From 3baacda67a6ad0749facdc7713b76d53e7f267f1 Mon Sep 17 00:00:00 2001 From: Alex Lebens Date: Tue, 25 Feb 2025 12:28:58 -0600 Subject: [PATCH] add radarr and sonarr --- .../cl01tl/applications/overseerr/Chart.yaml | 21 +++ .../overseerr/templates/external-secret.yaml | 57 +++++++ .../templates/replication-source.yaml | 27 ++++ .../cl01tl/applications/overseerr/values.yaml | 56 +++++++ .../cl01tl/applications/radarr5-4k/Chart.yaml | 31 ++++ .../radarr5-4k/templates/external-secret.yaml | 89 +++++++++++ .../templates/persistent-volume-claim.yaml | 19 +++ .../templates/persistent-volume.yaml | 25 +++ .../radarr5-4k/templates/prometheus-rule.yaml | 34 ++++ .../templates/replication-source.yaml | 32 ++++ .../radarr5-4k/templates/service-monitor.yaml | 21 +++ .../applications/radarr5-4k/values.yaml | 145 +++++++++++++++++ .../applications/radarr5-anime/Chart.yaml | 31 ++++ .../templates/external-secret.yaml | 89 +++++++++++ .../templates/persistent-volume-claim.yaml | 19 +++ .../templates/persistent-volume.yaml | 25 +++ .../templates/prometheus-rule.yaml | 34 ++++ .../templates/replication-source.yaml | 30 ++++ .../templates/service-monitor.yaml | 21 +++ .../applications/radarr5-anime/values.yaml | 143 +++++++++++++++++ .../applications/radarr5-standup/Chart.yaml | 30 ++++ .../templates/external-secret.yaml | 89 +++++++++++ .../templates/persistent-volume-claim.yaml | 19 +++ .../templates/persistent-volume.yaml | 25 +++ .../templates/prometheus-rule.yaml | 34 ++++ .../templates/replication-source.yaml | 32 ++++ .../templates/service-monitor.yaml | 21 +++ .../applications/radarr5-standup/values.yaml | 143 +++++++++++++++++ .../cl01tl/applications/radarr5/Chart.yaml | 30 ++++ .../radarr5/templates/external-secret.yaml | 89 +++++++++++ .../templates/persistent-volume-claim.yaml | 19 +++ .../radarr5/templates/persistent-volume.yaml | 25 +++ .../radarr5/templates/prometheus-rule.yaml | 34 ++++ .../radarr5/templates/replication-source.yaml | 32 ++++ .../radarr5/templates/service-monitor.yaml | 21 +++ .../cl01tl/applications/radarr5/values.yaml | 149 +++++++++++++++++ .../cl01tl/applications/sonarr4-4k/Chart.yaml | 31 ++++ .../sonarr4-4k/templates/external-secret.yaml | 89 +++++++++++ .../templates/persistent-volume-claim.yaml | 19 +++ .../templates/persistent-volume.yaml | 25 +++ .../sonarr4-4k/templates/prometheus-rule.yaml | 34 ++++ .../templates/replication-source.yaml | 35 ++++ .../sonarr4-4k/templates/service-monitor.yaml | 21 +++ .../applications/sonarr4-4k/values.yaml | 148 +++++++++++++++++ .../applications/sonarr4-anime/Chart.yaml | 30 ++++ .../templates/external-secret.yaml | 89 +++++++++++ .../templates/persistent-volume-claim.yaml | 19 +++ .../templates/persistent-volume.yaml | 25 +++ .../templates/prometheus-rule.yaml | 34 ++++ .../templates/replication-source.yaml | 35 ++++ .../templates/service-monitor.yaml | 21 +++ .../applications/sonarr4-anime/values.yaml | 148 +++++++++++++++++ .../cl01tl/applications/sonarr4/Chart.yaml | 30 ++++ .../sonarr4/templates/external-secret.yaml | 89 +++++++++++ .../templates/persistent-volume-claim.yaml | 19 +++ .../sonarr4/templates/persistent-volume.yaml | 25 +++ .../sonarr4/templates/prometheus-rule.yaml | 34 ++++ .../sonarr4/templates/replication-source.yaml | 35 ++++ .../sonarr4/templates/service-monitor.yaml | 21 +++ .../cl01tl/applications/sonarr4/values.yaml | 151 ++++++++++++++++++ 60 files changed, 2948 insertions(+) create mode 100644 clusters/cl01tl/applications/overseerr/Chart.yaml create mode 100644 clusters/cl01tl/applications/overseerr/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/overseerr/templates/replication-source.yaml create mode 100644 clusters/cl01tl/applications/overseerr/values.yaml create mode 100644 clusters/cl01tl/applications/radarr5-4k/Chart.yaml create mode 100644 clusters/cl01tl/applications/radarr5-4k/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/radarr5-4k/templates/persistent-volume-claim.yaml create mode 100644 clusters/cl01tl/applications/radarr5-4k/templates/persistent-volume.yaml create mode 100644 clusters/cl01tl/applications/radarr5-4k/templates/prometheus-rule.yaml create mode 100644 clusters/cl01tl/applications/radarr5-4k/templates/replication-source.yaml create mode 100644 clusters/cl01tl/applications/radarr5-4k/templates/service-monitor.yaml create mode 100644 clusters/cl01tl/applications/radarr5-4k/values.yaml create mode 100644 clusters/cl01tl/applications/radarr5-anime/Chart.yaml create mode 100644 clusters/cl01tl/applications/radarr5-anime/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/radarr5-anime/templates/persistent-volume-claim.yaml create mode 100644 clusters/cl01tl/applications/radarr5-anime/templates/persistent-volume.yaml create mode 100644 clusters/cl01tl/applications/radarr5-anime/templates/prometheus-rule.yaml create mode 100644 clusters/cl01tl/applications/radarr5-anime/templates/replication-source.yaml create mode 100644 clusters/cl01tl/applications/radarr5-anime/templates/service-monitor.yaml create mode 100644 clusters/cl01tl/applications/radarr5-anime/values.yaml create mode 100644 clusters/cl01tl/applications/radarr5-standup/Chart.yaml create mode 100644 clusters/cl01tl/applications/radarr5-standup/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/radarr5-standup/templates/persistent-volume-claim.yaml create mode 100644 clusters/cl01tl/applications/radarr5-standup/templates/persistent-volume.yaml create mode 100644 clusters/cl01tl/applications/radarr5-standup/templates/prometheus-rule.yaml create mode 100644 clusters/cl01tl/applications/radarr5-standup/templates/replication-source.yaml create mode 100644 clusters/cl01tl/applications/radarr5-standup/templates/service-monitor.yaml create mode 100644 clusters/cl01tl/applications/radarr5-standup/values.yaml create mode 100644 clusters/cl01tl/applications/radarr5/Chart.yaml create mode 100644 clusters/cl01tl/applications/radarr5/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/radarr5/templates/persistent-volume-claim.yaml create mode 100644 clusters/cl01tl/applications/radarr5/templates/persistent-volume.yaml create mode 100644 clusters/cl01tl/applications/radarr5/templates/prometheus-rule.yaml create mode 100644 clusters/cl01tl/applications/radarr5/templates/replication-source.yaml create mode 100644 clusters/cl01tl/applications/radarr5/templates/service-monitor.yaml create mode 100644 clusters/cl01tl/applications/radarr5/values.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-4k/Chart.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-4k/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-4k/templates/persistent-volume-claim.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-4k/templates/persistent-volume.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-4k/templates/prometheus-rule.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-4k/templates/replication-source.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-4k/templates/service-monitor.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-4k/values.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-anime/Chart.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-anime/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-anime/templates/persistent-volume-claim.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-anime/templates/persistent-volume.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-anime/templates/prometheus-rule.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-anime/templates/replication-source.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-anime/templates/service-monitor.yaml create mode 100644 clusters/cl01tl/applications/sonarr4-anime/values.yaml create mode 100644 clusters/cl01tl/applications/sonarr4/Chart.yaml create mode 100644 clusters/cl01tl/applications/sonarr4/templates/external-secret.yaml create mode 100644 clusters/cl01tl/applications/sonarr4/templates/persistent-volume-claim.yaml create mode 100644 clusters/cl01tl/applications/sonarr4/templates/persistent-volume.yaml create mode 100644 clusters/cl01tl/applications/sonarr4/templates/prometheus-rule.yaml create mode 100644 clusters/cl01tl/applications/sonarr4/templates/replication-source.yaml create mode 100644 clusters/cl01tl/applications/sonarr4/templates/service-monitor.yaml create mode 100644 clusters/cl01tl/applications/sonarr4/values.yaml diff --git a/clusters/cl01tl/applications/overseerr/Chart.yaml b/clusters/cl01tl/applications/overseerr/Chart.yaml new file mode 100644 index 000000000..cb00e50a7 --- /dev/null +++ b/clusters/cl01tl/applications/overseerr/Chart.yaml @@ -0,0 +1,21 @@ +apiVersion: v2 +name: overseerr +version: 1.0.0 +description: Overseerr +keywords: + - overseer + - media + - request +home: https://wiki.alexlebens.dev/doc/overseerr-pCUN6XnGR5 +sources: + - https://github.com/sct/overseerr + - https://github.com/sct/overseerr/pkgs/container/overseerr + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template +maintainers: + - name: alexlebens +dependencies: + - name: app-template + repository: https://bjw-s.github.io/helm-charts/ + version: 3.6.1 +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/overseerr.png +appVersion: 1.33.2 diff --git a/clusters/cl01tl/applications/overseerr/templates/external-secret.yaml b/clusters/cl01tl/applications/overseerr/templates/external-secret.yaml new file mode 100644 index 000000000..7bd972059 --- /dev/null +++ b/clusters/cl01tl/applications/overseerr/templates/external-secret.yaml @@ -0,0 +1,57 @@ +# apiVersion: external-secrets.io/v1beta1 +# kind: ExternalSecret +# metadata: +# name: overseerr-main-backup-secret +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: overseerr-main-backup-secret +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# secretStoreRef: +# kind: ClusterSecretStore +# name: vault +# target: +# template: +# mergePolicy: Merge +# engineVersion: v2 +# data: +# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/overseerr/overseerr-main" +# data: +# - secretKey: BUCKET_ENDPOINT +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: S3_BUCKET_ENDPOINT +# - secretKey: RESTIC_PASSWORD +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: RESTIC_PASSWORD +# - secretKey: AWS_DEFAULT_REGION +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: AWS_DEFAULT_REGION +# - secretKey: AWS_ACCESS_KEY_ID +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: access_key +# - secretKey: AWS_SECRET_ACCESS_KEY +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: secret_key diff --git a/clusters/cl01tl/applications/overseerr/templates/replication-source.yaml b/clusters/cl01tl/applications/overseerr/templates/replication-source.yaml new file mode 100644 index 000000000..8056fdae7 --- /dev/null +++ b/clusters/cl01tl/applications/overseerr/templates/replication-source.yaml @@ -0,0 +1,27 @@ +# apiVersion: volsync.backube/v1alpha1 +# kind: ReplicationSource +# metadata: +# name: overseerr-main-backup-source +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: overseerr-main-backup-source +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# sourcePVC: overseerr-main +# trigger: +# schedule: 0 0 */3 * * +# restic: +# pruneIntervalDays: 14 +# repository: overseerr-main-backup-secret +# retain: +# hourly: 1 +# daily: 1 +# weekly: 1 +# monthly: 2 +# yearly: 4 +# copyMethod: Snapshot +# storageClassName: ceph-block +# volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/applications/overseerr/values.yaml b/clusters/cl01tl/applications/overseerr/values.yaml new file mode 100644 index 000000000..97fb3afd8 --- /dev/null +++ b/clusters/cl01tl/applications/overseerr/values.yaml @@ -0,0 +1,56 @@ +app-template: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: ghcr.io/sct/overseerr + tag: 1.33.2 + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + resources: + requests: + cpu: 10m + memory: 512Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 5055 + protocol: HTTP + ingress: + tailscale: + enabled: true + className: tailscale + hosts: + - host: overseerr-cl01tl + paths: + - path: / + pathType: Prefix + service: + name: overseerr + port: 80 + tls: + - hosts: + - overseerr-cl01tl + persistence: + main: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 10Gi + retain: true + advancedMounts: + main: + main: + - path: /app/config + readOnly: false diff --git a/clusters/cl01tl/applications/radarr5-4k/Chart.yaml b/clusters/cl01tl/applications/radarr5-4k/Chart.yaml new file mode 100644 index 000000000..bf3507b12 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-4k/Chart.yaml @@ -0,0 +1,31 @@ +apiVersion: v2 +name: radarr5-4k +version: 1.0.0 +description: Radarr v5 4K +keywords: + - radarr + - servarr + - movies + - 4k + - metrics +home: https://wiki.alexlebens.dev/doc/radarr-T6nPLajWDP +sources: + - https://github.com/Radarr/Radarr + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/onedr0p/containers/pkgs/container/radarr + - https://github.com/onedr0p/exportarr/pkgs/container/exportarr + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: radarr5-4k + repository: https://bjw-s.github.io/helm-charts/ + version: 3.6.1 + - name: postgres-cluster + alias: postgres-17-cluster + version: 4.1.4 + repository: http://alexlebens.github.io/helm-charts +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/radarr.png +appVersion: 5.16.3 diff --git a/clusters/cl01tl/applications/radarr5-4k/templates/external-secret.yaml b/clusters/cl01tl/applications/radarr5-4k/templates/external-secret.yaml new file mode 100644 index 000000000..c83379eeb --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-4k/templates/external-secret.yaml @@ -0,0 +1,89 @@ +# apiVersion: external-secrets.io/v1beta1 +# kind: ExternalSecret +# metadata: +# name: radarr5-4k-config-backup-secret +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: radarr5-4k-config-backup-secret +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# secretStoreRef: +# kind: ClusterSecretStore +# name: vault +# target: +# template: +# mergePolicy: Merge +# engineVersion: v2 +# data: +# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5-4k/radarr5-4k-config" +# data: +# - secretKey: BUCKET_ENDPOINT +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: S3_BUCKET_ENDPOINT +# - secretKey: RESTIC_PASSWORD +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: RESTIC_PASSWORD +# - secretKey: AWS_DEFAULT_REGION +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: AWS_DEFAULT_REGION +# - secretKey: AWS_ACCESS_KEY_ID +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: access_key +# - secretKey: AWS_SECRET_ACCESS_KEY +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: secret_key + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: radarr5-4k-postgresql-17-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-4k-postgresql-17-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret diff --git a/clusters/cl01tl/applications/radarr5-4k/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/radarr5-4k/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..c816361fb --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-4k/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: radarr5-4k-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-4k-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeName: radarr5-4k-nfs-storage + storageClassName: nfs-client + accessModes: + - ReadWriteMany + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/radarr5-4k/templates/persistent-volume.yaml b/clusters/cl01tl/applications/radarr5-4k/templates/persistent-volume.yaml new file mode 100644 index 000000000..37cdb0dc6 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-4k/templates/persistent-volume.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: radarr5-4k-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: {{ .Release.Name }} + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + persistentVolumeReclaimPolicy: Retain + storageClassName: nfs-client + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + nfs: + path: /volume2/Storage + server: synologybond.alexlebens.net + mountOptions: + - vers=4 + - minorversion=1 + - noac diff --git a/clusters/cl01tl/applications/radarr5-4k/templates/prometheus-rule.yaml b/clusters/cl01tl/applications/radarr5-4k/templates/prometheus-rule.yaml new file mode 100644 index 000000000..cbbde00cf --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-4k/templates/prometheus-rule.yaml @@ -0,0 +1,34 @@ +apiVersion: monitoring.coreos.com/v1 +kind: PrometheusRule +metadata: + name: radarr5-4k + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-4k + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + groups: + - name: radarr5-4k + rules: + - alert: ExportarrAbsent + annotations: + description: Radarr5 4K Exportarr has disappeared from Prometheus + service discovery. + summary: Exportarr is down. + expr: | + absent(up{job=~".*radarr5_4k.*"} == 1) + for: 5m + labels: + severity: critical + - alert: Radarr54kDown + annotations: + description: Radarr5 4K service is down. + summary: Radarr5 4K is down. + expr: | + radarr5_4k_system_status{job=~".*radarr5_4k.*"} == 0 + for: 5m + labels: + severity: critical diff --git a/clusters/cl01tl/applications/radarr5-4k/templates/replication-source.yaml b/clusters/cl01tl/applications/radarr5-4k/templates/replication-source.yaml new file mode 100644 index 000000000..ddf9a5878 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-4k/templates/replication-source.yaml @@ -0,0 +1,32 @@ +# apiVersion: volsync.backube/v1alpha1 +# kind: ReplicationSource +# metadata: +# name: radarr5-4k-config-backup-source +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: radarr5-4k-config-backup-source +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# sourcePVC: radarr5-4k-config +# trigger: +# schedule: 0 0 */3 * * +# restic: +# pruneIntervalDays: 14 +# repository: radarr5-4k-config-backup-secret +# retain: +# hourly: 1 +# daily: 1 +# weekly: 1 +# monthly: 2 +# yearly: 4 +# moverSecurityContext: +# runAsUser: 1000 +# runAsGroup: 1000 +# fsGroup: 1000 +# fsGroupChangePolicy: OnRootMismatch +# copyMethod: Snapshot +# storageClassName: ceph-block +# volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/applications/radarr5-4k/templates/service-monitor.yaml b/clusters/cl01tl/applications/radarr5-4k/templates/service-monitor.yaml new file mode 100644 index 000000000..5e85f38ff --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-4k/templates/service-monitor.yaml @@ -0,0 +1,21 @@ +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: radarr5-4k + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-4k + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: radarr5-4k + app.kubernetes.io/instance: {{ .Release.Name }} + endpoints: + - port: metrics + interval: 3m + scrapeTimeout: 1m + path: /metrics diff --git a/clusters/cl01tl/applications/radarr5-4k/values.yaml b/clusters/cl01tl/applications/radarr5-4k/values.yaml new file mode 100644 index 000000000..ef6b510a4 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-4k/values.yaml @@ -0,0 +1,145 @@ +radarr5-4k: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + pod: + securityContext: + runAsUser: 1000 + runAsGroup: 1000 + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + containers: + main: + image: + repository: ghcr.io/linuxserver/radarr + tag: 5.18.4@sha256:b2d2bc9bafb76073d96142bda07ea90c6d6afd9207fe4ff2d4f9d3b50fcdbd76 + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: PUID + value: 1000 + - name: PGID + value: 1000 + probes: + liveness: + enabled: false + custom: true + spec: + exec: + command: + - /usr/bin/env + - bash + - -c + - curl --fail localhost:7878/api/v1/system/status?apiKey=`IFS=\> && while + read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml` + failureThreshold: 