chore: Update manifests after change

2026-03-21 00:38:01 +00:00
parent d5b0c9431e
commit d300cfb11f
17 changed files with 368 additions and 42 deletions
--- a/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml
@@ -114,6 +114,7 @@ data:
        home                            IN      CNAME   traefik-cl01tl
        home-assistant                  IN      CNAME   traefik-cl01tl
        home-assistant-code-server      IN      CNAME   traefik-cl01tl
+        houndarr                        IN      CNAME   traefik-cl01tl
        hubble                          IN      CNAME   traefik-cl01tl
        immich                          IN      CNAME   traefik-cl01tl
        jellyfin                        IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
+++ b/clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml
@@ -22,7 +22,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/configMaps: 2f8dc0eeaa9f5418260be77e87da1084297c5a7bb36c18028b85e5a76fc3b993
+        checksum/configMaps: aeb8cddb4a9a070880f53564e4b6a7ba921497ed431bf6bfcad585cd87330399
      labels:
        app.kubernetes.io/controller: main
        app.kubernetes.io/instance: blocky
--- a/clusters/cl01tl/manifests/decluttarr/ExternalSecret-decluttarr-config-secret.yaml
+++ b/clusters/cl01tl/manifests/decluttarr/ExternalSecret-decluttarr-config-secret.yaml
@@ -1,21 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: decluttarr-config-secret
-  namespace: decluttarr
-  labels:
-    app.kubernetes.io/name: decluttarr-config-secret
-    app.kubernetes.io/instance: decluttarr
-    app.kubernetes.io/part-of: decluttarr
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: config.yaml
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/decluttarr/config
-        metadataPolicy: None
-        property: config.yaml
--- a/clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml
+++ b/clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml
@@ -527,6 +527,15 @@ data:
      interval: 30s
      name: tdarr
      url: https://tdarr.alexlebens.net
+    - alerts:
+      - type: ntfy
+      conditions:
+      - '[STATUS] == 200'
+      - '[CERTIFICATE_EXPIRATION] > 240h'
+      group: core
+      interval: 30s
+      name: houndarr
+      url: https://houndarr.alexlebens.net
    - alerts:
      - type: ntfy
      conditions:
--- a/clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml
+++ b/clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml
@@ -26,7 +26,7 @@ spec:
        app.kubernetes.io/name: gatus
        app.kubernetes.io/instance: gatus
      annotations:
-        checksum/config: 2cb54b0ea6e63a3e66e2ccfcff9fb4d5c6b307440e41365097906c8ef8ff30b9
+        checksum/config: e71958a58e2b9c9fad6f8ebcfa3f695850ae150deffa9ed9a4d135b98e6c4353
    spec:
      serviceAccountName: default
      automountServiceAccountToken: false
--- a/clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
+++ b/clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
@@ -562,6 +562,12 @@ data:
            href: https://bazarr.alexlebens.net
            siteMonitor: http://bazarr.bazarr:80
            statusStyle: dot
+        - Houndarr:
+            icon: https://raw.githubusercontent.com/av1155/houndarr/main/src/houndarr/static/img/houndarr-logo-dark.png
+            description: Media Searches
+            href: https://houndarr.alexlebens.net
+            siteMonitor: http://houndarr.houndarr:80
+            statusStyle: dot
        - Tdarr:
            icon: sh-tdarr.webp
            description: Media transcoding and health checks
--- a/clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
+++ b/clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
@@ -24,7 +24,7 @@ spec:
  template:
    metadata:
      annotations:
-        checksum/configMaps: 93016d56f06e31c71b9d3e47f8f82c3ede788fce50b24637c4b5b61ecc3453fe
+        checksum/configMaps: 7229a357dcc306b854b7bf4b13a2b0d9841b6da5a8a72c625915e2e9f267e365
        checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
      labels:
        app.kubernetes.io/controller: main
--- a/clusters/cl01tl/manifests/decluttarr/Deployment-decluttarr.yaml
+++ b/clusters/cl01tl/manifests/decluttarr/Deployment-decluttarr.yaml
@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: decluttarr
+  name: houndarr
  labels:
    app.kubernetes.io/controller: main
-    app.kubernetes.io/instance: decluttarr
+    app.kubernetes.io/instance: houndarr
    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: decluttarr
-    helm.sh/chart: decluttarr-4.6.2
-  namespace: decluttarr
+    app.kubernetes.io/name: houndarr
+    helm.sh/chart: houndarr-4.6.2
+  namespace: houndarr
 spec:
  revisionHistoryLimit: 3
  replicas: 1
@@ -17,14 +17,14 @@ spec:
  selector:
    matchLabels:
      app.kubernetes.io/controller: main
-      app.kubernetes.io/name: decluttarr
-      app.kubernetes.io/instance: decluttarr
+      app.kubernetes.io/name: houndarr
+      app.kubernetes.io/instance: houndarr
  template:
    metadata:
      labels:
        app.kubernetes.io/controller: main
-        app.kubernetes.io/instance: decluttarr
-        app.kubernetes.io/name: decluttarr
+        app.kubernetes.io/instance: houndarr
+        app.kubernetes.io/name: houndarr
    spec:
      enableServiceLinks: false
      serviceAccountName: default
@@ -37,7 +37,11 @@ spec:
        - env:
            - name: TZ
              value: America/Chicago
-          image: ghcr.io/manimatter/decluttarr:v2.0.0
+            - name: HOUNDARR_SECURE_COOKIES
+              value: "true"
