Automated Manifest Update (#4943)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

### Details
- **Trigger**: `pull_request` by `@alexlebens`
- **Commit**: `85b5c73` (on `85b5c73c32477b940ad515ee769fc362bcf20e67`)
- **Charts Updated**: `blocky,decluttarr,gatus,homepage,houndarr`

Reviewed-on: #4943
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/blocky/ConfigMap-blocky.yaml

@@ -114,6 +114,7 @@ data:
         home                            IN      CNAME   traefik-cl01tl
         home-assistant                  IN      CNAME   traefik-cl01tl
         home-assistant-code-server      IN      CNAME   traefik-cl01tl
+        houndarr                        IN      CNAME   traefik-cl01tl
         hubble                          IN      CNAME   traefik-cl01tl
         immich                          IN      CNAME   traefik-cl01tl
         jellyfin                        IN      CNAME   traefik-cl01tl

clusters/cl01tl/manifests/blocky/Deployment-blocky.yaml

@@ -22,7 +22,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/configMaps: 2f8dc0eeaa9f5418260be77e87da1084297c5a7bb36c18028b85e5a76fc3b993
+        checksum/configMaps: aeb8cddb4a9a070880f53564e4b6a7ba921497ed431bf6bfcad585cd87330399
       labels:
         app.kubernetes.io/controller: main
         app.kubernetes.io/instance: blocky

clusters/cl01tl/manifests/decluttarr/ExternalSecret-decluttarr-config-secret.yaml

@@ -1,21 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: decluttarr-config-secret
-  namespace: decluttarr
-  labels:
-    app.kubernetes.io/name: decluttarr-config-secret
-    app.kubernetes.io/instance: decluttarr
-    app.kubernetes.io/part-of: decluttarr
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: config.yaml
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/decluttarr/config
-        metadataPolicy: None
-        property: config.yaml

clusters/cl01tl/manifests/gatus/ConfigMap-gatus.yaml

@@ -527,6 +527,15 @@ data:
       interval: 30s
       name: tdarr
       url: https://tdarr.alexlebens.net
+    - alerts:
+      - type: ntfy
+      conditions:
+      - '[STATUS] == 200'
+      - '[CERTIFICATE_EXPIRATION] > 240h'
+      group: core
+      interval: 30s
+      name: houndarr
+      url: https://houndarr.alexlebens.net
     - alerts:
       - type: ntfy
       conditions:

clusters/cl01tl/manifests/gatus/Deployment-gatus.yaml

@@ -26,7 +26,7 @@ spec:
         app.kubernetes.io/name: gatus
         app.kubernetes.io/instance: gatus
       annotations:
-        checksum/config: 2cb54b0ea6e63a3e66e2ccfcff9fb4d5c6b307440e41365097906c8ef8ff30b9
+        checksum/config: e71958a58e2b9c9fad6f8ebcfa3f695850ae150deffa9ed9a4d135b98e6c4353
     spec:
       serviceAccountName: default
       automountServiceAccountToken: false

clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml

@@ -562,6 +562,12 @@ data:
             href: https://bazarr.alexlebens.net
             siteMonitor: http://bazarr.bazarr:80
             statusStyle: dot
+        - Houndarr:
+            icon: https://raw.githubusercontent.com/av1155/houndarr/main/src/houndarr/static/img/houndarr-logo-dark.png
+            description: Media Searches
+            href: https://houndarr.alexlebens.net
+            siteMonitor: http://houndarr.houndarr:80
+            statusStyle: dot
         - Tdarr:
             icon: sh-tdarr.webp
             description: Media transcoding and health checks

clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml

@@ -24,7 +24,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/configMaps: 93016d56f06e31c71b9d3e47f8f82c3ede788fce50b24637c4b5b61ecc3453fe
+        checksum/configMaps: 7229a357dcc306b854b7bf4b13a2b0d9841b6da5a8a72c625915e2e9f267e365
         checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
       labels:
         app.kubernetes.io/controller: main

clusters/cl01tl/manifests/houndarr/Deployment-houndarr.yaml

@@ -1,14 +1,14 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: decluttarr
+  name: houndarr
   labels:
     app.kubernetes.io/controller: main
-    app.kubernetes.io/instance: decluttarr
+    app.kubernetes.io/instance: houndarr
     app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: decluttarr
+    app.kubernetes.io/name: houndarr
-    helm.sh/chart: decluttarr-4.6.2
+    helm.sh/chart: houndarr-4.6.2
-  namespace: decluttarr
+  namespace: houndarr
 spec:
   revisionHistoryLimit: 3
   replicas: 1
@@ -17,14 +17,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/controller: main
-      app.kubernetes.io/name: decluttarr
+      app.kubernetes.io/name: houndarr
-      app.kubernetes.io/instance: decluttarr
+      app.kubernetes.io/instance: houndarr
   template:
     metadata:
       labels:
         app.kubernetes.io/controller: main
-        app.kubernetes.io/instance: decluttarr
+        app.kubernetes.io/instance: houndarr
-        app.kubernetes.io/name: decluttarr
+        app.kubernetes.io/name: houndarr
     spec:
       enableServiceLinks: false
       serviceAccountName: default
@@ -37,7 +37,11 @@ spec:
         - env:
             - name: TZ
               value: America/Chicago
-          image: ghcr.io/manimatter/decluttarr:v2.0.0
+            - name: HOUNDARR_SECURE_COOKIES
+              value: "true"
+            - name: HOUNDARR_TRUSTED_PROXIES
+              value: 10.96.0.0/12
+          image: ghcr.io/av1155/houndarr:v1.3.2
           imagePullPolicy: IfNotPresent
           name: main
           resources:
@@ -45,12 +49,9 @@ spec:
               cpu: 10m
               memory: 128Mi
           volumeMounts:
-            - mountPath: /app/config/config.yaml
+            - mountPath: /data
-              mountPropagation: None
+              name: data
-              name: config
-              readOnly: true
-              subPath: config.yaml
       volumes:
-        - name: config
+        - name: data
-          secret:
+          persistentVolumeClaim:
-            secretName: decluttarr-config-secret
+            claimName: houndarr-data

clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-external.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: houndarr-data-backup-secret-external
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup-secret-external
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/houndarr/houndarr-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/digital-ocean
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/digital-ocean
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: AWS_DEFAULT_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: AWS_ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: AWS_SECRET_ACCESS_KEY

clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-local.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: houndarr-data-backup-secret-local
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup-secret-local
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/houndarr/houndarr-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-local
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-local
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/houndarr/ExternalSecret-houndarr-data-backup-secret-remote.yaml

@@ -0,0 +1,58 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: houndarr-data-backup-secret-remote
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup-secret-remote
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/houndarr/houndarr-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /volsync/restic/garage-remote
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/volsync-backups
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY

clusters/cl01tl/manifests/houndarr/HTTPRoute-houndarr.yaml

@@ -0,0 +1,30 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: houndarr
+  labels:
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr
+    helm.sh/chart: houndarr-4.6.2
+  namespace: houndarr
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - "houndarr.alexlebens.net"
+  rules:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: houndarr
+          namespace: houndarr
+          port: 80
+          weight: 100
+      matches:
+        - path:
+            type: PathPrefix
+            value: /

clusters/cl01tl/manifests/houndarr/PersistentVolumeClaim-houndarr-data.yaml

@@ -0,0 +1,17 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: houndarr-data
+  labels:
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr
+    helm.sh/chart: houndarr-4.6.2
+  namespace: houndarr
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "1Gi"
+  storageClassName: "ceph-block"

clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-external.yaml

@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: houndarr-data-backup-source-external
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup
+spec:
+  sourcePVC: houndarr-data
+  trigger:
+    schedule: 40 14 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: houndarr-data-backup-secret-external
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-local.yaml

@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: houndarr-data-backup-source-local
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup
+spec:
+  sourcePVC: houndarr-data
+  trigger:
+    schedule: 40 11 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: houndarr-data-backup-secret-local
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/houndarr/ReplicationSource-houndarr-data-backup-source-remote.yaml

@@ -0,0 +1,29 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: houndarr-data-backup-source-remote
+  namespace: houndarr
+  labels:
+    helm.sh/chart: volsync-target-data-0.8.0
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/part-of: houndarr
+    app.kubernetes.io/version: "0.8.0"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr-data-backup
+spec:
+  sourcePVC: houndarr-data
+  trigger:
+    schedule: 40 12 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: houndarr-data-backup-secret-remote
+    retain:
+      daily: 7
+      hourly: 0
+      monthly: 3
+      weekly: 4
+      yearly: 1
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 1Gi

clusters/cl01tl/manifests/houndarr/Service-houndarr.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: houndarr
+  labels:
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: houndarr
+    app.kubernetes.io/service: houndarr
+    helm.sh/chart: houndarr-4.6.2
+  namespace: houndarr
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 8877
+      protocol: TCP
+      name: http
+  selector:
+    app.kubernetes.io/controller: main
+    app.kubernetes.io/instance: houndarr
+    app.kubernetes.io/name: houndarr