5 + initialDelaySeconds: 60 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 10 + resources: + requests: + cpu: 100m + memory: 256Mi + metrics: + image: + repository: ghcr.io/onedr0p/exportarr + tag: v2.0.1 + pullPolicy: IfNotPresent + args: ["radarr"] + env: + - name: URL + value: http://localhost + - name: CONFIG + value: /config/config.xml + - name: PORT + value: 9793 + - name: ENABLE_ADDITIONAL_METRICS + value: false + - name: ENABLE_UNKNOWN_QUEUE_ITEMS + value: false + resources: + requests: + cpu: 10m + memory: 256Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 7878 + protocol: HTTP + metrics: + port: 9793 + targetPort: 9793 + protocol: TCP + ingress: + tailscale: + enabled: true + className: tailscale + hosts: + - host: radarr-4k-cl01tl + paths: + - path: / + pathType: Prefix + service: + name: radarr5-4k + port: 80 + tls: + - hosts: + - radarr-4k-cl01tl + persistence: + config: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 20Gi + retain: true + advancedMounts: + main: + main: + - path: /config + readOnly: false + metrics: + - path: /config + readOnly: true + media: + existingClaim: radarr5-4k-nfs-storage + advancedMounts: + main: + main: + - path: /mnt/store + readOnly: false +postgres-17-cluster: + mode: recovery + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + monitoring: + enabled: true + bootstrap: + initdb: + database: app + owner: app + postInitSQL: + - CREATE DATABASE "radarr-main" OWNER "app"; + - CREATE DATABASE "radarr-log" OWNER "app"; + recovery: + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster + endpointCredentials: radarr5-4k-postgresql-17-cluster-backup-secret + backup: + enabled: false + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster + endpointCredentials: radarr5-4k-postgresql-17-cluster-backup-secret + backupIndex: 2 + retentionPolicy: "7d" diff --git a/clusters/cl01tl/applications/radarr5-anime/Chart.yaml b/clusters/cl01tl/applications/radarr5-anime/Chart.yaml new file mode 100644 index 000000000..97088cd19 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-anime/Chart.yaml @@ -0,0 +1,31 @@ +apiVersion: v2 +name: radarr5-anime +version: 1.0.0 +description: Radarr v5 Anime +keywords: + - radarr + - servarr + - movies + - anime + - metrics +home: https://wiki.alexlebens.dev/doc/radarr-T6nPLajWDP +sources: + - https://github.com/Radarr/Radarr + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/linuxserver/docker-radarr + - https://github.com/onedr0p/exportarr/pkgs/container/exportarr + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: radarr5-anime + repository: https://bjw-s.github.io/helm-charts/ + version: 3.6.1 + - name: postgres-cluster + alias: postgres-17-cluster + version: 4.1.4 + repository: http://alexlebens.github.io/helm-charts +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/radarr.png +appVersion: 5.16.3 diff --git a/clusters/cl01tl/applications/radarr5-anime/templates/external-secret.yaml b/clusters/cl01tl/applications/radarr5-anime/templates/external-secret.yaml new file mode 100644 index 000000000..17c63e296 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-anime/templates/external-secret.yaml @@ -0,0 +1,89 @@ +# apiVersion: external-secrets.io/v1beta1 +# kind: ExternalSecret +# metadata: +# name: radarr5-anime-config-backup-secret +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: radarr5-anime-config-backup-secret +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# secretStoreRef: +# kind: ClusterSecretStore +# name: vault +# target: +# template: +# mergePolicy: Merge +# engineVersion: v2 +# data: +# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5-anime/radarr5-anime-config" +# data: +# - secretKey: BUCKET_ENDPOINT +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: S3_BUCKET_ENDPOINT +# - secretKey: RESTIC_PASSWORD +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: RESTIC_PASSWORD +# - secretKey: AWS_DEFAULT_REGION +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: AWS_DEFAULT_REGION +# - secretKey: AWS_ACCESS_KEY_ID +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: access_key +# - secretKey: AWS_SECRET_ACCESS_KEY +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: secret_key + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: radarr5-anime-postgresql-17-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-anime-postgresql-17-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret diff --git a/clusters/cl01tl/applications/radarr5-anime/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/radarr5-anime/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..8ec11e013 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-anime/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: radarr5-anime-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-anime-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeName: radarr5-anime-nfs-storage + storageClassName: nfs-client + accessModes: + - ReadWriteMany + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/radarr5-anime/templates/persistent-volume.yaml b/clusters/cl01tl/applications/radarr5-anime/templates/persistent-volume.yaml new file mode 100644 index 000000000..bd1c7857c --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-anime/templates/persistent-volume.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: radarr5-anime-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: {{ .Release.Name }} + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + persistentVolumeReclaimPolicy: Retain + storageClassName: nfs-client + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + nfs: + path: /volume2/Storage + server: synologybond.alexlebens.net + mountOptions: + - vers=4 + - minorversion=1 + - noac diff --git a/clusters/cl01tl/applications/radarr5-anime/templates/prometheus-rule.yaml b/clusters/cl01tl/applications/radarr5-anime/templates/prometheus-rule.yaml new file mode 100644 index 000000000..6bf49e8e9 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-anime/templates/prometheus-rule.yaml @@ -0,0 +1,34 @@ +apiVersion: monitoring.coreos.com/v1 +kind: PrometheusRule +metadata: + name: radarr5-anime + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-anime + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + groups: + - name: radarr5-anime + rules: + - alert: ExportarrAbsent + annotations: + description: Radarr5 Anime Exportarr has disappeared from Prometheus + service discovery. + summary: Exportarr is down. + expr: | + absent(up{job=~".*radarr5_anime.*"} == 1) + for: 5m + labels: + severity: critical + - alert: Radarr5animeDown + annotations: + description: Radarr5 Anime service is down. + summary: Radarr5 Anime is down. + expr: | + radarr5_anime_system_status{job=~".*radarr5_anime.*"} == 0 + for: 5m + labels: + severity: critical diff --git a/clusters/cl01tl/applications/radarr5-anime/templates/replication-source.yaml b/clusters/cl01tl/applications/radarr5-anime/templates/replication-source.yaml new file mode 100644 index 000000000..c25c8adfb --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-anime/templates/replication-source.yaml @@ -0,0 +1,30 @@ +# apiVersion: volsync.backube/v1alpha1 +# kind: ReplicationSource +# metadata: +# name: radarr5-anime-config-backup-source +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: radarr5-anime-config-backup-source +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# sourcePVC: radarr5-anime-config +# trigger: +# schedule: 0 0 */3 * * +# restic: +# pruneIntervalDays: 14 +# repository: radarr5-anime-config-backup-secret +# retain: +# hourly: 1 +# daily: 1 +# weekly: 1 +# monthly: 2 +# yearly: 4 +# moverSecurityContext: +# fsGroup: 1000 +# fsGroupChangePolicy: OnRootMismatch +# copyMethod: Snapshot +# storageClassName: ceph-block +# volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/applications/radarr5-anime/templates/service-monitor.yaml b/clusters/cl01tl/applications/radarr5-anime/templates/service-monitor.yaml new file mode 100644 index 000000000..0a53e8c68 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-anime/templates/service-monitor.yaml @@ -0,0 +1,21 @@ +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: radarr5-anime + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-anime + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: radarr5-anime + app.kubernetes.io/instance: {{ .Release.Name }} + endpoints: + - port: metrics + interval: 3m + scrapeTimeout: 1m + path: /metrics diff --git a/clusters/cl01tl/applications/radarr5-anime/values.yaml b/clusters/cl01tl/applications/radarr5-anime/values.yaml new file mode 100644 index 000000000..718dd7611 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-anime/values.yaml @@ -0,0 +1,143 @@ +radarr5-anime: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + pod: + securityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + containers: + main: + image: + repository: ghcr.io/linuxserver/radarr + tag: 5.18.4@sha256:b2d2bc9bafb76073d96142bda07ea90c6d6afd9207fe4ff2d4f9d3b50fcdbd76 + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: PUID + value: 1000 + - name: PGID + value: 1000 + probes: + liveness: + enabled: false + custom: true + spec: + exec: + command: + - /usr/bin/env + - bash + - -c + - curl --fail localhost:7878/api/v1/system/status?apiKey=`IFS=\> && while + read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml` + failureThreshold: 5 + initialDelaySeconds: 60 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 10 + resources: + requests: + cpu: 10m + memory: 256Mi + metrics: + image: + repository: ghcr.io/onedr0p/exportarr + tag: v2.0.1 + pullPolicy: IfNotPresent + args: ["radarr"] + env: + - name: URL + value: http://localhost + - name: CONFIG + value: /config/config.xml + - name: PORT + value: 9793 + - name: ENABLE_ADDITIONAL_METRICS + value: false + - name: ENABLE_UNKNOWN_QUEUE_ITEMS + value: false + resources: + requests: + cpu: 100m + memory: 256Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 7878 + protocol: HTTP + metrics: + port: 9793 + targetPort: 9793 + protocol: TCP + ingress: + tailscale: + enabled: true + className: tailscale + hosts: + - host: radarr-anime-cl01tl + paths: + - path: / + pathType: Prefix + service: + name: radarr5-anime + port: 80 + tls: + - hosts: + - radarr-anime-cl01tl + persistence: + config: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 20Gi + retain: true + advancedMounts: + main: + main: + - path: /config + readOnly: false + metrics: + - path: /config + readOnly: true + media: + existingClaim: radarr5-anime-nfs-storage + advancedMounts: + main: + main: + - path: /mnt/store + readOnly: false +postgres-17-cluster: + mode: recovery + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + monitoring: + enabled: true + bootstrap: + initdb: + database: app + owner: app + postInitSQL: + - CREATE DATABASE "radarr-main" OWNER "app"; + - CREATE DATABASE "radarr-log" OWNER "app"; + recovery: + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster + endpointCredentials: radarr5-anime-postgresql-17-cluster-backup-secret + backup: + enabled: false + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster + endpointCredentials: radarr5-anime-postgresql-17-cluster-backup-secret + backupIndex: 2 + retentionPolicy: "7d" diff --git a/clusters/cl01tl/applications/radarr5-standup/Chart.yaml b/clusters/cl01tl/applications/radarr5-standup/Chart.yaml new file mode 100644 index 000000000..f4c249eeb --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-standup/Chart.yaml @@ -0,0 +1,30 @@ +apiVersion: v2 +name: radarr5-standup +version: 1.0.0 +description: Radarr v5 Stand Up +keywords: + - radarr + - servarr + - standup + - metrics +home: https://wiki.alexlebens.dev/doc/radarr-T6nPLajWDP +sources: + - https://github.com/Radarr/Radarr + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/linuxserver/docker-radarr + - https://github.com/onedr0p/exportarr/pkgs/container/exportarr + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: radarr5-standup + repository: https://bjw-s.github.io/helm-charts/ + version: 3.6.1 + - name: postgres-cluster + alias: postgres-17-cluster + version: 4.1.4 + repository: http://alexlebens.github.io/helm-charts +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/radarr.png +appVersion: 5.16.3 diff --git a/clusters/cl01tl/applications/radarr5-standup/templates/external-secret.yaml b/clusters/cl01tl/applications/radarr5-standup/templates/external-secret.yaml new file mode 100644 index 000000000..b09673e5b --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-standup/templates/external-secret.yaml @@ -0,0 +1,89 @@ +# apiVersion: external-secrets.io/v1beta1 +# kind: ExternalSecret +# metadata: +# name: radarr5-standup-config-backup-secret +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: radarr5-standup-config-backup-secret +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# secretStoreRef: +# kind: ClusterSecretStore +# name: vault +# target: +# template: +# mergePolicy: Merge +# engineVersion: v2 +# data: +# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5-standup/radarr5-standup-config" +# data: +# - secretKey: BUCKET_ENDPOINT +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: S3_BUCKET_ENDPOINT +# - secretKey: RESTIC_PASSWORD +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: RESTIC_PASSWORD +# - secretKey: AWS_DEFAULT_REGION +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: AWS_DEFAULT_REGION +# - secretKey: AWS_ACCESS_KEY_ID +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: access_key +# - secretKey: AWS_SECRET_ACCESS_KEY +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: secret_key + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: radarr5-standup-postgresql-17-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-standup-postgresql-17-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret diff --git a/clusters/cl01tl/applications/radarr5-standup/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/radarr5-standup/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..de0e783bd --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-standup/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: radarr5-standup-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-standup-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeName: radarr5-standup-nfs-storage + storageClassName: nfs-client + accessModes: + - ReadWriteMany + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/radarr5-standup/templates/persistent-volume.yaml b/clusters/cl01tl/applications/radarr5-standup/templates/persistent-volume.yaml new file mode 100644 index 000000000..6eda67f3a --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-standup/templates/persistent-volume.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: radarr5-standup-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: {{ .Release.Name }} + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + persistentVolumeReclaimPolicy: Retain + storageClassName: nfs-client + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + nfs: + path: /volume2/Storage + server: synologybond.alexlebens.net + mountOptions: + - vers=4 + - minorversion=1 + - noac diff --git a/clusters/cl01tl/applications/radarr5-standup/templates/prometheus-rule.yaml b/clusters/cl01tl/applications/radarr5-standup/templates/prometheus-rule.yaml new file mode 100644 index 000000000..104f6b351 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-standup/templates/prometheus-rule.yaml @@ -0,0 +1,34 @@ +apiVersion: monitoring.coreos.com/v1 +kind: PrometheusRule +metadata: + name: radarr5-standup + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-standup + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + groups: + - name: radarr5-standup + rules: + - alert: ExportarrAbsent + annotations: + description: Radarr5 Stand Up Exportarr has disappeared from Prometheus + service discovery. + summary: Exportarr is down. + expr: | + absent(up{job=~".*radarr5_standup.*"} == 1) + for: 5m + labels: + severity: critical + - alert: Radarr5StandUpDown + annotations: + description: Radarr5 Stand Up service is down. + summary: Radarr5 Stand Up is down. + expr: | + radarr5_standup_system_status{job=~".*radarr5_standup.*"} == 0 + for: 5m + labels: + severity: critical diff --git a/clusters/cl01tl/applications/radarr5-standup/templates/replication-source.yaml b/clusters/cl01tl/applications/radarr5-standup/templates/replication-source.yaml new file mode 100644 index 000000000..d6a193851 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-standup/templates/replication-source.yaml @@ -0,0 +1,32 @@ +# apiVersion: volsync.backube/v1alpha1 +# kind: ReplicationSource +# metadata: +# name: radarr5-standup-config-backup-source +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: radarr5-standup-config-backup-source +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# sourcePVC: radarr5-standup-config +# trigger: +# schedule: 0 0 */3 * * +# restic: +# pruneIntervalDays: 14 +# repository: radarr5-standup-config-backup-secret +# retain: +# hourly: 1 +# daily: 1 +# weekly: 1 +# monthly: 2 +# yearly: 4 +# moverSecurityContext: +# runAsUser: 1000 +# runAsGroup: 1000 +# fsGroup: 1000 +# fsGroupChangePolicy: OnRootMismatch +# copyMethod: Snapshot +# storageClassName: ceph-block +# volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/applications/radarr5-standup/templates/service-monitor.yaml b/clusters/cl01tl/applications/radarr5-standup/templates/service-monitor.yaml new file mode 100644 index 000000000..b26da20ac --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-standup/templates/service-monitor.yaml @@ -0,0 +1,21 @@ +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: radarr5-standup + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-standup + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: radarr5-standup + app.kubernetes.io/instance: {{ .Release.Name }} + endpoints: + - port: metrics + interval: 3m + scrapeTimeout: 1m + path: /metrics diff --git a/clusters/cl01tl/applications/radarr5-standup/values.yaml b/clusters/cl01tl/applications/radarr5-standup/values.yaml new file mode 100644 index 000000000..d18b8ca7b --- /dev/null +++ b/clusters/cl01tl/applications/radarr5-standup/values.yaml @@ -0,0 +1,143 @@ +radarr5-standup: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + pod: + securityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + containers: + main: + image: + repository: ghcr.io/linuxserver/radarr + tag: 5.18.4@sha256:b2d2bc9bafb76073d96142bda07ea90c6d6afd9207fe4ff2d4f9d3b50fcdbd76 + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: PUID + value: 1000 + - name: PGID + value: 1000 + probes: + liveness: + enabled: false + custom: true + spec: + exec: + command: + - /usr/bin/env + - bash + - -c + - curl --fail localhost:7878/api/v1/system/status?apiKey=`IFS=\> && while + read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml` + failureThreshold: 5 + initialDelaySeconds: 60 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 10 + resources: + requests: + cpu: 10m + memory: 256Mi + metrics: + image: + repository: ghcr.io/onedr0p/exportarr + tag: v2.0.1 + pullPolicy: IfNotPresent + args: ["radarr"] + env: + - name: URL + value: http://localhost + - name: CONFIG + value: /config/config.xml + - name: PORT + value: 9793 + - name: ENABLE_ADDITIONAL_METRICS + value: false + - name: ENABLE_UNKNOWN_QUEUE_ITEMS + value: false + resources: + requests: + cpu: 100m + memory: 256Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 7878 + protocol: HTTP + metrics: + port: 9793 + targetPort: 9793 + protocol: TCP + ingress: + tailscale: + enabled: true + className: tailscale + hosts: + - host: radarr-standup-cl01tl + paths: + - path: / + pathType: Prefix + service: + name: radarr5-standup + port: 80 + tls: + - hosts: + - radarr-standup-cl01tl + persistence: + config: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 20Gi + retain: true + advancedMounts: + main: + main: + - path: /config + readOnly: false + metrics: + - path: /config + readOnly: true + media: + existingClaim: radarr5-standup-nfs-storage + advancedMounts: + main: + main: + - path: /mnt/store + readOnly: false +postgres-17-cluster: + mode: recovery + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + monitoring: + enabled: true + bootstrap: + initdb: + database: app + owner: app + postInitSQL: + - CREATE DATABASE "radarr-main" OWNER "app"; + - CREATE DATABASE "radarr-log" OWNER "app"; + recovery: + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster + endpointCredentials: radarr5-standup-postgresql-17-cluster-backup-secret + backup: + enabled: false + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster + endpointCredentials: radarr5-standup-postgresql-17-cluster-backup-secret + backupIndex: 2 + retentionPolicy: "7d" diff --git a/clusters/cl01tl/applications/radarr5/Chart.yaml b/clusters/cl01tl/applications/radarr5/Chart.yaml new file mode 100644 index 000000000..f05df3720 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5/Chart.yaml @@ -0,0 +1,30 @@ +apiVersion: v2 +name: radarr5 +version: 1.0.0 +description: Radarr v5 +keywords: + - radarr + - servarr + - movies + - metrics +home: https://wiki.alexlebens.dev/doc/radarr-T6nPLajWDP +sources: + - https://github.com/Radarr/Radarr + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/onedr0p/containers/pkgs/container/radarr + - https://github.com/onedr0p/exportarr/pkgs/container/exportarr + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: radarr5 + repository: https://bjw-s.github.io/helm-charts/ + version: 3.6.1 + - name: postgres-cluster + alias: postgres-17-cluster + version: 4.1.4 + repository: http://alexlebens.github.io/helm-charts +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/radarr.png +appVersion: 5.16.3.9541 diff --git a/clusters/cl01tl/applications/radarr5/templates/external-secret.yaml b/clusters/cl01tl/applications/radarr5/templates/external-secret.yaml new file mode 100644 index 000000000..a7cb1a9fe --- /dev/null +++ b/clusters/cl01tl/applications/radarr5/templates/external-secret.yaml @@ -0,0 +1,89 @@ +# apiVersion: external-secrets.io/v1beta1 +# kind: ExternalSecret +# metadata: +# name: radarr5-config-backup-secret +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: radarr5-config-backup-secret +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# secretStoreRef: +# kind: ClusterSecretStore +# name: vault +# target: +# template: +# mergePolicy: Merge +# engineVersion: v2 +# data: +# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/radarr5/radarr5-config" +# data: +# - secretKey: BUCKET_ENDPOINT +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: S3_BUCKET_ENDPOINT +# - secretKey: RESTIC_PASSWORD +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: RESTIC_PASSWORD +# - secretKey: AWS_DEFAULT_REGION +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: AWS_DEFAULT_REGION +# - secretKey: AWS_ACCESS_KEY_ID +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: access_key +# - secretKey: AWS_SECRET_ACCESS_KEY +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: secret_key + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: radarr5-postgresql-17-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-postgresql-17-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret diff --git a/clusters/cl01tl/applications/radarr5/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/radarr5/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..e11dd4fe2 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: radarr5-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeName: radarr5-nfs-storage + storageClassName: nfs-client + accessModes: + - ReadWriteMany + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/radarr5/templates/persistent-volume.yaml b/clusters/cl01tl/applications/radarr5/templates/persistent-volume.yaml new file mode 100644 index 000000000..d8c05c56d --- /dev/null +++ b/clusters/cl01tl/applications/radarr5/templates/persistent-volume.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: radarr5-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + persistentVolumeReclaimPolicy: Retain + storageClassName: nfs-client + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + nfs: + path: /volume2/Storage + server: synologybond.alexlebens.net + mountOptions: + - vers=4 + - minorversion=1 + - noac diff --git a/clusters/cl01tl/applications/radarr5/templates/prometheus-rule.yaml b/clusters/cl01tl/applications/radarr5/templates/prometheus-rule.yaml new file mode 100644 index 000000000..fc59c8796 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5/templates/prometheus-rule.yaml @@ -0,0 +1,34 @@ +apiVersion: monitoring.coreos.com/v1 +kind: PrometheusRule +metadata: + name: radarr5 + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5 + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + groups: + - name: radarr5 + rules: + - alert: ExportarrAbsent + annotations: + description: Radarr5 Exportarr has disappeared from Prometheus + service discovery. + summary: Exportarr is down. + expr: | + absent(up{job=~".*radarr5.*"} == 1) + for: 5m + labels: + severity: critical + - alert: Radarr5Down + annotations: + description: Radarr5 service is down. + summary: Radarr5 is down. + expr: | + radarr5_system_status{job=~".*radarr5.*"} == 0 + for: 5m + labels: + severity: critical diff --git a/clusters/cl01tl/applications/radarr5/templates/replication-source.yaml b/clusters/cl01tl/applications/radarr5/templates/replication-source.yaml new file mode 100644 index 000000000..c97f2c9f9 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5/templates/replication-source.yaml @@ -0,0 +1,32 @@ +# apiVersion: volsync.backube/v1alpha1 +# kind: ReplicationSource +# metadata: +# name: radarr5-config-backup-source +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: radarr5-config-backup-source +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# sourcePVC: radarr5-config +# trigger: +# schedule: 0 0 */3 * * +# restic: +# pruneIntervalDays: 14 +# repository: radarr5-config-backup-secret +# retain: +# hourly: 1 +# daily: 1 +# weekly: 1 +# monthly: 2 +# yearly: 4 +# moverSecurityContext: +# runAsUser: 1000 +# runAsGroup: 1000 +# fsGroup: 1000 +# fsGroupChangePolicy: OnRootMismatch +# copyMethod: Snapshot +# storageClassName: ceph-block +# volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/applications/radarr5/templates/service-monitor.yaml b/clusters/cl01tl/applications/radarr5/templates/service-monitor.yaml new file mode 100644 index 000000000..a03a62d55 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5/templates/service-monitor.yaml @@ -0,0 +1,21 @@ +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: radarr5 + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: radarr5 + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: radarr5 + app.kubernetes.io/instance: {{ .Release.Name }} + endpoints: + - port: metrics + interval: 3m + scrapeTimeout: 1m + path: /metrics diff --git a/clusters/cl01tl/applications/radarr5/values.yaml b/clusters/cl01tl/applications/radarr5/values.yaml new file mode 100644 index 000000000..228627775 --- /dev/null +++ b/clusters/cl01tl/applications/radarr5/values.yaml @@ -0,0 +1,149 @@ +radarr5: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + pod: + securityContext: + runAsUser: 1000 + runAsGroup: 1000 + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + containers: + main: + image: + repository: ghcr.io/linuxserver/radarr + tag: 5.18.4@sha256:b2d2bc9bafb76073d96142bda07ea90c6d6afd9207fe4ff2d4f9d3b50fcdbd76 + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: PUID + value: 1000 + - name: PGID + value: 1000 + probes: + liveness: + enabled: false + custom: true + spec: + exec: + command: + - /usr/bin/env + - bash + - -c + - curl --fail localhost:7878/api/v1/system/status?apiKey=`IFS=\> && while + read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml` + failureThreshold: 5 + initialDelaySeconds: 60 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 10 + resources: + requests: + cpu: 100m + memory: 256Mi + metrics: + image: + repository: ghcr.io/onedr0p/exportarr + tag: v2.0.1 + pullPolicy: IfNotPresent + args: ["radarr"] + env: + - name: URL + value: http://localhost + - name: CONFIG + value: /config/config.xml + - name: PORT + value: 9793 + - name: ENABLE_ADDITIONAL_METRICS + value: false + - name: ENABLE_UNKNOWN_QUEUE_ITEMS + value: false + resources: + requests: + cpu: 100m + memory: 512Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 7878 + protocol: HTTP + metrics: + port: 9793 + targetPort: 9793 + protocol: TCP + ingress: + tailscale: + enabled: true + className: tailscale + hosts: + - host: radarr-cl01tl + paths: + - path: / + pathType: Prefix + service: + name: radarr5 + port: 80 + tls: + - hosts: + - radarr-cl01tl + persistence: + config: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 20Gi + retain: true + advancedMounts: + main: + main: + - path: /config + readOnly: false + metrics: + - path: /config + readOnly: true + media: + existingClaim: radarr5-nfs-storage + advancedMounts: + main: + main: + - path: /mnt/store + readOnly: false +postgres-17-cluster: + mode: recovery + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + resources: + requests: + memory: 1Gi + cpu: 200m + monitoring: + enabled: true + bootstrap: + initdb: + database: app + owner: app + postInitSQL: + - CREATE DATABASE "radarr-main" OWNER "app"; + - CREATE DATABASE "radarr-log" OWNER "app"; + recovery: + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster + endpointCredentials: radarr5-postgresql-17-cluster-backup-secret + backup: + enabled: false + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster + endpointCredentials: radarr5-postgresql-17-cluster-backup-secret + backupIndex: 2 + retentionPolicy: "7d" diff --git a/clusters/cl01tl/applications/sonarr4-4k/Chart.yaml b/clusters/cl01tl/applications/sonarr4-4k/Chart.yaml new file mode 100644 index 000000000..76a5bc0a6 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-4k/Chart.yaml @@ -0,0 +1,31 @@ +apiVersion: v2 +name: sonarr4-4k +version: 1.0.0 +description: Sonarr v4 4K +keywords: + - sonarr + - servarr + - tv shows + - 4k + - metrics +home: https://wiki.alexlebens.dev/doc/sonarr-AvJLY9PxEy +sources: + - https://github.com/Sonarr/Sonarr + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/onedr0p/containers/pkgs/container/sonarr + - https://github.com/onedr0p/exportarr/pkgs/container/exportarr + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: sonarr4-4k + repository: https://bjw-s.github.io/helm-charts/ + version: 3.6.1 + - name: postgres-cluster + alias: postgres-17-cluster + version: 4.1.4 + repository: http://alexlebens.github.io/helm-charts +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/sonarr.png +appVersion: 4.0.11 diff --git a/clusters/cl01tl/applications/sonarr4-4k/templates/external-secret.yaml b/clusters/cl01tl/applications/sonarr4-4k/templates/external-secret.yaml new file mode 100644 index 000000000..ee3a59114 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-4k/templates/external-secret.yaml @@ -0,0 +1,89 @@ +# apiVersion: external-secrets.io/v1beta1 +# kind: ExternalSecret +# metadata: +# name: sonarr4-4k-config-backup-secret +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: sonarr4-4k-config-backup-secret +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# secretStoreRef: +# kind: ClusterSecretStore +# name: vault +# target: +# template: +# mergePolicy: Merge +# engineVersion: v2 +# data: +# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/sonarr4-4k/sonarr4-4k-config" +# data: +# - secretKey: BUCKET_ENDPOINT +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: S3_BUCKET_ENDPOINT +# - secretKey: RESTIC_PASSWORD +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: RESTIC_PASSWORD +# - secretKey: AWS_DEFAULT_REGION +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: AWS_DEFAULT_REGION +# - secretKey: AWS_ACCESS_KEY_ID +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: access_key +# - secretKey: AWS_SECRET_ACCESS_KEY +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: secret_key + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: sonarr4-4k-postgresql-17-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-4k-postgresql-17-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret diff --git a/clusters/cl01tl/applications/sonarr4-4k/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/sonarr4-4k/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..c453fe08c --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-4k/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: sonarr4-4k-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-4k-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeName: sonarr4-4k-nfs-storage + storageClassName: nfs-client + accessModes: + - ReadWriteMany + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/sonarr4-4k/templates/persistent-volume.yaml b/clusters/cl01tl/applications/sonarr4-4k/templates/persistent-volume.yaml new file mode 100644 index 000000000..91261233e --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-4k/templates/persistent-volume.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: sonarr4-4k-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-4k-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + persistentVolumeReclaimPolicy: Retain + storageClassName: nfs-client + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + nfs: + path: /volume2/Storage + server: synologybond.alexlebens.net + mountOptions: + - vers=4 + - minorversion=1 + - noac diff --git a/clusters/cl01tl/applications/sonarr4-4k/templates/prometheus-rule.yaml b/clusters/cl01tl/applications/sonarr4-4k/templates/prometheus-rule.yaml new file mode 100644 index 000000000..495a5eedf --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-4k/templates/prometheus-rule.yaml @@ -0,0 +1,34 @@ +apiVersion: monitoring.coreos.com/v1 +kind: PrometheusRule +metadata: + name: sonarr4-4k + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-4k + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + groups: + - name: sonarr4-4k + rules: + - alert: ExportarrAbsent + annotations: + description: Sonarr4 4K Exportarr has disappeared from Prometheus + service discovery. + summary: Exportarr is down. + expr: | + absent(up{job=~".*sonarr4_4k.*"} == 1) + for: 5m + labels: + severity: critical + - alert: Sonarr44KDown + annotations: + description: Sonarr4 4K service is down. + summary: Sonarr4 4K is down. + expr: | + sonarr4_4k_system_status{job=~".*sonarr4_4k.*"} == 0 + for: 5m + labels: + severity: critical diff --git a/clusters/cl01tl/applications/sonarr4-4k/templates/replication-source.yaml b/clusters/cl01tl/applications/sonarr4-4k/templates/replication-source.yaml new file mode 100644 index 000000000..b6311db93 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-4k/templates/replication-source.yaml @@ -0,0 +1,35 @@ +# apiVersion: volsync.backube/v1alpha1 +# kind: ReplicationSource +# metadata: +# name: sonarr4-4k-config-backup-source +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: sonarr4-4k-config-backup-source +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# sourcePVC: sonarr4-4k-config +# trigger: +# schedule: 0 0 */3 * * +# restic: +# pruneIntervalDays: 14 +# repository: sonarr4-4k-config-backup-secret +# retain: +# hourly: 1 +# daily: 1 +# weekly: 1 +# monthly: 2 +# yearly: 4 +# moverSecurityContext: +# fsGroup: 1000 +# fsGroupChangePolicy: OnRootMismatch +# supplementalGroups: +# - 44 +# - 100 +# - 109 +# - 65539 +# copyMethod: Snapshot +# storageClassName: ceph-block +# volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/applications/sonarr4-4k/templates/service-monitor.yaml b/clusters/cl01tl/applications/sonarr4-4k/templates/service-monitor.yaml new file mode 100644 index 000000000..978aabc59 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-4k/templates/service-monitor.yaml @@ -0,0 +1,21 @@ +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: sonarr4-4k + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-4k + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: sonarr4-4k + app.kubernetes.io/instance: {{ .Release.Name }} + endpoints: + - port: metrics + interval: 3m + scrapeTimeout: 1m + path: /metrics diff --git a/clusters/cl01tl/applications/sonarr4-4k/values.yaml b/clusters/cl01tl/applications/sonarr4-4k/values.yaml new file mode 100644 index 000000000..e72e4c0b5 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-4k/values.yaml @@ -0,0 +1,148 @@ +sonarr4-4k: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + pod: + securityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + supplementalGroups: + - 44 + - 100 + - 109 + - 65539 + containers: + main: + image: + repository: ghcr.io/linuxserver/sonarr + tag: 4.0.13@sha256:28d9dcbc846aed74bd47dc90305e016183443ddc3dfa3e8bcac268fc653a6e5e + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: PUID + value: 1000 + - name: PGID + value: 1000 + probes: + liveness: + enabled: false + custom: true + spec: + exec: + command: + - /usr/bin/env + - bash + - -c + - curl --fail localhost:8989/api/v1/system/status?apiKey=`IFS=\> && while + read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml` + failureThreshold: 5 + initialDelaySeconds: 60 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 10 + resources: + requests: + cpu: 10m + memory: 256Mi + metrics: + image: + repository: ghcr.io/onedr0p/exportarr + tag: v2.0.1 + pullPolicy: IfNotPresent + args: ["sonarr"] + env: + - name: URL + value: http://localhost + - name: CONFIG + value: /config/config.xml + - name: PORT + value: 9794 + - name: ENABLE_ADDITIONAL_METRICS + value: false + - name: ENABLE_UNKNOWN_QUEUE_ITEMS + value: false + resources: + requests: + cpu: 100m + memory: 256Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 8989 + protocol: HTTP + metrics: + port: 9794 + targetPort: 9794 + protocol: TCP + ingress: + tailscale: + enabled: true + className: tailscale + hosts: + - host: sonarr-4k-cl01tl + paths: + - path: / + pathType: Prefix + service: + name: sonarr4-4k + port: 80 + tls: + - hosts: + - sonarr-4k-cl01tl + persistence: + config: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 20Gi + retain: true + advancedMounts: + main: + main: + - path: /config + readOnly: false + metrics: + - path: /config + readOnly: true + media: + existingClaim: sonarr4-4k-nfs-storage + advancedMounts: + main: + main: + - path: /mnt/store + readOnly: false +postgres-17-cluster: + mode: recovery + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + monitoring: + enabled: true + bootstrap: + initdb: + database: app + owner: app + postInitSQL: + - CREATE DATABASE "sonarr-main" OWNER "app"; + - CREATE DATABASE "sonarr-log" OWNER "app"; + recovery: + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-4k/sonarr4-4k-postgresql-17-cluster + endpointCredentials: sonarr4-4k-postgresql-17-cluster-backup-secret + backup: + enabled: false + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-4k/sonarr4-4k-postgresql-17-cluster + endpointCredentials: sonarr4-4k-postgresql-17-cluster-backup-secret + backupIndex: 2 + retentionPolicy: "7d" diff --git a/clusters/cl01tl/applications/sonarr4-anime/Chart.yaml b/clusters/cl01tl/applications/sonarr4-anime/Chart.yaml new file mode 100644 index 000000000..cbf5ed052 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-anime/Chart.yaml @@ -0,0 +1,30 @@ +apiVersion: v2 +name: sonarr4-anime +version: 1.0.0 +description: Sonarr v4 Anime +keywords: + - sonarr + - servarr + - anime + - metrics +home: https://wiki.alexlebens.dev/doc/sonarr-AvJLY9PxEy +sources: + - https://github.com/Sonarr/Sonarr + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/onedr0p/containers/pkgs/container/sonarr + - https://github.com/onedr0p/exportarr/pkgs/container/exportarr + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: sonarr4-anime + repository: https://bjw-s.github.io/helm-charts/ + version: 3.6.1 + - name: postgres-cluster + alias: postgres-17-cluster + version: 4.1.4 + repository: http://alexlebens.github.io/helm-charts +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/sonarr.png +appVersion: 4.0.11 diff --git a/clusters/cl01tl/applications/sonarr4-anime/templates/external-secret.yaml b/clusters/cl01tl/applications/sonarr4-anime/templates/external-secret.yaml new file mode 100644 index 000000000..69fb077a8 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-anime/templates/external-secret.yaml @@ -0,0 +1,89 @@ +# apiVersion: external-secrets.io/v1beta1 +# kind: ExternalSecret +# metadata: +# name: sonarr4-anime-config-backup-secret +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: sonarr4-anime-config-backup-secret +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# secretStoreRef: +# kind: ClusterSecretStore +# name: vault +# target: +# template: +# mergePolicy: Merge +# engineVersion: v2 +# data: +# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/sonarr4-anime/sonarr4-anime-config" +# data: +# - secretKey: BUCKET_ENDPOINT +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: S3_BUCKET_ENDPOINT +# - secretKey: RESTIC_PASSWORD +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: RESTIC_PASSWORD +# - secretKey: AWS_DEFAULT_REGION +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: AWS_DEFAULT_REGION +# - secretKey: AWS_ACCESS_KEY_ID +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: access_key +# - secretKey: AWS_SECRET_ACCESS_KEY +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: secret_key + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: sonarr4-anime-postgresql-17-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-anime-postgresql-17-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret diff --git a/clusters/cl01tl/applications/sonarr4-anime/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/sonarr4-anime/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..b910b945a --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-anime/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: sonarr4-anime-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-anime-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeName: sonarr4-anime-nfs-storage + storageClassName: nfs-client + accessModes: + - ReadWriteMany + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/sonarr4-anime/templates/persistent-volume.yaml b/clusters/cl01tl/applications/sonarr4-anime/templates/persistent-volume.yaml new file mode 100644 index 000000000..b6e30e25f --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-anime/templates/persistent-volume.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: sonarr4-anime-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-anime-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + persistentVolumeReclaimPolicy: Retain + storageClassName: nfs-client + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + nfs: + path: /volume2/Storage + server: synologybond.alexlebens.net + mountOptions: + - vers=4 + - minorversion=1 + - noac diff --git a/clusters/cl01tl/applications/sonarr4-anime/templates/prometheus-rule.yaml b/clusters/cl01tl/applications/sonarr4-anime/templates/prometheus-rule.yaml new file mode 100644 index 000000000..b98739676 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-anime/templates/prometheus-rule.yaml @@ -0,0 +1,34 @@ +apiVersion: monitoring.coreos.com/v1 +kind: PrometheusRule +metadata: + name: sonarr4-anime + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-anime + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + groups: + - name: sonarr4-anime + rules: + - alert: ExportarrAbsent + annotations: + description: Sonarr4 Anime Exportarr has disappeared from Prometheus + service discovery. + summary: Exportarr is down. + expr: | + absent(up{job=~".*sonarr4_anime.*"} == 1) + for: 5m + labels: + severity: critical + - alert: Sonarr4AnimeDown + annotations: + description: Sonarr4 Anime service is down. + summary: Sonarr4 Anime is down. + expr: | + sonarr4_anime_system_status{job=~".*sonarr4_anime.*"} == 0 + for: 5m + labels: + severity: critical diff --git a/clusters/cl01tl/applications/sonarr4-anime/templates/replication-source.yaml b/clusters/cl01tl/applications/sonarr4-anime/templates/replication-source.yaml new file mode 100644 index 000000000..f33d8b7d1 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-anime/templates/replication-source.yaml @@ -0,0 +1,35 @@ +# apiVersion: volsync.backube/v1alpha1 +# kind: ReplicationSource +# metadata: +# name: sonarr4-anime-config-backup-source +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: sonarr4-anime-config-backup-source +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# sourcePVC: sonarr4-anime-config +# trigger: +# schedule: 0 0 */3 * * +# restic: +# pruneIntervalDays: 14 +# repository: sonarr4-anime-config-backup-secret +# retain: +# hourly: 1 +# daily: 1 +# weekly: 1 +# monthly: 2 +# yearly: 4 +# moverSecurityContext: +# fsGroup: 1000 +# fsGroupChangePolicy: OnRootMismatch +# supplementalGroups: +# - 44 +# - 100 +# - 109 +# - 65539 +# copyMethod: Snapshot +# storageClassName: ceph-block +# volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/applications/sonarr4-anime/templates/service-monitor.yaml b/clusters/cl01tl/applications/sonarr4-anime/templates/service-monitor.yaml new file mode 100644 index 000000000..41ff7864b --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-anime/templates/service-monitor.yaml @@ -0,0 +1,21 @@ +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: sonarr4-anime + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-anime + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: sonarr4-anime + app.kubernetes.io/instance: {{ .Release.Name }} + endpoints: + - port: metrics + interval: 3m + scrapeTimeout: 1m + path: /metrics diff --git a/clusters/cl01tl/applications/sonarr4-anime/values.yaml b/clusters/cl01tl/applications/sonarr4-anime/values.yaml new file mode 100644 index 000000000..376dbee94 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4-anime/values.yaml @@ -0,0 +1,148 @@ +sonarr4-anime: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + pod: + securityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + supplementalGroups: + - 44 + - 100 + - 109 + - 65539 + containers: + main: + image: + repository: ghcr.io/linuxserver/sonarr + tag: 4.0.13@sha256:28d9dcbc846aed74bd47dc90305e016183443ddc3dfa3e8bcac268fc653a6e5e + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: PUID + value: 1000 + - name: PGID + value: 1000 + probes: + liveness: + enabled: false + custom: true + spec: + exec: + command: + - /usr/bin/env + - bash + - -c + - curl --fail localhost:8989/api/v1/system/status?apiKey=`IFS=\> && while + read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml` + failureThreshold: 5 + initialDelaySeconds: 60 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 10 + resources: + requests: + cpu: 10m + memory: 256Mi + metrics: + image: + repository: ghcr.io/onedr0p/exportarr + tag: v2.0.1 + pullPolicy: IfNotPresent + args: ["sonarr"] + env: + - name: URL + value: http://localhost + - name: CONFIG + value: /config/config.xml + - name: PORT + value: 9794 + - name: ENABLE_ADDITIONAL_METRICS + value: false + - name: ENABLE_UNKNOWN_QUEUE_ITEMS + value: false + resources: + requests: + cpu: 100m + memory: 256Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 8989 + protocol: HTTP + metrics: + port: 9794 + targetPort: 9794 + protocol: TCP + ingress: + tailscale: + enabled: true + className: tailscale + hosts: + - host: sonarr-anime-cl01tl + paths: + - path: / + pathType: Prefix + service: + name: sonarr4-anime + port: 80 + tls: + - hosts: + - sonarr-anime-cl01tl + persistence: + config: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 20Gi + retain: true + advancedMounts: + main: + main: + - path: /config + readOnly: false + metrics: + - path: /config + readOnly: true + media: + existingClaim: sonarr4-anime-nfs-storage + advancedMounts: + main: + main: + - path: /mnt/store + readOnly: false +postgres-17-cluster: + mode: recovery + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + monitoring: + enabled: true + bootstrap: + initdb: + database: app + owner: app + postInitSQL: + - CREATE DATABASE "sonarr-main" OWNER "app"; + - CREATE DATABASE "sonarr-log" OWNER "app"; + recovery: + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-anime/sonarr4-anime-postgresql-17-cluster + endpointCredentials: sonarr4-anime-postgresql-17-cluster-backup-secret + backup: + enabled: false + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-anime/sonarr4-anime-postgresql-17-cluster + endpointCredentials: sonarr4-anime-postgresql-17-cluster-backup-secret + backupIndex: 2 + retentionPolicy: "7d" diff --git a/clusters/cl01tl/applications/sonarr4/Chart.yaml b/clusters/cl01tl/applications/sonarr4/Chart.yaml new file mode 100644 index 000000000..6a8c844a8 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4/Chart.yaml @@ -0,0 +1,30 @@ +apiVersion: v2 +name: sonarr4 +version: 1.0.0 +description: Sonarr v4 +keywords: + - sonarr + - servarr + - tv shows + - metrics +home: https://wiki.alexlebens.dev/doc/sonarr-AvJLY9PxEy +sources: + - https://github.com/Sonarr/Sonarr + - https://github.com/cloudnative-pg/cloudnative-pg + - https://github.com/onedr0p/containers/pkgs/container/sonarr + - https://github.com/onedr0p/exportarr/pkgs/container/exportarr + - https://github.com/bjw-s/helm-charts/tree/main/charts/other/app-template + - https://github.com/alexlebens/helm-charts/charts/postgres-cluster +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: sonarr4 + repository: https://bjw-s.github.io/helm-charts/ + version: 3.6.1 + - name: postgres-cluster + alias: postgres-17-cluster + version: 4.1.4 + repository: http://alexlebens.github.io/helm-charts +icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/sonarr.png +appVersion: 4.0.11.2680 diff --git a/clusters/cl01tl/applications/sonarr4/templates/external-secret.yaml b/clusters/cl01tl/applications/sonarr4/templates/external-secret.yaml new file mode 100644 index 000000000..ec457c67c --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4/templates/external-secret.yaml @@ -0,0 +1,89 @@ +# apiVersion: external-secrets.io/v1beta1 +# kind: ExternalSecret +# metadata: +# name: sonarr4-config-backup-secret +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: sonarr4-config-backup-secret +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# secretStoreRef: +# kind: ClusterSecretStore +# name: vault +# target: +# template: +# mergePolicy: Merge +# engineVersion: v2 +# data: +# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/sonarr4/sonarr4-config" +# data: +# - secretKey: BUCKET_ENDPOINT +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: S3_BUCKET_ENDPOINT +# - secretKey: RESTIC_PASSWORD +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: RESTIC_PASSWORD +# - secretKey: AWS_DEFAULT_REGION +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /cl01tl/volsync/restic/config +# metadataPolicy: None +# property: AWS_DEFAULT_REGION +# - secretKey: AWS_ACCESS_KEY_ID +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: access_key +# - secretKey: AWS_SECRET_ACCESS_KEY +# remoteRef: +# conversionStrategy: Default +# decodingStrategy: None +# key: /digital-ocean/home-infra/volsync-backups +# metadataPolicy: None +# property: secret_key + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: sonarr4-postgresql-17-cluster-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-postgresql-17-cluster-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: database + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + data: + - secretKey: ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: access + - secretKey: ACCESS_SECRET_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /digital-ocean/home-infra/postgres-backups + metadataPolicy: None + property: secret diff --git a/clusters/cl01tl/applications/sonarr4/templates/persistent-volume-claim.yaml b/clusters/cl01tl/applications/sonarr4/templates/persistent-volume-claim.yaml new file mode 100644 index 000000000..9d4e06d17 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4/templates/persistent-volume-claim.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: sonarr4-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + volumeName: sonarr4-nfs-storage + storageClassName: nfs-client + accessModes: + - ReadWriteMany + resources: + requests: + storage: 1Gi diff --git a/clusters/cl01tl/applications/sonarr4/templates/persistent-volume.yaml b/clusters/cl01tl/applications/sonarr4/templates/persistent-volume.yaml new file mode 100644 index 000000000..82edb5205 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4/templates/persistent-volume.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: sonarr4-nfs-storage + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4-nfs-storage + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: storage + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + persistentVolumeReclaimPolicy: Retain + storageClassName: nfs-client + capacity: + storage: 1Gi + accessModes: + - ReadWriteMany + nfs: + path: /volume2/Storage + server: synologybond.alexlebens.net + mountOptions: + - vers=4 + - minorversion=1 + - noac diff --git a/clusters/cl01tl/applications/sonarr4/templates/prometheus-rule.yaml b/clusters/cl01tl/applications/sonarr4/templates/prometheus-rule.yaml new file mode 100644 index 000000000..d260b61e9 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4/templates/prometheus-rule.yaml @@ -0,0 +1,34 @@ +apiVersion: monitoring.coreos.com/v1 +kind: PrometheusRule +metadata: + name: sonarr4 + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4 + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + groups: + - name: sonarr4 + rules: + - alert: ExportarrAbsent + annotations: + description: Sonarr4 Exportarr has disappeared from Prometheus + service discovery. + summary: Exportarr is down. + expr: | + absent(up{job=~".*sonarr4.*"} == 1) + for: 5m + labels: + severity: critical + - alert: Sonarr4Down + annotations: + description: Sonarr4 service is down. + summary: Sonarr4 is down. + expr: | + sonarr4_system_status{job=~".*sonarr4.*"} == 0 + for: 5m + labels: + severity: critical diff --git a/clusters/cl01tl/applications/sonarr4/templates/replication-source.yaml b/clusters/cl01tl/applications/sonarr4/templates/replication-source.yaml new file mode 100644 index 000000000..c44c45dcd --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4/templates/replication-source.yaml @@ -0,0 +1,35 @@ +# apiVersion: volsync.backube/v1alpha1 +# kind: ReplicationSource +# metadata: +# name: sonarr4-config-backup-source +# namespace: {{ .Release.Namespace }} +# labels: +# app.kubernetes.io/name: sonarr4-config-backup-source +# app.kubernetes.io/instance: {{ .Release.Name }} +# app.kubernetes.io/version: {{ .Chart.AppVersion }} +# app.kubernetes.io/component: backup +# app.kubernetes.io/part-of: {{ .Release.Name }} +# spec: +# sourcePVC: sonarr4-config +# trigger: +# schedule: 0 0 */3 * * +# restic: +# pruneIntervalDays: 14 +# repository: sonarr4-config-backup-secret +# retain: +# hourly: 1 +# daily: 1 +# weekly: 1 +# monthly: 2 +# yearly: 4 +# moverSecurityContext: +# fsGroup: 1000 +# fsGroupChangePolicy: OnRootMismatch +# supplementalGroups: +# - 44 +# - 100 +# - 109 +# - 65539 +# copyMethod: Snapshot +# storageClassName: ceph-block +# volumeSnapshotClassName: ceph-blockpool-snapshot diff --git a/clusters/cl01tl/applications/sonarr4/templates/service-monitor.yaml b/clusters/cl01tl/applications/sonarr4/templates/service-monitor.yaml new file mode 100644 index 000000000..a86d6fc63 --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4/templates/service-monitor.yaml @@ -0,0 +1,21 @@ +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: sonarr4 + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: sonarr4 + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + selector: + matchLabels: + app.kubernetes.io/name: sonarr4 + app.kubernetes.io/instance: {{ .Release.Name }} + endpoints: + - port: metrics + interval: 3m + scrapeTimeout: 1m + path: /metrics diff --git a/clusters/cl01tl/applications/sonarr4/values.yaml b/clusters/cl01tl/applications/sonarr4/values.yaml new file mode 100644 index 000000000..fa96a33bd --- /dev/null +++ b/clusters/cl01tl/applications/sonarr4/values.yaml @@ -0,0 +1,151 @@ +sonarr4: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + pod: + securityContext: + fsGroup: 1000 + fsGroupChangePolicy: OnRootMismatch + supplementalGroups: + - 44 + - 100 + - 109 + - 65539 + containers: + main: + image: + repository: ghcr.io/linuxserver/sonarr + tag: 4.0.13@sha256:28d9dcbc846aed74bd47dc90305e016183443ddc3dfa3e8bcac268fc653a6e5e + pullPolicy: IfNotPresent + env: + - name: TZ + value: US/Central + - name: PUID + value: 1000 + - name: PGID + value: 1000 + probes: + liveness: + enabled: false + custom: true + spec: + exec: + command: + - /usr/bin/env + - bash + - -c + - curl --fail localhost:8989/api/v1/system/status?apiKey=`IFS=\> && while + read -d \< E C; do if [[ $E = "ApiKey" ]]; then echo $C; fi; done < /config/config.xml` + failureThreshold: 5 + initialDelaySeconds: 60 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 10 + resources: + requests: + cpu: 100m + memory: 256Mi + metrics: + image: + repository: ghcr.io/onedr0p/exportarr + tag: v2.0.1 + pullPolicy: IfNotPresent + args: ["sonarr"] + env: + - name: URL + value: http://localhost + - name: CONFIG + value: /config/config.xml + - name: PORT + value: 9794 + - name: ENABLE_ADDITIONAL_METRICS + value: false + - name: ENABLE_UNKNOWN_QUEUE_ITEMS + value: false + resources: + requests: + cpu: 100m + memory: 256Mi + serviceAccount: + create: true + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 8989 + protocol: HTTP + metrics: + port: 9794 + targetPort: 9794 + protocol: TCP + ingress: + tailscale: + enabled: true + className: tailscale + hosts: + - host: sonarr-cl01tl + paths: + - path: / + pathType: Prefix + service: + name: sonarr4 + port: 80 + tls: + - hosts: + - sonarr-cl01tl + persistence: + config: + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 20Gi + retain: true + advancedMounts: + main: + main: + - path: /config + readOnly: false + metrics: + - path: /config + readOnly: true + media: + existingClaim: sonarr4-nfs-storage + advancedMounts: + main: + main: + - path: /mnt/store + readOnly: false +postgres-17-cluster: + mode: recovery + cluster: + walStorage: + storageClass: local-path + storage: + storageClass: local-path + resources: + requests: + memory: 512Mi + monitoring: + enabled: true + bootstrap: + initdb: + database: app + owner: app + postInitSQL: + - CREATE DATABASE "sonarr-main" OWNER "app"; + - CREATE DATABASE "sonarr-log" OWNER "app"; + c: + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4/sonarr4-postgresql-17-cluster + endpointCredentials: sonarr4-postgresql-17-cluster-backup-secret + backup: + enabled: false + endpointURL: https://nyc3.digitaloceanspaces.com + destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4/sonarr4-postgresql-17-cluster + endpointCredentials: sonarr4-postgresql-17-cluster-backup-secret + backupIndex: 2 + retentionPolicy: "7d"