Automated Manifest Update (#4405)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #4405
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml

@@ -146,7 +146,6 @@ data:
         sonarr                          IN      CNAME   traefik-cl01tl
         sonarr-4k                       IN      CNAME   traefik-cl01tl
         sonarr-anime                    IN      CNAME   traefik-cl01tl
-        spotisub                        IN      CNAME   traefik-cl01tl
         stalwart                        IN      CNAME   traefik-cl01tl
         tdarr                           IN      CNAME   traefik-cl01tl
         tubearchivist                   IN      CNAME   traefik-cl01tl

clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml

@@ -22,7 +22,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/configMaps: 0c7df497327f1d8c1286bbbebb1f4827e47861b632504494f6b91351f137890a
+        checksum/configMaps: 841b86021474fd4676f79d87f40b9003cbde5ace583c0c78da5bb8de6dfeafbb
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: blocky

clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml

@@ -504,7 +504,6 @@ data:
       - type: ntfy
       conditions:
       - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
       group: core
       interval: 30s
       name: sonarr
@@ -513,7 +512,6 @@ data:
       - type: ntfy
       conditions:
       - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
       group: core
       interval: 30s
       name: sonarr-4k
@@ -522,7 +520,6 @@ data:
       - type: ntfy
       conditions:
       - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
       group: core
       interval: 30s
       name: sonarr-anime
@@ -531,7 +528,6 @@ data:
       - type: ntfy
       conditions:
       - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
       group: core
       interval: 30s
       name: radarr
@@ -540,7 +536,6 @@ data:
       - type: ntfy
       conditions:
       - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
       group: core
       interval: 30s
       name: radarr-4k
@@ -549,7 +544,6 @@ data:
       - type: ntfy
       conditions:
       - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
       group: core
       interval: 30s
       name: radarr-anime
@@ -558,7 +552,6 @@ data:
       - type: ntfy
       conditions:
       - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
       group: core
       interval: 30s
       name: radarr-standup
@@ -567,7 +560,6 @@ data:
       - type: ntfy
       conditions:
       - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
       group: core
       interval: 30s
       name: lidarr
@@ -590,15 +582,6 @@ data:
       interval: 30s
       name: music-grabber
       url: https://music-grabber.alexlebens.net
-    - alerts:
-      - type: ntfy
-      conditions:
-      - '[STATUS] == 200'
-      - '[CERTIFICATE_EXPIRATION] > 240h'
-      group: core
-      interval: 30s
-      name: spotisub
-      url: https://spotisub.alexlebens.net
     - alerts:
       - type: ntfy
       conditions:

clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml

@@ -26,7 +26,7 @@ spec:
         app.kubernetes.io/name: gatus
         app.kubernetes.io/instance: gatus
       annotations:
-        checksum/config: 37cc851f2a403f231439e4af7d0f920e653fe8020cb9866c1aca97ec802b5059
+        checksum/config: d76358254349c6de26a01030efc00da14b8bae8304d04a0687ce9e75dfa1a1b6
     spec:
       serviceAccountName: default
       automountServiceAccountToken: false

clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml

@@ -654,12 +654,6 @@ data:
             href: https://music-grabber.alexlebens.net
             siteMonitor: http://music-grabber.music-grabber:80
             statusStyle: dot
-        - Spotisub:
-            icon: sh-spotify.webp
-            description: Replicate Spotify playlists
-            href: https://spotisub.alexlebens.net
-            siteMonitor: http://spotisub.spotisub:80
-            statusStyle: dot
         - slskd:
             icon: sh-slskd.webp
             description: slskd

clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml

@@ -24,7 +24,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/configMaps: d6b3d87be5638042898e9b3e7f494bf2415fd7092ea263ad7826ae488e1b3105
+        checksum/configMaps: 573ca6f144a19f8b85a6b85f0a37999c5022c7b4d052f68473f06cba1571043d
         checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
       labels:
         app.kubernetes.io/controller: main

