Compare commits

..

2 Commits

3 changed files with 100 additions and 86 deletions

View File

@ -17,23 +17,22 @@ spec:
values:
controllers:
main:
pod:
securityContext:
runAsNonRoot: true
runAsUser: 10000
runAsGroup: 10000
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch
radarr:
initContainers:
init-db:
image:
repository: ghcr.io/onedr0p/postgres-init
tag: 16
envFrom: &envFrom
- secretRef:
name: radarr-secret
containers:
radarr:
app:
image:
repository: ghcr.io/onedr0p/radarr-develop
tag: 5.12.0.9255
envFrom:
- secretRef:
name: radarr-secret
envFrom: *envFrom
env:
TZ: America/New_York
RADARR__APP__INSTANCENAME: Radarr
@ -44,9 +43,6 @@ spec:
RADARR__LOG__LEVEL: info
RADARR__SERVER__PORT: &port 7878
RADARR__UPDATE__BRANCH: develop
RADARR__POSTGRES__HOST: postgresql.database.svc
RADARR__POSTGRES__PORT: "5432"
RADARR__POSTGRES__MAINDB: radarr_main
probes:
liveness: &probes
enabled: true
@ -79,17 +75,37 @@ spec:
env:
- name: URL
value: "http://localhost"
- name: CONFIG
value: "/config/config.xml"
- name: PORT
value: 9000
value: &metricsPort 9000
- name: ENABLE_ADDITIONAL_METRICS
value: "true"
- name: ENABLE_UNKNOWN_QUEUE_ITEMS
value: "true"
- name: API_KEY
secretKeyRef:
name: radarr-secret
key: RADARR__AUTH__APIKEY
defaultPodOptions:
securityContext:
runAsNonRoot: true
runAsUser: 10000
runAsGroup: 10000
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch
service:
app:
controller: radarr
ports:
http:
port: *port
metrics:
port: *metricsPort
protocol: HTTP
ingress:
main:
app:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
@ -100,20 +116,9 @@ spec:
paths:
- path: /
service:
identifier: main
identifier: app
port: http
service:
main:
controller: main
ports:
http:
port: *port
metrics:
port: 9000
protocol: HTTP
persistence:
config:
#type: hostPath

