Merge pull request 'feat: Add ispon' (#6144) from tmp/ispon into main

Reviewed-on: #6144

clusters/cl01tl/helm/isponsorblocktv/Chart.yaml

@@ -0,0 +1,22 @@
+apiVersion: v2
+name: isponsorblocktv
+version: 1.0.0
+description: iSponsorBlockTV
+keywords:
+  - isponsorblocktv
+  - purpose
+home: https://docs.alexlebens.dev/applications/isponsorblocktv/
+sources:
+  - https://github.com/dmunozv04/iSponsorBlockTV
+  - https://github.com/dmunozv04/iSponsorBlockTV/pkgs/container/isponsorblocktv
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: isponsorblocktv
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/youtube.png
+# renovate: datasource=github-releases depName=dmunozv04/iSponsorBlockTV
+appVersion: v2.7.0

clusters/cl01tl/helm/isponsorblocktv/templates/_helpers.tpl

@@ -0,0 +1,14 @@
+{{/*
+Common labels
+*/}}
+{{- define "custom.labels" -}}
+{{ include "custom.selectorLabels" $ }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "custom.selectorLabels" -}}
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/part-of: {{ .Release.Name }}
+{{- end }}

clusters/cl01tl/helm/isponsorblocktv/templates/secret-provider-class.yaml

@@ -0,0 +1,18 @@
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: isponsorblocktv-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: isponsorblocktv-config
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  provider: openbao
+  parameters:
+    baoAddress: "http://openbao-internal.openbao:8200"
+    roleName: isponsorblocktv
+    objects: |
+      - objectName: config.json
+        fileName: config.json
+        secretPath: secret/data/cl01tl/isponsorblocktv/config
+        secretKey: config.json

clusters/cl01tl/helm/isponsorblocktv/values.yaml

@@ -0,0 +1,37 @@
+isponsorblocktv:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      serviceAccount:
+        name: isponsorblocktv
+      containers:
+        main:
+          image:
+            repository: ghcr.io/dmunozv04/isponsorblocktv
+            tag: v2.7.0@sha256:ff292ed53c9208ebfa7da3be7084bd863339d545a799bfefed5092396f5e8b4b
+          resources:
+            requests:
+              cpu: 1m
+              memory: 20Mi
+  serviceAccount:
+    isponsorblocktv:
+      enabled: true
+      staticToken: true
+persistence:
+  web-config:
+    type: custom
+    volumeSpec:
+      csi:
+        driver: secrets-store.csi.k8s.io
+        readOnly: true
+        volumeAttributes:
+          secretProviderClass: isponsorblocktv-config
+    advancedMounts:
+      main:
+        main:
+          - path: /app/data/config.json
+            readOnly: true
+            mountPropagation: None
+            subPath: config.json