMg35RsqaRVXf0Zz1mxUWQiDr1DqlKH2gS4Ol
+            ivqlRVxlRQGw1sdvp96CGnJquWXIjd7ghfRcqH5ucdQUmy7T1nZQxtw5N5TTdigg
+            CPR9KWI10pegowyElb1wRTdYOTFwtke1wei/R4A9amncOfq2Zt6juV12ATPc6MtZ
+            AQZXcT85aHqJ8IqZdRqZIfDnA9jkxCBKazZVDs1NNQXc2nFQKlQ67kL8Sc3FSkNJ
+            Mc5QOE8eSU1CthivDHrlqasLHFknyrGQx9gmN+FZN66KX+Bz1rgPcU++YFljnyHW
+            c+T8tEaWbpk9FIyxSKIEe17pLGcSdobc0bwPAqI2L6oPCuddJsygUjIQHQv7hf+B
+            8A7vzqCNOtA5Zld9YHWFLRAvo2oGBLz4kKnD16r4t7DEKrvT65wFNMjsQXPltTTq
+            AazMwQT9tsYFBlPXFrarJxUS6rezB4126ssUjSJrtZBnqTnh93D8w3sANwGwhNRo
+            AQkCEGxKwpiyHHVq6N69tMCY9b1tgTjXNQy7+7dvYMbBvlLVjUx1v6DfxkF2s+ub
+            g4777azvI7XfFPESGAdHxIQ8ffFtmbK/CyTHtSyvUIBb5swOeuFSOuTLpmGT2wKd
+            d9VulaohK9c=
+            =RLC9
+            -----END PGP MESSAGE-----
+          fp: BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD
+        - created_at: "2025-02-24T23:44:55Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMAy5t8IMoPu4VAQ/+Jnd2eRtSVrfCRaWN1wiOWnGhNBkuF78MozqsFkxVhao6
+            thInvXMiVPZ+SfGhjPPrkJGQGalikrR8Xo7R+q5QOIkQRCcW643Fn2e6A3RBShkp
+            IYkp4Gt4SZwjOZvjZ9T7zbbQyMFbUNqtpmW3WWPPohN88yUJDGXDaVEvsvJwwqOZ
+            nesl5duFozmbsSAVXpm1E3VvSUlSvBrWiRHg3W4qbzEzcs1uptoQfNAPu4eN1yo+
+            0MTb18aQkifnryltZygVjsfT2VWIPMSmVoUZzY6kBaQfGD/nzXrn56NWh5fN+GEU
+            Q7VsIAZGBTzknb+JLrKybRzStoHlF5tlia0b5RJvZVqEdnVtN45Hvj0O7sOEyjik
+            eWNeQbVd3HIkO6X05b8yYYwUw2+NBkt2n8DzIi+7bqhLnd83Q0PiG9HD4Z/9mlOs
+            PzCndfLiPUJ+uRDX9w2n8rOADJOigDUv7qdot1Svn1ZiS5hVppVu46bjNcc/13eY
+            VugeC9EynHravMyIUv56Kwhdhf6TcPWW5Snb/TNPtOP6pehnEtvegT1vPWB+owUi
+            Jzdk5fIL7DMZI9RfOniNdQ0IjPpzi/BnQrIWMuXPylj8MjGzWo/Kbzwd2fUycIOJ
+            izJFN+ywcm8Jo3yewM+Duwd4jTWCY+UHL0BNiLFO9DY9jBXkNs9OQWmPWeHi8zPU
+            aAEJAhBLAv78hu67duPsotGqYUlFIb0kHRndZ/9uwSju/qIrK1pb6DaT2nZA59jZ
+            /o07LlY4W19HdYAruoaJLq5yAuuvjCehik4yUd6VE+Z8cCHuY3uYT8f3COhf+APt
+            BicXJEygXhXg
+            =og3e
+            -----END PGP MESSAGE-----
+          fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.1
--- a/kubernetes/main/apps/media/komf/ks.yaml
+++ b/kubernetes/main/apps/media/komf/ks.yaml
@ -0,0 +1,31 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app komf
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  targetNamespace: media
+  path: ./kubernetes/main/apps/media/komf/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  dependsOn:
+    - name: openebs
+    - name: openebs-sc
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets
+    substitute:
+      APP: *app
+      VOLSYNC_CAPACITY: 1Gi
--- a/kubernetes/main/apps/media/kustomization.yaml
+++ b/kubernetes/main/apps/media/kustomization.yaml
@ -14,3 +14,4 @@ resources:
 - ./freshrss
 - ./navidrome/ks.yaml
 - ./immich/ks.yaml
+- ./komf/ks.yaml
--- a/kubernetes/thin/apps/database/redis/app/helm-release.yaml
+++ b/kubernetes/thin/apps/database/redis/app/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: redis
-      version: 20.8.0
+      version: 20.9.0
      sourceRef:
        kind: HelmRepository
        name: bitnami-charts