clusters/cl01tl/manifests/spotisub/Deployment-spotisub.yaml

@@ -1,178 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: spotisub
-  labels:
-    app.kubernetes.io/controller: main
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: spotisub
-    helm.sh/chart: spotisub-4.6.2
-  namespace: spotisub
-spec:
-  revisionHistoryLimit: 3
-  replicas: 1
-  strategy:
-    type: Recreate
-  selector:
-    matchLabels:
-      app.kubernetes.io/controller: main
-      app.kubernetes.io/name: spotisub
-      app.kubernetes.io/instance: spotisub
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/controller: main
-        app.kubernetes.io/instance: spotisub
-        app.kubernetes.io/name: spotisub
-    spec:
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      containers:
-        - env:
-            - name: VPN_SERVICE_PROVIDER
-              value: protonvpn
-            - name: VPN_TYPE
-              value: wireguard
-            - name: WIREGUARD_PRIVATE_KEY
-              valueFrom:
-                secretKeyRef:
-                  key: private-key
-                  name: spotisub-wireguard-conf
-            - name: UPDATER_PROTONVPN_EMAIL
-              valueFrom:
-                secretKeyRef:
-                  key: proton-email
-                  name: spotisub-wireguard-conf
-            - name: UPDATER_PROTONVPN_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  key: proton-password
-                  name: spotisub-wireguard-conf
-            - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 10.0.0.0/8
-            - name: FIREWALL_INPUT_PORTS
-              value: "5183"
-            - name: DNS_UPSTREAM_RESOLVER_TYPE
-              value: dot
-          image: ghcr.io/qdm12/gluetun:v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
-          imagePullPolicy: IfNotPresent
-          lifecycle:
-            postStart:
-              exec:
-                command:
-                  - /bin/sh
-                  - -c
-                  - (ip rule del table 51820; ip -6 rule del table 51820) || true
-          livenessProbe:
-            exec:
-              command:
-                - /gluetun-entrypoint
-                - healthcheck
-            failureThreshold: 5
-            initialDelaySeconds: 30
-            periodSeconds: 30
-            successThreshold: 1
-            timeoutSeconds: 15
-          name: gluetun
-          resources:
-            limits:
-              devic.es/tun: "1"
-            requests:
-              cpu: 10m
-              devic.es/tun: "1"
-              memory: 128Mi
-          securityContext:
-            capabilities:
-              add:
-                - NET_ADMIN
-                - SYS_MODULE
-            privileged: true
-        - env:
-            - name: SPOTIPY_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  key: spotify-client-id
-                  name: spotisub-config-secret
-            - name: SPOTIPY_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  key: spotify-client-secret
-                  name: spotisub-config-secret
-            - name: SPOTIPY_REDIRECT_URI
-              valueFrom:
-                secretKeyRef:
-                  key: spotify-redirect-uri
-                  name: spotisub-config-secret
-            - name: SUBSONIC_API_HOST
-              value: http://navidrome-main.navidrome
-            - name: SUBSONIC_API_PORT
-              value: "80"
-            - name: SUBSONIC_API_USER
-              valueFrom:
-                secretKeyRef:
-                  key: subsonic-user
-                  name: spotisub-config-secret
-            - name: SUBSONIC_API_PASS
-              valueFrom:
-                secretKeyRef:
-                  key: subsonic-password
-                  name: spotisub-config-secret
-            - name: PLAYLIST_PREFIX
-              value: 'Spotify - '
-            - name: NUM_USER_PLAYLISTS
-              value: "0"
-            - name: ARTIST_GEN_SCHED
-              value: "0"
-            - name: RECOMEND_GEN_SCHED
-              value: "0"
-            - name: SPOTDL_ENABLED
-              value: "1"
-            - name: SPOTDL_OUT_FORMAT
-              value: /mnt/store/Music Youtube/{artist}/{year} - {album}/{track-number} - {title}.{output-ext}
-            - name: LIDARR_ENABLED
-              value: "1"
-            - name: LIDARR_IP
-              value: http://lidarr.lidarr
-            - name: LIDARR_PORT
-              value: "80"
-            - name: LIDARR_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  key: lidarr-key
-                  name: spotisub-config-secret
-          image: blastbeng/spotisub:v0.3.7
-          imagePullPolicy: IfNotPresent
-          livenessProbe:
-            exec:
-              command:
-                - /bin/sh
-                - -c
-                - curl -s http://127.0.0.1:5183/api/v1/utils/healthcheck | grep -q 'Ok!'
-            failureThreshold: 5
-            initialDelaySeconds: 30
-            periodSeconds: 30
-            successThreshold: 1
-            timeoutSeconds: 15
-          name: main
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-          volumeMounts:
-            - mountPath: /home/user/spotisub/cache
-              name: cache
-            - mountPath: /mnt/store/Music Youtube/
-              name: music
-      volumes:
-        - name: cache
-          persistentVolumeClaim:
-            claimName: spotisub
-        - name: music
-          persistentVolumeClaim:
-            claimName: spotisub-nfs-storage