View File

@ -4,69 +4,78 @@ metadata:
name: radarr-secret
namespace: download
stringData:
RADARR__AUTH__APIKEY: ENC[AES256_GCM,data:n6NygOta67GMqWV6+Q3EjU3JyhY84xNf546FfpOMi4k=,iv:IRGuOPzo0azEmznl0tKe+v9QhwogjjUsMUR9oGqncdU=,tag:O2WEgQxh6E3g7mRJ41Vbwg==,type:str]
RADARR__POSTGRES__USER: ENC[AES256_GCM,data:nAaR02DM,iv:xh8ahgckhgFZDu7snxQFM19x8qC5s7smn1hSjY+zxLw=,tag:0ziWTKZq5tjMrdhoFQY6jw==,type:str]
RADARR__POSTGRES__PASSWORD: ENC[AES256_GCM,data:6fXWGDYTjoSkJ7jccI3/5hCC6jsKPwh/CgM7hBlUu9g=,iv:vOX435yfn0V4ZPR6OOQgsnQlQZI+TPTjsuiAvgcpAMA=,tag:z5Ctt5dd/rq9alCiUDLcTA==,type:str]
RADARR__AUTH__APIKEY: ENC[AES256_GCM,data:da21Mpdzskzly0EQVuF/4f21a3jQwjU6MLQYAEAXBo4=,iv:KXHPkPqg/Kz2KPaMtJxoiTyPmzFGgsEKdn9fBNZejlY=,tag:9/SwZfS45QDA9FGAQOfF1Q==,type:str]
RADARR__POSTGRES__HOST: ENC[AES256_GCM,data:Cgj9nQs+n7rDQ6aaFm0DAQPMz7l3wag=,iv:BYVmLJZzGPVQ0eVyOhf5BM1PWqhukvhgOPMHTrZpSCo=,tag:mm2UFryQXqMzJeAhVq4KMA==,type:str]
RADARR__POSTGRES__PORT: ENC[AES256_GCM,data:SvLVaw==,iv:6/SZzOp+oM8U+m1P9bFRJSqzSZMNuhE8cSFrtNSl3qk=,tag:36M/4Th+aAlEUuiX3Ot2Ew==,type:str]
RADARR__POSTGRES__MAINDB: ENC[AES256_GCM,data:qCTI7unY1de3mf8=,iv:Vb9fe/aGUFGbUjIomjnOFkPHiY9bMt1aSrDYCp0FnrE=,tag:UX2I+3O1YgivZxtFZ47sFA==,type:str]
RADARR__POSTGRES__USER: ENC[AES256_GCM,data:imCnEg3J,iv:ehq/1hG7wKjUAqHHhTDEQGTM3DsqK5CDUa1ZvwY49D0=,tag:PDZiV9O8kbSK4xFMOWkRZg==,type:str]
RADARR__POSTGRES__PASSWORD: ENC[AES256_GCM,data:tIrRv5kgomfXIuliEQqe41D1JlbmA3A2I51Y0Mh1hic=,iv:ggPAAt7oRcGnl1HQgmJGl4YV5LmgtZaDTB77Arjk1kA=,tag:2xEKFoDW5jk7IAcnmBubcQ==,type:str]
INIT_POSTGRES_DBNAME: ENC[AES256_GCM,data:BVH44RPEsXwaAQA=,iv:jKt9U5ClXDYp8nUF2ckHuq6tW9QvGp+vtKaAGknwW0U=,tag:wHc31hgysvIEIs8m3jugfA==,type:str]
INIT_POSTGRES_HOST: ENC[AES256_GCM,data:SzsEdOzpOSxrtZoX/q0qjRVPRDPAlAk=,iv:ISC6u9amrLpbsIj86GwZ3QA9SkbXUlLW334z10ut/e4=,tag:2x8IpVXn4sGcTDJGBvSs+A==,type:str]
INIT_POSTGRES_PORT: ENC[AES256_GCM,data:fJrlPA==,iv:vzGNqLQoW0+ObpxBUCOkLjZiUl1HM7pkW3KQFZbQ0u8=,tag:T8fMkxriSi/ZB/yL/8vmSQ==,type:str]
INIT_POSTGRES_USER: ENC[AES256_GCM,data:V0II9Z0Y,iv:NRCNuNd7zp99mvwQre34gFYDVT2JT0P+xjerle4qr3g=,tag:iozz/sCdORi9cVDEB4Yi0g==,type:str]
INIT_POSTGRES_PASS: ENC[AES256_GCM,data:vRuZA9dGH4PNVbNLgm3kzjF4fMLtxusDqg1BeG3B2yE=,iv:N8DluQLDorfctbbYbTWfSjyhFyKkHIf9UMyb32uQy2Y=,tag:ECZxkGhhOly8iuddITcEMA==,type:str]
INIT_POSTGRES_SUPER_PASS: ENC[AES256_GCM,data:LVeQ+IvDH81TbC/Dm2Xj+2dIWrJW3YUv2RLxA7pAW3A=,iv:XxkWlKNrHSO4wiS30ZzVwMl/DTQ7cRTu77/gFxNe17g=,tag:ibSoA0xWIuubCIwuOKKCTw==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age: []
lastmodified: "2024-10-15T01:16:00Z"
mac: ENC[AES256_GCM,data:t19Lz6df6hohcynjqib03Qj+uqpIC4eLSAJTLTqFEXBtRInsADbEsypvnyUU0Q4A2z6dUKZpP/SEncxAP/8WimaQvpfVPFsWeVUWHvK8ISz5bBxjscgwMI1/TRfA5/BfCMLmfyNDlOYAzshAzJ97aeXLDJKZvrnbMWNgvvMw6W4=,iv:DWRaA3APzKv9cOC0afeBfw2fzhLPraKKvMSNZa8yVQs=,tag:zrOAk8ZZP+8ThVc66RDJlQ==,type:str]
lastmodified: "2024-10-15T22:35:28Z"
mac: ENC[AES256_GCM,data:dK0FGO7fAsBFwqbC+IZfFvuVmYNS+W3FgSC8j/NskoYLK1iZJ+va1MjfIMIBH490LFhE6OFRXXfDdTjwjw6NUAF6OcWB+BHp32sw8CxY6oWQc1d4abSQYbAdSQ7JDL4JoayA4NUj4MUhLfW7Iq/Wew44SJi4+yiyg78XumtBGaE=,iv:LDOiT27sHWvVjgWl9L7HN9Zh9fARS5+KQGYLj9KWizI=,tag:9NJ/otTNDggW/BhGyuu3Nw==,type:str]
pgp:
- created_at: "2024-10-15T01:16:00Z"
- created_at: "2024-10-15T22:35:28Z"
enc: |-
-----BEGIN PGP MESSAGE-----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=Vl2t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=DnkV
-----END PGP MESSAGE-----
fp: BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD
- created_at: "2024-10-15T01:16:00Z"
- created_at: "2024-10-15T22:35:28Z"
enc: |-
-----BEGIN PGP MESSAGE-----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=doxn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=VB3Z
-----END PGP MESSAGE-----
fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D
encrypted_regex: ^(data|stringData)$

View File

@ -17,7 +17,7 @@ spec:
values:
controllers:
main:
sonarr:
initContainers:
init-db:
image:
@ -28,7 +28,7 @@ spec:
name: sonarr-secret
containers:
sonarr:
app:
image:
repository: ghcr.io/onedr0p/sonarr-develop
tag: 4.0.9.2457
@ -37,7 +37,7 @@ spec:
TZ: America/New_York
SONARR__APP__INSTANCENAME: Sonarr
SONARR__APP__THEME: dark
SONARR__AUTH_METHOD: External
SONARR__AUTH__METHOD: External
SONARR__AUTH__REQUIRED: DisabledForLocalAddresses
SONARR__LOG__DBENABLED: "False"
SONARR__LOG__LEVEL: info
@ -96,8 +96,8 @@ spec:
fsGroupChangePolicy: OnRootMismatch
service:
main:
controller: main
app:
controller: sonarr
ports:
http:
@ -107,7 +107,7 @@ spec:
protocol: HTTP
ingress:
main:
app:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
traefik.ingress.kubernetes.io/router.entrypoints: websecure
@ -118,7 +118,7 @@ spec:
paths:
- path: /
service:
identifier: main
identifier: app
port: http
persistence: