chore(radarr): change identifiers in helm chart, add init-db init container

kubernetes/main/apps/download/radarr/app/helm-release.yaml

@@ -17,23 +17,22 @@ spec:
 
   values:
     controllers:
-      main:
+      radarr:
-        pod:
+        initContainers:
-          securityContext:
+          init-db:
-            runAsNonRoot: true
+            image:
-            runAsUser: 10000
+              repository: ghcr.io/onedr0p/postgres-init
-            runAsGroup: 10000
+              tag: 16
-            fsGroup: 10000
+            envFrom: &envFrom
-            fsGroupChangePolicy: OnRootMismatch
+              - secretRef:
+                  name: radarr-secret
 
         containers:
-          radarr:
+          app:
             image:
               repository: ghcr.io/onedr0p/radarr-develop
               tag: 5.12.0.9255
-            envFrom:
+            envFrom: *envFrom
-            - secretRef:
-                name: radarr-secret
             env:
               TZ: America/New_York
               RADARR__APP__INSTANCENAME: Radarr
@@ -44,9 +43,6 @@ spec:
               RADARR__LOG__LEVEL: info
               RADARR__SERVER__PORT: &port 7878
               RADARR__UPDATE__BRANCH: develop
-              RADARR__POSTGRES__HOST: postgresql.database.svc
-              RADARR__POSTGRES__PORT: "5432"
-              RADARR__POSTGRES__MAINDB: radarr_main
             probes:
               liveness: &probes
                 enabled: true
@@ -79,17 +75,37 @@ spec:
             env:
             - name: URL
               value: "http://localhost"
-            - name: CONFIG
-              value: "/config/config.xml"
             - name: PORT
-              value: 9000
+              value: &metricsPort 9000
             - name: ENABLE_ADDITIONAL_METRICS
               value: "true"
             - name: ENABLE_UNKNOWN_QUEUE_ITEMS
               value: "true"
+            - name: API_KEY
+              secretKeyRef:
+                name: radarr-secret
+                key: RADARR__AUTH__APIKEY
+    defaultPodOptions:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 10000
+        runAsGroup: 10000
+        fsGroup: 10000
+        fsGroupChangePolicy: OnRootMismatch
+
+    service:
+      app:
+        controller: radarr
+
+        ports:
+          http:
+            port: *port
+          metrics:
+            port: *metricsPort
+            protocol: HTTP
 
     ingress:
-      main:
+      app:
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-production
           traefik.ingress.kubernetes.io/router.entrypoints: websecure
@@ -100,20 +116,9 @@ spec:
           paths:
           - path: /
             service:
-              identifier: main
+              identifier: app
               port: http
 
-    service:
-      main:
-        controller: main
-
-        ports:
-          http:
-            port: *port
-          metrics:
-            port: 9000
-            protocol: HTTP
-    
     persistence:
       config:
         #type: hostPath