clusters/cl01tl/manifests/spotisub/ExternalSecret-spotisub-config-secret.yaml

@@ -1,56 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: spotisub-config-secret
-  namespace: spotisub
-  labels:
-    app.kubernetes.io/name: spotisub-config-secret
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/part-of: spotisub
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: spotify-client-id
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /spotify/andrew
-        metadataPolicy: None
-        property: client-id
-    - secretKey: spotify-client-secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /spotify/andrew
-        metadataPolicy: None
-        property: client-secret
-    - secretKey: spotify-redirect-uri
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /spotify/andrew
-        metadataPolicy: None
-        property: redirect-uri
-    - secretKey: subsonic-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/navidrome/andrew
-        metadataPolicy: None
-        property: user
-    - secretKey: subsonic-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/navidrome/andrew
-        metadataPolicy: None
-        property: password
-    - secretKey: lidarr-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/lidarr2/key
-        metadataPolicy: None
-        property: key

clusters/cl01tl/manifests/spotisub/ExternalSecret-spotisub-wireguard-conf.yaml

@@ -1,35 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: spotisub-wireguard-conf
-  namespace: spotisub
-  labels:
-    app.kubernetes.io/name: spotisub-wireguard-conf
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/part-of: spotisub
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: private-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: private-key
-    - secretKey: proton-email
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: email
-    - secretKey: proton-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: password

clusters/cl01tl/manifests/spotisub/HTTPRoute-spotisub.yaml

@@ -1,30 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: spotisub
-  labels:
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: spotisub
-    helm.sh/chart: spotisub-4.6.2
-  namespace: spotisub
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - "spotisub.alexlebens.net"
-  rules:
-    - backendRefs:
-        - group: ""
-          kind: Service
-          name: spotisub
-          namespace: spotisub
-          port: 80
-          weight: 100
-      matches:
-        - path:
-            type: PathPrefix
-            value: /

clusters/cl01tl/manifests/spotisub/Namespace-spotisub.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: spotisub
-  labels:
-    app.kubernetes.io/name: spotisub
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/part-of: spotisub
-    pod-security.kubernetes.io/audit: privileged
-    pod-security.kubernetes.io/enforce: privileged
-    pod-security.kubernetes.io/warn: privileged

clusters/cl01tl/manifests/spotisub/PersistentVolume-spotisub-nfs-storage.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: spotisub-nfs-storage
-  namespace: spotisub
-  labels:
-    app.kubernetes.io/name: spotisub-nfs-storage
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/part-of: spotisub
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music Youtube/
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/manifests/spotisub/PersistentVolumeClaim-spotisub-nfs-storage.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: spotisub-nfs-storage
-  namespace: spotisub
-  labels:
-    app.kubernetes.io/name: spotisub-nfs-storage
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/part-of: spotisub
-spec:
-  volumeName: spotisub-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/manifests/spotisub/PersistentVolumeClaim-spotisub.yaml

@@ -1,19 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: spotisub
-  labels:
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: spotisub
-    helm.sh/chart: spotisub-4.6.2
-  annotations:
-    helm.sh/resource-policy: keep
-  namespace: spotisub
-spec:
-  accessModes:
-    - "ReadWriteOnce"
-  resources:
-    requests:
-      storage: "1Gi"
-  storageClassName: "ceph-block"

clusters/cl01tl/manifests/spotisub/Service-spotisub.yaml

@@ -1,22 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: spotisub
-  labels:
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: spotisub
-    app.kubernetes.io/service: spotisub
-    helm.sh/chart: spotisub-4.6.2
-  namespace: spotisub
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 5183
-      protocol: TCP
-      name: http
-  selector:
-    app.kubernetes.io/controller: main
-    app.kubernetes.io/instance: spotisub
-    app.kubernetes.io/name: spotisub