feat(helm): update chart app-template to 3.5.1

kubernetes/main/apps/download/kapowarr/app/helm-release.yaml

@@ -1,4 +1,4 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
@@ -14,10 +14,9 @@ spec:
         kind: HelmRepository
         name: bjws-charts
         namespace: flux-system
-
   values:
     controllers:
-      main:
+      kapowarr:
         pod:
           securityContext:
             runAsNonRoot: true
@@ -25,29 +24,26 @@ spec:
             runAsGroup: 10000
             fsGroup: 10000
             fsGroupChangePolicy: OnRootMismatch
-
         containers:
-          main:
+          app:
             image:
               repository: git.seanomik.net/seanomik/kapowarr
-              tag: rolling-e74ec0e4
+              tag: v1.0.0
               pullPolicy: Always
 
     service:
       app:
-        controller: main
+        controller: kapowarr
-
         ports:
           http:
             port: 5656
 
     ingress:
-      main:
+      app:
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-production
           traefik.ingress.kubernetes.io/router.entrypoints: websecure
           traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd
-
         hosts:
         - host: "kapowarr.${SECRET_NEW_DOMAIN}"
           paths:
@@ -57,14 +53,12 @@ spec:
               port: http
 
     persistence:
+      data:
+        existingClaim: kapowarr
+        globalMounts:
+        - path: /data
       storage:
         type: hostPath
         hostPath: /mnt/MainPool/Media
         globalMounts:
         - path: /storage
-
-      config:
-        type: hostPath
-        hostPath: /mnt/MainPool/Kubernetes/kapowarr
-        globalMounts:
-        - path: /app/db

kubernetes/main/apps/download/kapowarr/ks.yaml

@@ -0,0 +1,32 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app kapowarr
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  targetNamespace: download
+  path: ./kubernetes/main/apps/download/kapowarr/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  dependsOn:
+    - name: openebs
+    - name: openebs-sc
+    - name: volsync
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets
+    substitute:
+      APP: *app
+      VOLSYNC_CAPACITY: 5Gi

kubernetes/main/apps/download/kapowarr/kustomization.yaml

@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-- ./helm-release.yaml

kubernetes/main/apps/download/kustomization.yaml

@@ -14,5 +14,5 @@ resources:
 - ./unpackerr
 - ./media-dashboard.yaml
 - ./flaresolverr
-- ./kapowarr
+- ./kapowarr/ks.yaml
 - ./sabnzbd

kubernetes/main/apps/media/komga/app/helm-release.yaml

@@ -1,8 +1,8 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json
+# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2.schema.json
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
-  name: ampache
+  name: komga
 spec:
   interval: 5m
   chart:
@@ -13,19 +13,16 @@ spec:
         kind: HelmRepository
         name: bjws-charts
         namespace: flux-system
-
   values:
     controllers:
-      ampache:
+      komga:
         containers:
           app:
             image:
-              repository: ampache/ampache
+              repository: gotson/komga
-              tag: nosql7.0.1
+              tag: 1.14.1
-            
             env:
-              DISABLE_INOTIFYWAIT_CLEAN: 0
+              TZ: America/New_York
-            
             probes:
               liveness: &probes
                 enabled: true
@@ -33,7 +30,7 @@ spec:
                 spec:
                   httpGet:
                     path: /
-                    port: &port 80
+                    port: &port 25600
                   initialDelaySeconds: 0
                   periodSeconds: 10
                   timeoutSeconds: 1
@@ -44,23 +41,28 @@ spec:
                 spec:
                   failureThreshold: 30
                   periodSeconds: 10
+            resources:
+              requests:
+                cpu: 2m
+                memory: 1500Mi
+              limits:
+                memory: 3200Mi
 
 #            securityContext:
 #              allowPrivilegeEscalation: false
 #              readOnlyRootFilesystem: true
 #              capabilities: { drop: ["ALL"] }
 
-    defaultPodOptions:
+#    defaultPodOptions:
-      securityContext:
+#      securityContext:
-#        runAsNonRoot: true
+#        runAsUser: 10000
-        runAsUser: 10000
+#        runAsGroup: 10000
-        runAsGroup: 10000
+#        fsGroup: 10000
-        fsGroup: 10000
+#        fsGroupChangePolicy: OnRootMismatch
-        fsGroupChangePolicy: OnRootMismatch
     
     service:
       app:
-        controller: ampache
+        controller: komga
         ports:
           http:
             port: *port
@@ -70,9 +72,8 @@ spec:
         annotations:
           cert-manager.io/cluster-issuer: letsencrypt-production
           traefik.ingress.kubernetes.io/router.entrypoints: websecure
-        #className: external
         hosts:
-          - host: "ampache.${SECRET_NEW_DOMAIN}"
+          - host: "comics.${SECRET_NEW_DOMAIN}"
             paths:
               - path: /
                 service:
@@ -80,19 +81,13 @@ spec:
                   port: http
                   
     persistence:
-      config:
+      data:
-        existingClaim: ampache
+        existingClaim: komga
         globalMounts:
-          - path: /var/www/config
+          - path: /config
-
+      storage:
-      logs:
-        type: emptyDir
-        globalMounts:
-          - path: /var/log/ampache
-      
-      music:
         type: hostPath
         hostPath: /mnt/MainPool/Media/Media
         globalMounts:
-          - path: /media
+          - path: /storage
-            readOnly: true
+            #readOnly: true

kubernetes/main/apps/media/komga/app/kustomization.yaml

@@ -1,4 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+- ../../../../../common/templates/volsync
 - ./helm-release.yaml

kubernetes/main/apps/media/komga/helm-release.yaml

@@ -1,67 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: komga
-  namespace: media
-spec:
-  interval: 5m
-  chart:
-    spec:
-      chart: app-template
-      version: 3.5.x
-      sourceRef:
-        kind: HelmRepository
-        name: bjws-charts
-        namespace: flux-system
-
-  values:
-    image:
-      repository: gotson/komga
-      tag: "1.14.1"
-
-    env:
-      TZ: America/New_York
-
-    service:
-      main:
-        ports:
-          http:
-            port: 25600
-
-    probes:
-      liveness:
-        enabled: false
-
-    ingress:
-      main:
-        enabled: true
-        annotations:
-          cert-manager.io/cluster-issuer: letsencrypt-production
-          traefik.ingress.kubernetes.io/router.entrypoints: websecure
-        hosts:
-          - host: &host "comics.${SECRET_NEW_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
-        tls:
-          - hosts:
-              - *host
-
-    persistence:
-      config:
-        enabled: true
-        type: hostPath
-        hostPath: /mnt/MainPool/Kubernetes/komga
-        mountPath: /config
-      storage:
-        enabled: true
-        type: hostPath
-        hostPath: /mnt/MainPool/Media/Media
-        mountPath: /storage
-
-    resources:
-      requests:
-        cpu: 2m
-        memory: 1500Mi
-      limits:
-        memory: 3200Mi

kubernetes/main/apps/media/komga/ks.yaml

@@ -2,13 +2,13 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: &app ampache
+  name: &app komga
   namespace: flux-system
 spec:
   timeout: 5m
   interval: 10m
   targetNamespace: media
-  path: ./kubernetes/main/apps/media/ampache/app
+  path: ./kubernetes/main/apps/media/komga/app
   prune: true
   sourceRef:
     kind: GitRepository
@@ -28,4 +28,4 @@ spec:
         name: cluster-secrets
     substitute:
       APP: *app
-      VOLSYNC_CAPACITY: 15Gi
+      VOLSYNC_CAPACITY: 5Gi

kubernetes/main/apps/media/kustomization.yaml

@@ -3,7 +3,7 @@ kind: Kustomization
 resources:
 - ./namespace.yaml
 #- ./network_policy.yaml
-- ./komga
+- ./komga/ks.yaml
 - ./kavita
 - ./jellyfin
 - ./jellyseerr
@@ -12,5 +12,4 @@ resources:
 - ./tautulli
 - ./ombi
 - ./freshrss
-- ./navidrome/ks.yaml
+- ./navidrome/ks.yaml
-- ./ampache/ks.yaml