kubernetes/main/apps/download/radarr/app/secret.sops.yaml

@@ -4,69 +4,78 @@ metadata:
     name: radarr-secret
     namespace: download
 stringData:
-    RADARR__AUTH__APIKEY: ENC[AES256_GCM,data:n6NygOta67GMqWV6+Q3EjU3JyhY84xNf546FfpOMi4k=,iv:IRGuOPzo0azEmznl0tKe+v9QhwogjjUsMUR9oGqncdU=,tag:O2WEgQxh6E3g7mRJ41Vbwg==,type:str]
+    RADARR__AUTH__APIKEY: ENC[AES256_GCM,data:da21Mpdzskzly0EQVuF/4f21a3jQwjU6MLQYAEAXBo4=,iv:KXHPkPqg/Kz2KPaMtJxoiTyPmzFGgsEKdn9fBNZejlY=,tag:9/SwZfS45QDA9FGAQOfF1Q==,type:str]
-    RADARR__POSTGRES__USER: ENC[AES256_GCM,data:nAaR02DM,iv:xh8ahgckhgFZDu7snxQFM19x8qC5s7smn1hSjY+zxLw=,tag:0ziWTKZq5tjMrdhoFQY6jw==,type:str]
+    RADARR__POSTGRES__HOST: ENC[AES256_GCM,data:Cgj9nQs+n7rDQ6aaFm0DAQPMz7l3wag=,iv:BYVmLJZzGPVQ0eVyOhf5BM1PWqhukvhgOPMHTrZpSCo=,tag:mm2UFryQXqMzJeAhVq4KMA==,type:str]
-    RADARR__POSTGRES__PASSWORD: ENC[AES256_GCM,data:6fXWGDYTjoSkJ7jccI3/5hCC6jsKPwh/CgM7hBlUu9g=,iv:vOX435yfn0V4ZPR6OOQgsnQlQZI+TPTjsuiAvgcpAMA=,tag:z5Ctt5dd/rq9alCiUDLcTA==,type:str]
+    RADARR__POSTGRES__PORT: ENC[AES256_GCM,data:SvLVaw==,iv:6/SZzOp+oM8U+m1P9bFRJSqzSZMNuhE8cSFrtNSl3qk=,tag:36M/4Th+aAlEUuiX3Ot2Ew==,type:str]
+    RADARR__POSTGRES__MAINDB: ENC[AES256_GCM,data:qCTI7unY1de3mf8=,iv:Vb9fe/aGUFGbUjIomjnOFkPHiY9bMt1aSrDYCp0FnrE=,tag:UX2I+3O1YgivZxtFZ47sFA==,type:str]
+    RADARR__POSTGRES__USER: ENC[AES256_GCM,data:imCnEg3J,iv:ehq/1hG7wKjUAqHHhTDEQGTM3DsqK5CDUa1ZvwY49D0=,tag:PDZiV9O8kbSK4xFMOWkRZg==,type:str]
+    RADARR__POSTGRES__PASSWORD: ENC[AES256_GCM,data:tIrRv5kgomfXIuliEQqe41D1JlbmA3A2I51Y0Mh1hic=,iv:ggPAAt7oRcGnl1HQgmJGl4YV5LmgtZaDTB77Arjk1kA=,tag:2xEKFoDW5jk7IAcnmBubcQ==,type:str]
+    INIT_POSTGRES_DBNAME: ENC[AES256_GCM,data:BVH44RPEsXwaAQA=,iv:jKt9U5ClXDYp8nUF2ckHuq6tW9QvGp+vtKaAGknwW0U=,tag:wHc31hgysvIEIs8m3jugfA==,type:str]
+    INIT_POSTGRES_HOST: ENC[AES256_GCM,data:SzsEdOzpOSxrtZoX/q0qjRVPRDPAlAk=,iv:ISC6u9amrLpbsIj86GwZ3QA9SkbXUlLW334z10ut/e4=,tag:2x8IpVXn4sGcTDJGBvSs+A==,type:str]
+    INIT_POSTGRES_PORT: ENC[AES256_GCM,data:fJrlPA==,iv:vzGNqLQoW0+ObpxBUCOkLjZiUl1HM7pkW3KQFZbQ0u8=,tag:T8fMkxriSi/ZB/yL/8vmSQ==,type:str]
+    INIT_POSTGRES_USER: ENC[AES256_GCM,data:V0II9Z0Y,iv:NRCNuNd7zp99mvwQre34gFYDVT2JT0P+xjerle4qr3g=,tag:iozz/sCdORi9cVDEB4Yi0g==,type:str]
+    INIT_POSTGRES_PASS: ENC[AES256_GCM,data:vRuZA9dGH4PNVbNLgm3kzjF4fMLtxusDqg1BeG3B2yE=,iv:N8DluQLDorfctbbYbTWfSjyhFyKkHIf9UMyb32uQy2Y=,tag:ECZxkGhhOly8iuddITcEMA==,type:str]
+    INIT_POSTGRES_SUPER_PASS: ENC[AES256_GCM,data:LVeQ+IvDH81TbC/Dm2Xj+2dIWrJW3YUv2RLxA7pAW3A=,iv:XxkWlKNrHSO4wiS30ZzVwMl/DTQ7cRTu77/gFxNe17g=,tag:ibSoA0xWIuubCIwuOKKCTw==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2024-10-15T01:16:00Z"
+    lastmodified: "2024-10-15T22:35:28Z"
-    mac: ENC[AES256_GCM,data:t19Lz6df6hohcynjqib03Qj+uqpIC4eLSAJTLTqFEXBtRInsADbEsypvnyUU0Q4A2z6dUKZpP/SEncxAP/8WimaQvpfVPFsWeVUWHvK8ISz5bBxjscgwMI1/TRfA5/BfCMLmfyNDlOYAzshAzJ97aeXLDJKZvrnbMWNgvvMw6W4=,iv:DWRaA3APzKv9cOC0afeBfw2fzhLPraKKvMSNZa8yVQs=,tag:zrOAk8ZZP+8ThVc66RDJlQ==,type:str]
+    mac: ENC[AES256_GCM,data:dK0FGO7fAsBFwqbC+IZfFvuVmYNS+W3FgSC8j/NskoYLK1iZJ+va1MjfIMIBH490LFhE6OFRXXfDdTjwjw6NUAF6OcWB+BHp32sw8CxY6oWQc1d4abSQYbAdSQ7JDL4JoayA4NUj4MUhLfW7Iq/Wew44SJi4+yiyg78XumtBGaE=,iv:LDOiT27sHWvVjgWl9L7HN9Zh9fARS5+KQGYLj9KWizI=,tag:9NJ/otTNDggW/BhGyuu3Nw==,type:str]
     pgp:
-        - created_at: "2024-10-15T01:16:00Z"
+        - created_at: "2024-10-15T22:35:28Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwAAAAAAAAAAAQ//UeSC+2Dk6gQlSW6v0mKf/vfety3Qd0ptrvhL8HmPm8nj
+            hQIMAwAAAAAAAAAAARAAhsCMzkEIMQCuMAgidJO8Gle9Yol+7AXMoX/2dmjVL0nP
-            a3UDvfvDXfjClJeIVBaV838XYB6U8+tMukQrm5gQxxfP/cxTNCkpCBT4o9hjOvM6
+            ZOjuXsOraatjQuuf7VTlscSzX8rd3U7OcVU8fFKqdpOnBMpyBQ1Vz7oZ/RGQ6rpX
-            5enrWpBgcbD7HqSav8FllR/9kfDZpRV4YccnYD4LT9ExiQd6VGKzSoyojyzQU8ec
+            jVYlFX7ySSi8WR6ZJBuvjdYUxo8GhWOu41O1c0AZfMGa2bHYGY7LzIdvHrflx8H2
-            lzec0cg00BF9be/t7lVZ6/0lbfQaRaqurphkA6cFx0+/i3figs2eSv1vmIK+UQe1
+            pBMJFrQxHLIjnB1mnWcggSHhdlmdwq4ytzhVu4EW8dqP5+bNXsy4GsKP/KeSkNJe
-            4HRXI9AZw/rm+PmFszMipTjwceX2Me0G100eLVWGsP5McSgM1ISJWSC+MM6EmpYO
+            7ozN5XJQkxfG+AbDZSuGiPbTlu/QnVQEtHh6/ziaXX6wST2YVD8fi2mY/JKRg+00
-            juKcW3Spy5hC7JM3FBNNwAxh4w6d3RdKHYrBvjwZzLDEKChLEZhxKSFKJ+w7QcSN
+            oJ2JBWUKxB7y1lZnKOQ8j8VkXmRUNBzjV4eKyGOt3a0eHHjxBr6WeRP9Eryw7YU9
-            67KpcNNAVTD1Rnf1si3MPEayZWCjvKy56suT5Juhjltcq78kiw690zCVdHlVfAcv
+            1VrClyDSLEKleq3vZ6YJRmp7mBBGarjzMpljCIq9mI1wNO7K00sUX4xsrMspEIGF
-            v55wpQF5Lq2O8ZWS4dyhx+7ZFKyUW/LCcvYxZLGxutfMqX2gNPtE3427T1Zm5Fnx
+            wLH1vGJ7gTvgoKWrwb64J0OpXxDnwgWWLrkGM7s3muzFC1VaL89ws9T40Fg3hlcO
-            QOsE92bkeiSkH0uHzhrTPW/9SW9IW5wk/5+sGBRyu8bnO1hWdOaRMe4EWa/Q004t
+            2G1fPVO+qFEbVeTP4ly6ooG+TIfsml4bcClMq2gKeRHV1U0B37HdKbI/1HMyMBzd
-            p75kwiaKgjXS8ZsdbkclXBTKRzwGkA/qCWGd7Uj/kxV1fcFJB8B3Sub5DeRypvB9
