From d62c1991ac5cc9adcee8091287ca308148cfea00 Mon Sep 17 00:00:00 2001 From: SeanOMik Date: Tue, 15 Oct 2024 18:37:05 -0400 Subject: [PATCH] chore(radarr): change identifiers in helm chart, add init-db init container --- .../download/radarr/app/helm-release.yaml | 67 +++++------ .../apps/download/radarr/app/secret.sops.yaml | 105 ++++++++++-------- 2 files changed, 93 insertions(+), 79 deletions(-) diff --git a/kubernetes/main/apps/download/radarr/app/helm-release.yaml b/kubernetes/main/apps/download/radarr/app/helm-release.yaml index d3c14a7..e6b520b 100644 --- a/kubernetes/main/apps/download/radarr/app/helm-release.yaml +++ b/kubernetes/main/apps/download/radarr/app/helm-release.yaml @@ -17,23 +17,22 @@ spec: values: controllers: - main: - pod: - securityContext: - runAsNonRoot: true - runAsUser: 10000 - runAsGroup: 10000 - fsGroup: 10000 - fsGroupChangePolicy: OnRootMismatch + radarr: + initContainers: + init-db: + image: + repository: ghcr.io/onedr0p/postgres-init + tag: 16 + envFrom: &envFrom + - secretRef: + name: radarr-secret containers: - radarr: + app: image: repository: ghcr.io/onedr0p/radarr-develop tag: 5.12.0.9255 - envFrom: - - secretRef: - name: radarr-secret + envFrom: *envFrom env: TZ: America/New_York RADARR__APP__INSTANCENAME: Radarr @@ -44,9 +43,6 @@ spec: RADARR__LOG__LEVEL: info RADARR__SERVER__PORT: &port 7878 RADARR__UPDATE__BRANCH: develop - RADARR__POSTGRES__HOST: postgresql.database.svc - RADARR__POSTGRES__PORT: "5432" - RADARR__POSTGRES__MAINDB: radarr_main probes: liveness: &probes enabled: true @@ -79,17 +75,37 @@ spec: env: - name: URL value: "http://localhost" - - name: CONFIG - value: "/config/config.xml" - name: PORT - value: 9000 + value: &metricsPort 9000 - name: ENABLE_ADDITIONAL_METRICS value: "true" - name: ENABLE_UNKNOWN_QUEUE_ITEMS value: "true" + - name: API_KEY + secretKeyRef: + name: radarr-secret + key: RADARR__AUTH__APIKEY + defaultPodOptions: + securityContext: + runAsNonRoot: true + runAsUser: 10000 + runAsGroup: 10000 + fsGroup: 10000 + fsGroupChangePolicy: OnRootMismatch + + service: + app: + controller: radarr + + ports: + http: + port: *port + metrics: + port: *metricsPort + protocol: HTTP ingress: - main: + app: annotations: cert-manager.io/cluster-issuer: letsencrypt-production traefik.ingress.kubernetes.io/router.entrypoints: websecure @@ -100,20 +116,9 @@ spec: paths: - path: / service: - identifier: main + identifier: app port: http - service: - main: - controller: main - - ports: - http: - port: *port - metrics: - port: 9000 - protocol: HTTP - persistence: config: #type: hostPath diff --git a/kubernetes/main/apps/download/radarr/app/secret.sops.yaml b/kubernetes/main/apps/download/radarr/app/secret.sops.yaml index ccfc510..0144ee9 100644 --- a/kubernetes/main/apps/download/radarr/app/secret.sops.yaml +++ b/kubernetes/main/apps/download/radarr/app/secret.sops.yaml @@ -4,69 +4,78 @@ metadata: name: radarr-secret namespace: download stringData: - RADARR__AUTH__APIKEY: ENC[AES256_GCM,data:n6NygOta67GMqWV6+Q3EjU3JyhY84xNf546FfpOMi4k=,iv:IRGuOPzo0azEmznl0tKe+v9QhwogjjUsMUR9oGqncdU=,tag:O2WEgQxh6E3g7mRJ41Vbwg==,type:str] - RADARR__POSTGRES__USER: ENC[AES256_GCM,data:nAaR02DM,iv:xh8ahgckhgFZDu7snxQFM19x8qC5s7smn1hSjY+zxLw=,tag:0ziWTKZq5tjMrdhoFQY6jw==,type:str] - RADARR__POSTGRES__PASSWORD: ENC[AES256_GCM,data:6fXWGDYTjoSkJ7jccI3/5hCC6jsKPwh/CgM7hBlUu9g=,iv:vOX435yfn0V4ZPR6OOQgsnQlQZI+TPTjsuiAvgcpAMA=,tag:z5Ctt5dd/rq9alCiUDLcTA==,type:str] + RADARR__AUTH__APIKEY: ENC[AES256_GCM,data:da21Mpdzskzly0EQVuF/4f21a3jQwjU6MLQYAEAXBo4=,iv:KXHPkPqg/Kz2KPaMtJxoiTyPmzFGgsEKdn9fBNZejlY=,tag:9/SwZfS45QDA9FGAQOfF1Q==,type:str] + RADARR__POSTGRES__HOST: ENC[AES256_GCM,data:Cgj9nQs+n7rDQ6aaFm0DAQPMz7l3wag=,iv:BYVmLJZzGPVQ0eVyOhf5BM1PWqhukvhgOPMHTrZpSCo=,tag:mm2UFryQXqMzJeAhVq4KMA==,type:str] + RADARR__POSTGRES__PORT: ENC[AES256_GCM,data:SvLVaw==,iv:6/SZzOp+oM8U+m1P9bFRJSqzSZMNuhE8cSFrtNSl3qk=,tag:36M/4Th+aAlEUuiX3Ot2Ew==,type:str] + RADARR__POSTGRES__MAINDB: ENC[AES256_GCM,data:qCTI7unY1de3mf8=,iv:Vb9fe/aGUFGbUjIomjnOFkPHiY9bMt1aSrDYCp0FnrE=,tag:UX2I+3O1YgivZxtFZ47sFA==,type:str] + RADARR__POSTGRES__USER: ENC[AES256_GCM,data:imCnEg3J,iv:ehq/1hG7wKjUAqHHhTDEQGTM3DsqK5CDUa1ZvwY49D0=,tag:PDZiV9O8kbSK4xFMOWkRZg==,type:str] + RADARR__POSTGRES__PASSWORD: ENC[AES256_GCM,data:tIrRv5kgomfXIuliEQqe41D1JlbmA3A2I51Y0Mh1hic=,iv:ggPAAt7oRcGnl1HQgmJGl4YV5LmgtZaDTB77Arjk1kA=,tag:2xEKFoDW5jk7IAcnmBubcQ==,type:str] + INIT_POSTGRES_DBNAME: ENC[AES256_GCM,data:BVH44RPEsXwaAQA=,iv:jKt9U5ClXDYp8nUF2ckHuq6tW9QvGp+vtKaAGknwW0U=,tag:wHc31hgysvIEIs8m3jugfA==,type:str] + INIT_POSTGRES_HOST: ENC[AES256_GCM,data:SzsEdOzpOSxrtZoX/q0qjRVPRDPAlAk=,iv:ISC6u9amrLpbsIj86GwZ3QA9SkbXUlLW334z10ut/e4=,tag:2x8IpVXn4sGcTDJGBvSs+A==,type:str] + INIT_POSTGRES_PORT: ENC[AES256_GCM,data:fJrlPA==,iv:vzGNqLQoW0+ObpxBUCOkLjZiUl1HM7pkW3KQFZbQ0u8=,tag:T8fMkxriSi/ZB/yL/8vmSQ==,type:str] + INIT_POSTGRES_USER: ENC[AES256_GCM,data:V0II9Z0Y,iv:NRCNuNd7zp99mvwQre34gFYDVT2JT0P+xjerle4qr3g=,tag:iozz/sCdORi9cVDEB4Yi0g==,type:str] + INIT_POSTGRES_PASS: ENC[AES256_GCM,data:vRuZA9dGH4PNVbNLgm3kzjF4fMLtxusDqg1BeG3B2yE=,iv:N8DluQLDorfctbbYbTWfSjyhFyKkHIf9UMyb32uQy2Y=,tag:ECZxkGhhOly8iuddITcEMA==,type:str] + INIT_POSTGRES_SUPER_PASS: ENC[AES256_GCM,data:LVeQ+IvDH81TbC/Dm2Xj+2dIWrJW3YUv2RLxA7pAW3A=,iv:XxkWlKNrHSO4wiS30ZzVwMl/DTQ7cRTu77/gFxNe17g=,tag:ibSoA0xWIuubCIwuOKKCTw==,type:str] sops: kms: [] gcp_kms: [] azure_kv: [] hc_vault: [] age: [] - lastmodified: "2024-10-15T01:16:00Z" - mac: ENC[AES256_GCM,data:t19Lz6df6hohcynjqib03Qj+uqpIC4eLSAJTLTqFEXBtRInsADbEsypvnyUU0Q4A2z6dUKZpP/SEncxAP/8WimaQvpfVPFsWeVUWHvK8ISz5bBxjscgwMI1/TRfA5/BfCMLmfyNDlOYAzshAzJ97aeXLDJKZvrnbMWNgvvMw6W4=,iv:DWRaA3APzKv9cOC0afeBfw2fzhLPraKKvMSNZa8yVQs=,tag:zrOAk8ZZP+8ThVc66RDJlQ==,type:str] + lastmodified: "2024-10-15T22:35:28Z" + mac: ENC[AES256_GCM,data:dK0FGO7fAsBFwqbC+IZfFvuVmYNS+W3FgSC8j/NskoYLK1iZJ+va1MjfIMIBH490LFhE6OFRXXfDdTjwjw6NUAF6OcWB+BHp32sw8CxY6oWQc1d4abSQYbAdSQ7JDL4JoayA4NUj4MUhLfW7Iq/Wew44SJi4+yiyg78XumtBGaE=,iv:LDOiT27sHWvVjgWl9L7HN9Zh9fARS5+KQGYLj9KWizI=,tag:9NJ/otTNDggW/BhGyuu3Nw==,type:str] pgp: - - created_at: "2024-10-15T01:16:00Z" + - created_at: "2024-10-15T22:35:28Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMAwAAAAAAAAAAAQ//UeSC+2Dk6gQlSW6v0mKf/vfety3Qd0ptrvhL8HmPm8nj - a3UDvfvDXfjClJeIVBaV838XYB6U8+tMukQrm5gQxxfP/cxTNCkpCBT4o9hjOvM6 - 5enrWpBgcbD7HqSav8FllR/9kfDZpRV4YccnYD4LT9ExiQd6VGKzSoyojyzQU8ec - lzec0cg00BF9be/t7lVZ6/0lbfQaRaqurphkA6cFx0+/i3figs2eSv1vmIK+UQe1 - 4HRXI9AZw/rm+PmFszMipTjwceX2Me0G100eLVWGsP5McSgM1ISJWSC+MM6EmpYO - juKcW3Spy5hC7JM3FBNNwAxh4w6d3RdKHYrBvjwZzLDEKChLEZhxKSFKJ+w7QcSN - 67KpcNNAVTD1Rnf1si3MPEayZWCjvKy56suT5Juhjltcq78kiw690zCVdHlVfAcv - v55wpQF5Lq2O8ZWS4dyhx+7ZFKyUW/LCcvYxZLGxutfMqX2gNPtE3427T1Zm5Fnx - QOsE92bkeiSkH0uHzhrTPW/9SW9IW5wk/5+sGBRyu8bnO1hWdOaRMe4EWa/Q004t - p75kwiaKgjXS8ZsdbkclXBTKRzwGkA/qCWGd7Uj/kxV1fcFJB8B3Sub5DeRypvB9 - +Z6DisUumBaKRLVCFLk5mf/X/PqHxlswqA86R4bGT3124RywBpFLBsiaYbBPDmaF - AgwDAAAAAAAAAAABEADSiLYQigE9hRrSjD97hp10foCPT6n72arrsmXTSRHCLPoW - A7v9sSXMeqbvOL8+sgY761RDfmOtYCGLsP6z2UP6mIanalc18chVT8k+frdrcogF - 3WDBhtyV63Rru9G0HuPqhtq8Q7m6ELC+qo9/MrEQhVxdYuyi7+2jZmOpLKBoNSaw - pdC41VE2cx4LEXI5scViXNPSl1zcPgTuIWvr4/ApewDBYvNFElZqGrWPFyJ+2UC2 - 05QlgOJS9akGYmkB44IWXfRQoELzj9UE0jdBpi8SnK7bMMlQOEG1p1SLqyYZ1cln - gktnms5jzhTk/XDqpfjzXy7xsJm5G1VBZHTBHub5lzpXJGD2vYfX/AYICEmMfljV - WpgmjZGQflPZPdWBm5JEhEvXtimHss9XRKJPfphVFHARWcxjKAtfScXbG5CWFAhA - pZzz8nfCTJqMEF5XfB4vOqR6PGI3eIG2NXS/tjptKVczJHUF7C4rh7gthNOcoZOd - tTbZPLj73hSWRw22ADJNkNu9xiyU41iA92B7xWk6E4TUGSpgj6pWd1ss+TB3ZsjI - fE1q2cyq5yfq2jRnEBbVFypkkVhXpMgICsQv+wJZ+nYNrbYs/wNx5VWOA0xkYPWx - Doa2R17tdBX2YYhK7mUaHq74voy2ejnJFTTLP517dTF+8PPaq9v+LHRMbOsFntRo - AQkCEBQ7y3f8blmvfqZZr0fR0R83qz1B74oIyOGIeLYtGzqVpNxIQWrL1PBz60qV - 0n4qynu+C2l+8i+iUBDsp38jl49wIlB5z210f3wmL2SMzhpWL0DsN4GFIRw6OsVd - YR+05RNcPRg= - =Vl2t + hQIMAwAAAAAAAAAAARAAhsCMzkEIMQCuMAgidJO8Gle9Yol+7AXMoX/2dmjVL0nP + ZOjuXsOraatjQuuf7VTlscSzX8rd3U7OcVU8fFKqdpOnBMpyBQ1Vz7oZ/RGQ6rpX + jVYlFX7ySSi8WR6ZJBuvjdYUxo8GhWOu41O1c0AZfMGa2bHYGY7LzIdvHrflx8H2 + pBMJFrQxHLIjnB1mnWcggSHhdlmdwq4ytzhVu4EW8dqP5+bNXsy4GsKP/KeSkNJe + 7ozN5XJQkxfG+AbDZSuGiPbTlu/QnVQEtHh6/ziaXX6wST2YVD8fi2mY/JKRg+00 + oJ2JBWUKxB7y1lZnKOQ8j8VkXmRUNBzjV4eKyGOt3a0eHHjxBr6WeRP9Eryw7YU9 + 1VrClyDSLEKleq3vZ6YJRmp7mBBGarjzMpljCIq9mI1wNO7K00sUX4xsrMspEIGF + wLH1vGJ7gTvgoKWrwb64J0OpXxDnwgWWLrkGM7s3muzFC1VaL89ws9T40Fg3hlcO + 2G1fPVO+qFEbVeTP4ly6ooG+TIfsml4bcClMq2gKeRHV1U0B37HdKbI/1HMyMBzd + vhKKXnLSFKOcFgMCCYd3XxycZef2A46WaMZQRkpwwXfuM7vY2gsDvUGn0FZQ9n3P + tLuYeHuX4DqCEHoBGEj25ImaSfXBlAvCIYCx6SkplGr2zDwiKaC+BiQyisFRE5SF + AgwDAAAAAAAAAAABEACORlCvAy6v6hMBjAzAvRKCXv6FcTd9u3Bo2AkGcit26LRi + PAl6xgNuAra454AybZU3SBj2vdtbtKANrIephISpU2bKw8+S8JAW4yzWC3YhC6XY + GU5ErjwyhM07pvOBU+9qPcQly0hrSQ6W4zAL81018QqUU4fTQfguWYdyJduD7RkJ + y8OJPHOzFfJwSSCVwvMJWwXrbEM1Vh++7Lqalj2ffpJWdEnk5MhDqjZ2qSEEB0G6 + +hJGdri4vIPq/IYOnDJGs39TmmIJsMPCVBkSUoCqYULWiJXhOfr45CEj7J9epi/K + AHieJGyS9Z0V8vZ0umDwt2HRnOSx9GR9P1oBtW6EYB0DdOU4WJk9gsN7DdosSSXB + SlOyhEhIOZbJyZQxdGEZJSN6y3AaPqjlT9pkaSGc0U+wXfH8LGIcbsCoQTPLnuGl + hBzNzT8uW60IrEFW9gOriEBwzSTstrKzXcm50ea+90ohVlwJot5+fHOl7SILeRXO + b9YpqIS/jSZN5NF1ar3qO2M2QnE+g6tJyhQBG8gAELKF8kNcXEHC0EixmfQjKPFF + UpZI8zvrG0QC/51BnvoCSURQAqi/pDP61B6vpRIycuaesF+avG7UHlc8yas+IBTW + iakoAvjgA4Otdpkq91wL8nkKMRbvV+fSSZAG/IK1eyhTkRsl8xzFu8CI75EHMNRo + AQkCEJMlVZncEv3gizZs5LjUZCozvtE6k1bCYPKWBAVipU7ByP6lWpQH9qDILBlE + LeCfbIK/bwP63cdm8TJqIc68oSxY4vNbPBuvAQcd3K1KnYivo8jOTX6Fonpem+U8 + jZvKhVLBt4k= + =DnkV -----END PGP MESSAGE----- fp: BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD - - created_at: "2024-10-15T01:16:00Z" + - created_at: "2024-10-15T22:35:28Z" enc: |- -----BEGIN PGP MESSAGE----- - hQIMAwAAAAAAAAAAAQ/+IoF55lQey7yi64PUfhMWc3Be+1EBNGzhHR5RfZMAI3w4 - rqQdZyGp3SY1tB3q1qHk2TCySL70FZLcT0mdPHHU8bt8kn9M3HWEAHo0TJuoH7K3 - qlwWnPh0OQuF+AUkmsAzCUDcBpW9CNHifPJjHWgSlhsH+r4DrYdIzGi2vaTDhXU8 - GMHlEuZ2wrgra78avw9G/v+7I/cnnkzMnFc3zR6F+FbSv9S/w4Z4YCEv4AhLRUox - T03kG8r/Gv5UTFZ08TnRGXNzICykBfIHXg5xsXB+ePgh/djD3fLDlByEc8BhE2T/ - 8MbkgNbj7i3V0E3+I53NJocCGkH/SwBOwKlvbstop5eQTN+nuBQC5nYnupO7n1cf - wY6gIqODXZjQRItNuygE7yNDkVsF3pcb0/uRNFxc2rkUJQMT2OqusThuvVU1HLho - LHYPzx8bvWoPHwY1oFvB+VXU9K5J00jzkAjONRTMqIMYceoqncInoiArjDi+Bby3 - HGjTblEik+2cuKc9JF6cuwfrSKhrNgoqm7nhNS0beF4Uf+0xvpo1urfAAYycIjWy - SC/wPAzwsvU92l7LilfVn8seX+1jVIZnzkxxk2z0USuoRR5Fiiuf3O1zBMOKOU6E - /ExchxWvA/9USgvPjtc8JCrZUxIRrI03hIwILzLXOriA2T68ejp8613DnuZuJHLU - aAEJAhBLSQzeER6pJ3hCGsB6kMcivumgRoWt9qonf0KqPTb4gRO8KFL2pbV04x58 - v4FJ3nqUelKEdM9C5oXdHBdiG48gm+EOxzSzey0xRJqsVHi7S7tCj39HR3h47r/k - hhBax1k3ZD0e - =doxn + hQIMAwAAAAAAAAAAARAAiUiUJ5ubG0YqSoCBuU8Et8Dux2Pc+hXhCDV5prN4VKAz + 3DqGFHZscPoaIrtd06JaaMlO06oro8rfzwF6fgUR5sEw2bPkcTXQM+oodVrJ0yZ9 + B6aNcsEL/jKpvycAImHtXOk2S7I8s4pQ3KArHmBg4Rvlg89CFdTpWLKQbm7JT5// + CCXAP6jfg411t+G11RbLkrBvNPCSArLmXjWGSEhwn7OrhlnparqULfxk+ngaN8Sk + yyadvSN2CCi3J6bLxgY7TFNIh9Ikrres/KHBfXRrTryqFLdgSRBQFJyL+MXInhWz + x+Suc90+szNR5kbeIOrQzoIRNYd+UERm68MhP+G6ul6b6O1gaRfTnX4utFsu9blM + eu3PyrNhjq6J4mYwRUVVcCV0WmUsuw26TUw+K1ojLWSz0vjyFs+lFFrQLQLaUVH7 + RFhHRS2BnHS7vYkwjaaixQOGxu6noyIoFaOKlez300NybJyEgbCIJW46iRvb5mDK + /Gp5+ysJxUA5cyYrY5EnUW1xsU0NlCtkUdJavqkw/nhb1dSkNCUgfjpoRQWLr8na + K759JWROPwXkImvSxYbkpG5bO2lMyblWUMBiAAelvaCgjESZcI19ytGq8p1MqyuW + 8I/ZIxf5IUxlnGkGi1Ficc37UZOdktG2HuUb71dEfo6PFbdC7HSKHMfMBDRdtmfU + aAEJAhC7kAFkb+T/ov90bpcSQh88UPdEKoo94HPZ8t/kwrt3pGKfgkl2Dvf/CIKz + sz9TJpR38q4hl8R+yRFddGiuY52Yz7vRtjDlcHHaw0NXhE/uZ2aTLGzojyx8UlYS + BzfT29tYrm4T + =VB3Z -----END PGP MESSAGE----- fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D encrypted_regex: ^(data|stringData)$