+            - name: HOUNDARR_TRUSTED_PROXIES
+              value: 10.96.0.0/12
+          image: ghcr.io/av1155/houndarr:v1.3.2
          imagePullPolicy: IfNotPresent
          name: main
          resources:
@@ -45,12 +49,9 @@ spec:
              cpu: 10m
              memory: 128Mi
          volumeMounts:
-            - mountPath: /app/config/config.yaml
-              mountPropagation: None
-              name: config
-              readOnly: true
-              subPath: config.yaml
+            - mountPath: /data
+              name: data
      volumes:
-        - name: config
-          secret:
-            secretName: decluttarr-config-secret
+        - name: data
+          persistentVolumeClaim:
+            claimName: houndarr-data
--- a/clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-external.yaml
+++ b/clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-external.yaml
@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: houndarr-data-backup-secret-external
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup-secret-external
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/houndarr/houndarr-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/digital-ocean
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/digital-ocean
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: AWS_DEFAULT_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: AWS_ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: AWS_SECRET_ACCESS_KEY
--- a/clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-local.yaml
+++ b/clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-local.yaml
@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: houndarr-data-backup-secret-local
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup-secret-local
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/houndarr/houndarr-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-local
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-local
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-remote.yaml
+++ b/clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-remote.yaml
@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: houndarr-data-backup-secret-remote
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/houndarr/houndarr-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/manifests/houndarr/HTTPRoute-houndarr.yaml
+++ b/clusters/cl01tl/manifests/houndarr/HTTPRoute-houndarr.yaml
@@ -0,0 +1,30 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: houndarr
+  labels:
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr
+    helm.sh/chart: houndarr-4.6.2
+  namespace: houndarr
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - "houndarr.alexlebens.net"
+  rules:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: houndarr
+          namespace: houndarr
+          port: 80
+          weight: 100
+      matches:
+        - path:
+            type: PathPrefix
+            value: /
--- a/clusters/cl01tl/manifests/houndarr/PersistentVolumeClaim-houndarr-data.yaml
+++ b/clusters/cl01tl/manifests/houndarr/PersistentVolumeClaim-houndarr-data.yaml
@@ -0,0 +1,17 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: houndarr-data
+  labels:
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr
+    helm.sh/chart: houndarr-4.6.2
+  namespace: houndarr
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "1Gi"
+  storageClassName: "ceph-block"
--- a/clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-external.yaml
+++ b/clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-external.yaml
@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: houndarr-data-backup-source-external
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup
+spec:
+  sourcePVC: houndarr-data
+  trigger:
+    schedule: 40 14 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: houndarr-data-backup-secret-external
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi
--- a/clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-local.yaml
+++ b/clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-local.yaml
@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: houndarr-data-backup-source-local
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup
+spec:
+  sourcePVC: houndarr-data
+  trigger:
+    schedule: 40 11 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: houndarr-data-backup-secret-local
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi
--- a/clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-remote.yaml
+++ b/clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-remote.yaml
@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: houndarr-data-backup-source-remote
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup
+spec:
+  sourcePVC: houndarr-data
+  trigger:
+    schedule: 40 12 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: houndarr-data-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi
--- a/clusters/cl01tl/manifests/houndarr/Service-houndarr.yaml
+++ b/clusters/cl01tl/manifests/houndarr/Service-houndarr.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: houndarr
+  labels:
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr
+    app.kubernetes.io/service: houndarr
+    helm.sh/chart: houndarr-4.6.2
+  namespace: houndarr
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 8877
+      protocol: TCP
+      name: http
+  selector:
+    app.kubernetes.io/controller: main
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/name: houndarr