+            vhKKXnLSFKOcFgMCCYd3XxycZef2A46WaMZQRkpwwXfuM7vY2gsDvUGn0FZQ9n3P
-            +Z6DisUumBaKRLVCFLk5mf/X/PqHxlswqA86R4bGT3124RywBpFLBsiaYbBPDmaF
+            tLuYeHuX4DqCEHoBGEj25ImaSfXBlAvCIYCx6SkplGr2zDwiKaC+BiQyisFRE5SF
-            AgwDAAAAAAAAAAABEADSiLYQigE9hRrSjD97hp10foCPT6n72arrsmXTSRHCLPoW
+            AgwDAAAAAAAAAAABEACORlCvAy6v6hMBjAzAvRKCXv6FcTd9u3Bo2AkGcit26LRi
-            A7v9sSXMeqbvOL8+sgY761RDfmOtYCGLsP6z2UP6mIanalc18chVT8k+frdrcogF
+            PAl6xgNuAra454AybZU3SBj2vdtbtKANrIephISpU2bKw8+S8JAW4yzWC3YhC6XY
-            3WDBhtyV63Rru9G0HuPqhtq8Q7m6ELC+qo9/MrEQhVxdYuyi7+2jZmOpLKBoNSaw
+            GU5ErjwyhM07pvOBU+9qPcQly0hrSQ6W4zAL81018QqUU4fTQfguWYdyJduD7RkJ
-            pdC41VE2cx4LEXI5scViXNPSl1zcPgTuIWvr4/ApewDBYvNFElZqGrWPFyJ+2UC2
+            y8OJPHOzFfJwSSCVwvMJWwXrbEM1Vh++7Lqalj2ffpJWdEnk5MhDqjZ2qSEEB0G6
-            05QlgOJS9akGYmkB44IWXfRQoELzj9UE0jdBpi8SnK7bMMlQOEG1p1SLqyYZ1cln
+            +hJGdri4vIPq/IYOnDJGs39TmmIJsMPCVBkSUoCqYULWiJXhOfr45CEj7J9epi/K
-            gktnms5jzhTk/XDqpfjzXy7xsJm5G1VBZHTBHub5lzpXJGD2vYfX/AYICEmMfljV
+            AHieJGyS9Z0V8vZ0umDwt2HRnOSx9GR9P1oBtW6EYB0DdOU4WJk9gsN7DdosSSXB
-            WpgmjZGQflPZPdWBm5JEhEvXtimHss9XRKJPfphVFHARWcxjKAtfScXbG5CWFAhA
+            SlOyhEhIOZbJyZQxdGEZJSN6y3AaPqjlT9pkaSGc0U+wXfH8LGIcbsCoQTPLnuGl
-            pZzz8nfCTJqMEF5XfB4vOqR6PGI3eIG2NXS/tjptKVczJHUF7C4rh7gthNOcoZOd
+            hBzNzT8uW60IrEFW9gOriEBwzSTstrKzXcm50ea+90ohVlwJot5+fHOl7SILeRXO
-            tTbZPLj73hSWRw22ADJNkNu9xiyU41iA92B7xWk6E4TUGSpgj6pWd1ss+TB3ZsjI
+            b9YpqIS/jSZN5NF1ar3qO2M2QnE+g6tJyhQBG8gAELKF8kNcXEHC0EixmfQjKPFF
-            fE1q2cyq5yfq2jRnEBbVFypkkVhXpMgICsQv+wJZ+nYNrbYs/wNx5VWOA0xkYPWx
+            UpZI8zvrG0QC/51BnvoCSURQAqi/pDP61B6vpRIycuaesF+avG7UHlc8yas+IBTW
-            Doa2R17tdBX2YYhK7mUaHq74voy2ejnJFTTLP517dTF+8PPaq9v+LHRMbOsFntRo
+            iakoAvjgA4Otdpkq91wL8nkKMRbvV+fSSZAG/IK1eyhTkRsl8xzFu8CI75EHMNRo
-            AQkCEBQ7y3f8blmvfqZZr0fR0R83qz1B74oIyOGIeLYtGzqVpNxIQWrL1PBz60qV
+            AQkCEJMlVZncEv3gizZs5LjUZCozvtE6k1bCYPKWBAVipU7ByP6lWpQH9qDILBlE
-            0n4qynu+C2l+8i+iUBDsp38jl49wIlB5z210f3wmL2SMzhpWL0DsN4GFIRw6OsVd
+            LeCfbIK/bwP63cdm8TJqIc68oSxY4vNbPBuvAQcd3K1KnYivo8jOTX6Fonpem+U8
-            YR+05RNcPRg=
+            jZvKhVLBt4k=
-            =Vl2t
+            =DnkV
             -----END PGP MESSAGE-----
           fp: BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD
-        - created_at: "2024-10-15T01:16:00Z"
+        - created_at: "2024-10-15T22:35:28Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMAwAAAAAAAAAAAQ/+IoF55lQey7yi64PUfhMWc3Be+1EBNGzhHR5RfZMAI3w4
+            hQIMAwAAAAAAAAAAARAAiUiUJ5ubG0YqSoCBuU8Et8Dux2Pc+hXhCDV5prN4VKAz
-            rqQdZyGp3SY1tB3q1qHk2TCySL70FZLcT0mdPHHU8bt8kn9M3HWEAHo0TJuoH7K3
+            3DqGFHZscPoaIrtd06JaaMlO06oro8rfzwF6fgUR5sEw2bPkcTXQM+oodVrJ0yZ9
-            qlwWnPh0OQuF+AUkmsAzCUDcBpW9CNHifPJjHWgSlhsH+r4DrYdIzGi2vaTDhXU8
+            B6aNcsEL/jKpvycAImHtXOk2S7I8s4pQ3KArHmBg4Rvlg89CFdTpWLKQbm7JT5//
-            GMHlEuZ2wrgra78avw9G/v+7I/cnnkzMnFc3zR6F+FbSv9S/w4Z4YCEv4AhLRUox
+            CCXAP6jfg411t+G11RbLkrBvNPCSArLmXjWGSEhwn7OrhlnparqULfxk+ngaN8Sk
-            T03kG8r/Gv5UTFZ08TnRGXNzICykBfIHXg5xsXB+ePgh/djD3fLDlByEc8BhE2T/
+            yyadvSN2CCi3J6bLxgY7TFNIh9Ikrres/KHBfXRrTryqFLdgSRBQFJyL+MXInhWz
-            8MbkgNbj7i3V0E3+I53NJocCGkH/SwBOwKlvbstop5eQTN+nuBQC5nYnupO7n1cf
+            x+Suc90+szNR5kbeIOrQzoIRNYd+UERm68MhP+G6ul6b6O1gaRfTnX4utFsu9blM
-            wY6gIqODXZjQRItNuygE7yNDkVsF3pcb0/uRNFxc2rkUJQMT2OqusThuvVU1HLho
+            eu3PyrNhjq6J4mYwRUVVcCV0WmUsuw26TUw+K1ojLWSz0vjyFs+lFFrQLQLaUVH7
-            LHYPzx8bvWoPHwY1oFvB+VXU9K5J00jzkAjONRTMqIMYceoqncInoiArjDi+Bby3
+            RFhHRS2BnHS7vYkwjaaixQOGxu6noyIoFaOKlez300NybJyEgbCIJW46iRvb5mDK
-            HGjTblEik+2cuKc9JF6cuwfrSKhrNgoqm7nhNS0beF4Uf+0xvpo1urfAAYycIjWy
+            /Gp5+ysJxUA5cyYrY5EnUW1xsU0NlCtkUdJavqkw/nhb1dSkNCUgfjpoRQWLr8na
-            SC/wPAzwsvU92l7LilfVn8seX+1jVIZnzkxxk2z0USuoRR5Fiiuf3O1zBMOKOU6E
+            K759JWROPwXkImvSxYbkpG5bO2lMyblWUMBiAAelvaCgjESZcI19ytGq8p1MqyuW
-            /ExchxWvA/9USgvPjtc8JCrZUxIRrI03hIwILzLXOriA2T68ejp8613DnuZuJHLU
+            8I/ZIxf5IUxlnGkGi1Ficc37UZOdktG2HuUb71dEfo6PFbdC7HSKHMfMBDRdtmfU
-            aAEJAhBLSQzeER6pJ3hCGsB6kMcivumgRoWt9qonf0KqPTb4gRO8KFL2pbV04x58
+            aAEJAhC7kAFkb+T/ov90bpcSQh88UPdEKoo94HPZ8t/kwrt3pGKfgkl2Dvf/CIKz
-            v4FJ3nqUelKEdM9C5oXdHBdiG48gm+EOxzSzey0xRJqsVHi7S7tCj39HR3h47r/k
+            sz9TJpR38q4hl8R+yRFddGiuY52Yz7vRtjDlcHHaw0NXhE/uZ2aTLGzojyx8UlYS
-            hhBax1k3ZD0e
+            BzfT29tYrm4T
-            =doxn
+            =VB3Z
             -----END PGP MESSAGE-----
           fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D
     encrypted_regex: ^(data|stringData)$

kubernetes/main/apps/download/sonarr/app/helm-release.yaml

@@ -17,7 +17,7 @@ spec:
 
   values:
     controllers:
-      main:
+      sonarr:
         initContainers:
           init-db:
             image:
@@ -28,7 +28,7 @@ spec:
                   name: sonarr-secret
 
         containers:
-          sonarr:
+          app:
             image:
               repository: ghcr.io/onedr0p/sonarr-develop
               tag: 4.0.9.2457
@@ -37,7 +37,7 @@ spec:
               TZ: America/New_York
               SONARR__APP__INSTANCENAME: Sonarr
               SONARR__APP__THEME: dark
-              SONARR__AUTH_METHOD: External
+              SONARR__AUTH__METHOD: External
               SONARR__AUTH__REQUIRED: DisabledForLocalAddresses
               SONARR__LOG__DBENABLED: "False"
               SONARR__LOG__LEVEL: info
@@ -96,8 +96,8 @@ spec:
         fsGroupChangePolicy: OnRootMismatch
 
     service:
-      main:
+      app:
-        controller: main
+        controller: sonarr
 
         ports:
           http:
@@ -107,7 +107,7 @@ spec:
             protocol: HTTP
 
     ingress:
-      main:
+      app:
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-production
           traefik.ingress.kubernetes.io/router.entrypoints: websecure
@@ -118,7 +118,7 @@ spec:
           paths:
           - path: /
             service:
-              identifier: main
+              identifier: app
               port: http
 
     persistence: