apiVersion: helm.toolkit.fluxcd.io/v2beta2 kind: HelmRelease metadata: name: readarr-ebooks namespace: download spec: interval: 5m chart: spec: chart: app-template version: 1.3.x sourceRef: kind: HelmRepository name: bjws-charts namespace: flux-system values: image: repository: ghcr.io/onedr0p/readarr-develop tag: "0.3.15.2376" pullPolicy: Always # Metrics sidecar sidecars: exportarr: image: ghcr.io/onedr0p/exportarr:v1.5.3 args: - readarr ports: - name: metrics containerPort: 9000 env: - name: URL value: "http://localhost" - name: CONFIG value: "/config/config.xml" - name: PORT value: 9000 - name: ENABLE_ADDITIONAL_METRICS value: "true" - name: ENABLE_UNKNOWN_QUEUE_ITEMS value: "true" volumeMounts: - name: config mountPath: /config readOnly: true env: TZ: America/New_York service: main: labels: app: ebook-readarr-service ports: http: port: 8787 metrics: enabled: true port: 9000 protocol: HTTP probes: liveness: enabled: true custom: true spec: httpGet: path: /ping port: 8787 initialDelaySeconds: 0 periodSeconds: 10 timeoutSeconds: 1 failureThreshold: 3 startup: enabled: false ingress: main: enabled: true annotations: cert-manager.io/cluster-issuer: letsencrypt-production traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.middlewares: traefik-authentik@kubernetescrd hosts: - host: &host "readarr-ebooks.${SECRET_NEW_DOMAIN}" paths: - path: / pathType: Prefix tls: - hosts: - *host secretName: wildcard-main-tls persistence: config: enabled: true type: hostPath hostPath: /mnt/MainPool/Kubernetes/readarr-ebooks mountPath: /config storage: enabled: true type: hostPath hostPath: /mnt/MainPool/Media mountPath: /storage podSecurityContext: runAsNonRoot: true runAsUser: 10000 runAsGroup: 10000 fsGroup: 10000 fsGroupChangePolicy: OnRootMismatch resources: requests: cpu: 1m memory: 150Mi limits: memory: 2000Mi