alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Activity

remove old cluster
All checks were successful
render-manifests-push / render-manifests-push (push) Successful in 37s
Details
lint-test-helm / lint-helm (push) Successful in 48s
Details
renovate / renovate (push) Successful in 2m26s
Details

Browse Source
This commit is contained in:
Alex Lebens
2025-12-14 16:34:07 -06:00
parent 7f648bdf2a
commit b5b487f2c0
16 changed files with 8 additions and 564 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
clusters/cl01tl/helm/radarr-4k/Chart.lock
View File

@@ -5,8 +5,5 @@ dependencies:
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 6.17.1
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 6.17.1
digest: sha256:607ba69591da044ea78c47508f5271a4ccfdb1fb5dde277d5eb1a2e4b3fea569
generated: "2025-12-14T16:16:14.099709-06:00"
digest: sha256:c7587d0657447fe7296f62744ce021b3841724282a777faff5452b3f080dd9a9
generated: "2025-12-14T16:33:42.867266-06:00"

4
clusters/cl01tl/helm/radarr-4k/Chart.yaml
View File

@@ -25,10 +25,6 @@ dependencies:
alias: radarr-4k
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.5.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 6.17.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: postgres-cluster
alias: postgres-18-cluster
version: 6.17.1

67
clusters/cl01tl/helm/radarr-4k/templates/external-secret.yaml
View File

@@ -54,73 +54,6 @@ spec:
metadataPolicy: None
property: secret_key
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: radarr-4k-postgresql-17-cluster-backup-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: radarr-4k-postgresql-17-cluster-backup-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/postgres-backups
metadataPolicy: None
property: access
- secretKey: ACCESS_SECRET_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/postgres-backups
metadataPolicy: None
property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: radarr-4k-postgresql-17-cluster-backup-secret-garage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: radarr-4k-postgresql-17-cluster-backup-secret-garage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: ACCESS_SECRET_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY
- secretKey: ACCESS_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_REGION
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret

67
clusters/cl01tl/helm/radarr-4k/values.yaml
View File

@@ -83,73 +83,6 @@ radarr-4k:
main:
- path: /mnt/store
readOnly: false
postgres-17-cluster:
nameOverride: radarr5-4k-postgresql-17
mode: recovery
cluster:
enableSuperuserAccess: true
storage:
storageClass: local-path
walStorage:
storageClass: local-path
monitoring:
enabled: true
prometheusRule:
enabled: true
resources:
requests:
memory: 1Gi
cpu: 200m
initdb:
postInitSQL:
- CREATE DATABASE "radarr-main" OWNER "app";
- CREATE DATABASE "radarr-log" OWNER "app";
recovery:
method: objectStore
objectStore:
destinationPath: s3://postgres-backups/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster
endpointURL: http://garage-main.garage:3900
index: 1
endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret-garage
backup:
objectStore:
- name: external
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster
index: 1
endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret
retentionPolicy: "30d"
isWALArchiver: false
- name: garage-local
destinationPath: s3://postgres-backups/cl01tl/radarr-4k/radarr5-4k-postgresql-17-cluster
index: 1
endpointURL: http://garage-main.garage:3900
endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret-garage
endpointCredentialsIncludeRegion: true
retentionPolicy: "3d"
isWALArchiver: true
# - name: garage-remote
# destinationPath: s3://postgres-backups/cl01tl/radarr-4k/radarr5-4k-postgresql-17-cluster
# index: 1
# endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
# endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret-garage
# retentionPolicy: "30d"
# data:
# compression: bzip2
# jobs: 2
scheduledBackups:
- name: daily-backup
suspend: false
schedule: "0 0 0 * * *"
backupName: external
- name: live-backup
suspend: false
immediate: true
schedule: "0 0 0 * * *"
backupName: garage-local
# - name: weekly-backup
# suspend: false
# schedule: "0 18 4 * * SAT"
# backupName: garage-remote
postgres-18-cluster:
mode: recovery
cluster:

7
clusters/cl01tl/helm/radarr-anime/Chart.lock
View File

@@ -5,8 +5,5 @@ dependencies:
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 6.17.1
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 6.17.1
digest: sha256:7fe3a3d53afbfd347abb09994a63eda22afbafe98a9774a52bd7c5481b2da8ff
generated: "2025-12-14T16:16:28.245715-06:00"
digest: sha256:bf7ec6182af3f7fc88a0a78e684341ecc7d160b706621cb58a759010086a6751
generated: "2025-12-14T16:32:41.58327-06:00"

4
clusters/cl01tl/helm/radarr-anime/Chart.yaml
View File

@@ -25,10 +25,6 @@ dependencies:
alias: radarr-anime
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.5.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 6.17.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: postgres-cluster
alias: postgres-18-cluster
version: 6.17.1

67
clusters/cl01tl/helm/radarr-anime/templates/external-secret.yaml
View File

@@ -54,73 +54,6 @@ spec:
metadataPolicy: None
property: secret_key
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: radarr-anime-postgresql-17-cluster-backup-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: radarr-anime-postgresql-17-cluster-backup-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/postgres-backups
metadataPolicy: None
property: access
- secretKey: ACCESS_SECRET_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/postgres-backups
metadataPolicy: None
property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: radarr-anime-postgresql-17-cluster-backup-secret-garage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: radarr-anime-postgresql-17-cluster-backup-secret-garage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: ACCESS_SECRET_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY
- secretKey: ACCESS_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_REGION
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret

63
clusters/cl01tl/helm/radarr-anime/values.yaml
View File

@@ -81,69 +81,6 @@ radarr-anime:
main:
- path: /mnt/store
readOnly: false
postgres-17-cluster:
nameOverride: radarr5-anime-postgresql-17
mode: recovery
cluster:
enableSuperuserAccess: true
storage:
storageClass: local-path
walStorage:
storageClass: local-path
monitoring:
enabled: true
prometheusRule:
enabled: true
initdb:
postInitSQL:
- CREATE DATABASE "radarr-main" OWNER "app";
- CREATE DATABASE "radarr-log" OWNER "app";
recovery:
method: objectStore
objectStore:
destinationPath: s3://postgres-backups/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster
endpointURL: http://garage-main.garage:3900
index: 1
endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret-garage
backup:
objectStore:
- name: external
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster
index: 1
endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret
retentionPolicy: "30d"
isWALArchiver: false
- name: garage-local
destinationPath: s3://postgres-backups/cl01tl/radarr-anime/radarr5-anime-postgresql-17-cluster
index: 1
endpointURL: http://garage-main.garage:3900
endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret-garage
endpointCredentialsIncludeRegion: true
retentionPolicy: "3d"
isWALArchiver: true
# - name: garage-remote
# destinationPath: s3://postgres-backups/cl01tl/radarr-anime/radarr5-anime-postgresql-17-cluster
# index: 1
# endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
# endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret-garage
# retentionPolicy: "30d"
# data:
# compression: bzip2
# jobs: 2
scheduledBackups:
- name: daily-backup
suspend: false
schedule: "0 0 0 * * *"
backupName: external
- name: live-backup
suspend: false
immediate: true
schedule: "0 0 0 * * *"
backupName: garage-local
# - name: weekly-backup
# suspend: false
# schedule: "0 20 4 * * SAT"
# backupName: garage-remote
postgres-18-cluster:
mode: recovery
cluster:

7
clusters/cl01tl/helm/radarr-standup/Chart.lock
View File

@@ -5,8 +5,5 @@ dependencies:
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 6.17.1
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 6.17.1
digest: sha256:124bdaada57e8dfd9c4563b8c3a3ebb59f44dee4f192cdbbd6189b8a44936d6a
generated: "2025-12-14T16:16:37.679154-06:00"
digest: sha256:874b621e878539634f1b3fc57d10db9354d83f322e9be2f5b19533c76ac2f6e8
generated: "2025-12-14T16:32:58.474924-06:00"

4
clusters/cl01tl/helm/radarr-standup/Chart.yaml
View File

@@ -24,10 +24,6 @@ dependencies:
alias: radarr-standup
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.5.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 6.17.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: postgres-cluster
alias: postgres-18-cluster
version: 6.17.1

67
clusters/cl01tl/helm/radarr-standup/templates/external-secret.yaml
View File

@@ -54,73 +54,6 @@ spec:
metadataPolicy: None
property: secret_key
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: radarr-standup-postgresql-17-cluster-backup-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: radarr-standup-postgresql-17-cluster-backup-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/postgres-backups
metadataPolicy: None
property: access
- secretKey: ACCESS_SECRET_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/postgres-backups
metadataPolicy: None
property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: radarr-standup-postgresql-17-cluster-backup-secret-garage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: radarr-standup-postgresql-17-cluster-backup-secret-garage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: ACCESS_SECRET_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY
- secretKey: ACCESS_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_REGION
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret

63
clusters/cl01tl/helm/radarr-standup/values.yaml
View File

@@ -81,69 +81,6 @@ radarr-standup:
main:
- path: /mnt/store
readOnly: false
postgres-17-cluster:
nameOverride: radarr5-standup-postgresql-17
mode: recovery
cluster:
enableSuperuserAccess: true
storage:
storageClass: local-path
walStorage:
storageClass: local-path
monitoring:
enabled: true
prometheusRule:
enabled: true
initdb:
postInitSQL:
- CREATE DATABASE "radarr-main" OWNER "app";
- CREATE DATABASE "radarr-log" OWNER "app";
recovery:
method: objectStore
objectStore:
destinationPath: s3://postgres-backups/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster
endpointURL: http://garage-main.garage:3900
index: 1
endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret-garage
backup:
objectStore:
- name: external
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster
index: 1
endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret
retentionPolicy: "30d"
isWALArchiver: false
- name: garage-local
destinationPath: s3://postgres-backups/cl01tl/radarr-standup/radarr5-standup-postgresql-17-cluster
index: 1
endpointURL: http://garage-main.garage:3900
endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret-garage
endpointCredentialsIncludeRegion: true
retentionPolicy: "3d"
isWALArchiver: true
# - name: garage-remote
# destinationPath: s3://postgres-backups/cl01tl/radarr-standup/radarr5-standup-postgresql-17-cluster
# index: 1
# endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
# endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret-garage
# retentionPolicy: "30d"
# data:
# compression: bzip2
# jobs: 2
scheduledBackups:
- name: daily-backup
suspend: false
schedule: "0 0 0 * * *"
backupName: external
- name: live-backup
suspend: false
immediate: true
schedule: "0 0 0 * * *"
backupName: garage-local
# - name: weekly-backup
# suspend: false
# schedule: "0 22 4 * * SAT"
# backupName: garage-remote
postgres-18-cluster:
mode: recovery
cluster:

7
clusters/cl01tl/helm/radarr/Chart.lock
View File

@@ -5,8 +5,5 @@ dependencies:
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 6.17.1
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 6.17.1
digest: sha256:97e5cf69dbf90b1e2d4fd001ddf0c0296cf8b0118ab478c576d42bdd86ac12b3
generated: "2025-12-14T16:16:01.552168-06:00"
digest: sha256:7d53b134144d6bb3262cffb2a83f45c0970bcb9fd2187cdde4e5f0e602fb3efd
generated: "2025-12-14T16:32:24.51541-06:00"

4
clusters/cl01tl/helm/radarr/Chart.yaml
View File

@@ -24,10 +24,6 @@ dependencies:
alias: radarr
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.5.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 6.17.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: postgres-cluster
alias: postgres-18-cluster
version: 6.17.1

67
clusters/cl01tl/helm/radarr/templates/external-secret.yaml
View File

@@ -54,73 +54,6 @@ spec:
metadataPolicy: None
property: secret_key
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: radarr-postgresql-17-cluster-backup-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: radarr-postgresql-17-cluster-backup-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/postgres-backups
metadataPolicy: None
property: access
- secretKey: ACCESS_SECRET_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/postgres-backups
metadataPolicy: None
property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: radarr-postgresql-17-cluster-backup-secret-garage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: radarr-postgresql-17-cluster-backup-secret-garage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: ACCESS_SECRET_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY
- secretKey: ACCESS_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/postgres-backups
metadataPolicy: None
property: ACCESS_REGION
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret

67
clusters/cl01tl/helm/radarr/values.yaml
View File

@@ -83,73 +83,6 @@ radarr:
main:
- path: /mnt/store
readOnly: false
postgres-17-cluster:
nameOverride: radarr5-postgresql-17
mode: recovery
cluster:
enableSuperuserAccess: true
storage:
storageClass: local-path
walStorage:
storageClass: local-path
monitoring:
enabled: true
prometheusRule:
enabled: true
resources:
requests:
memory: 1Gi
cpu: 200m
initdb:
postInitSQL:
- CREATE DATABASE "radarr-main" OWNER "app";
- CREATE DATABASE "radarr-log" OWNER "app";
recovery:
method: objectStore
objectStore:
destinationPath: s3://postgres-backups/cl01tl/radarr5/radarr5-postgresql-17-cluster
endpointURL: http://garage-main.garage:3900
index: 1
endpointCredentials: radarr-postgresql-17-cluster-backup-secret-garage
backup:
objectStore:
- name: external
destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster
index: 2
endpointCredentials: radarr-postgresql-17-cluster-backup-secret
retentionPolicy: "30d"
isWALArchiver: false
- name: garage-local
destinationPath: s3://postgres-backups/cl01tl/radarr/radarr5-postgresql-17-cluster
index: 1
endpointURL: http://garage-main.garage:3900
endpointCredentials: radarr-postgresql-17-cluster-backup-secret-garage
endpointCredentialsIncludeRegion: true
retentionPolicy: "3d"
isWALArchiver: true
# - name: garage-remote
# destinationPath: s3://postgres-backups/cl01tl/radarr/radarr5-postgresql-17-cluster
# index: 1
# endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
# endpointCredentials: radarr-postgresql-17-cluster-backup-secret-garage
# retentionPolicy: "30d"
# data:
# compression: bzip2
# jobs: 2
scheduledBackups:
- name: daily-backup
suspend: false
schedule: "0 0 0 * * *"
backupName: external
- name: live-backup
suspend: false
immediate: true
schedule: "0 0 0 * * *"
backupName: garage-local
# - name: weekly-backup
# suspend: false
# schedule: "0 16 4 * * SAT"
# backupName: garage-remote
postgres-18-cluster:
mode: recovery
cluster: