alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

Automated Manifest Update #2571

Merged
alexlebens merged 2 commits from auto/update-manifests into manifests 2025-12-16 00:22:59 +00:00
Conversation 0 Commits 2 Files Changed 14 +388 -48
14 changed files with 388 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
clusters/cl01tl/manifests/audiobookshelf/Deployment-audiobookshelf.yaml
View File

@@ -72,8 +72,6 @@ spec:
volumeMounts:
- mountPath: /mnt/store/
name: audiobooks
- mountPath: /metadata/backups
name: backup
- mountPath: /config
name: config
- mountPath: /metadata
@@ -82,9 +80,6 @@ spec:
- name: audiobooks
persistentVolumeClaim:
claimName: audiobookshelf-nfs-storage
- name: backup
persistentVolumeClaim:
claimName: audiobookshelf-nfs-storage-backup
- name: config
persistentVolumeClaim:
claimName: audiobookshelf-config

19
clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret.yaml → clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-external.yaml
View File

@@ -1,12 +1,15 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: audiobookshelf-config-backup-secret
name: audiobookshelf-config-backup-secret-external
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf-config-backup-secret
helm.sh/chart: volsync-target-config-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-config-backup-secret-external
spec:
secretStoreRef:
kind: ClusterSecretStore
@@ -22,21 +25,21 @@ spec:
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/volsync/restic/config
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: S3_BUCKET_ENDPOINT
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/volsync/restic/config
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/volsync/restic/config
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_DEFAULT_REGION
- secretKey: AWS_ACCESS_KEY_ID
@@ -45,11 +48,11 @@ spec:
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: access_key
property: AWS_ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: secret_key
property: AWS_SECRET_ACCESS_KEY

58
clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: audiobookshelf-config-backup-secret-local
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-config-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-config-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-config-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: audiobookshelf-config-backup-secret-remote
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-config-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-config-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-config"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

19
clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret.yaml → clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-external.yaml
View File

@@ -1,12 +1,15 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: audiobookshelf-metadata-backup-secret
name: audiobookshelf-metadata-backup-secret-external
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf-metadata-backup-secret
helm.sh/chart: volsync-target-metadata-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-external
spec:
secretStoreRef:
kind: ClusterSecretStore
@@ -22,21 +25,21 @@ spec:
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/volsync/restic/config
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: S3_BUCKET_ENDPOINT
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/volsync/restic/config
key: /volsync/restic/digital-ocean
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/volsync/restic/config
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: AWS_DEFAULT_REGION
- secretKey: AWS_ACCESS_KEY_ID
@@ -45,11 +48,11 @@ spec:
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: access_key
property: AWS_ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/volsync-backups
metadataPolicy: None
property: secret_key
property: AWS_SECRET_ACCESS_KEY

58
clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-local.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: audiobookshelf-metadata-backup-secret-local
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-metadata-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-local
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-metadata"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-local
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

58
clusters/cl01tl/manifests/audiobookshelf/ExternalSecret-audiobookshelf-metadata-backup-secret-remote.yaml Normal file
View File

@@ -0,0 +1,58 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: audiobookshelf-metadata-backup-secret-remote
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-metadata-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-metadata-backup-secret-remote
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
RESTIC_REPOSITORY: "{{ .BUCKET_ENDPOINT }}/audiobookshelf/audiobookshelf-metadata"
data:
- secretKey: BUCKET_ENDPOINT
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: BUCKET_ENDPOINT
- secretKey: RESTIC_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /volsync/restic/garage-remote
metadataPolicy: None
property: RESTIC_PASSWORD
- secretKey: AWS_DEFAULT_REGION
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_REGION
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_KEY_ID
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/volsync-backups
metadataPolicy: None
property: ACCESS_SECRET_KEY

17
clusters/cl01tl/manifests/audiobookshelf/PersistentVolumeClaim-audiobookshelf-nfs-storage-backup.yaml
View File

@@ -1,17 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: audiobookshelf-nfs-storage-backup
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf-nfs-storage-backup
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
spec:
volumeMode: Filesystem
storageClassName: nfs-client
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 1Gi

14
clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source.yaml → clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-external.yaml
View File

@@ -1,25 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: audiobookshelf-config-backup-source
name: audiobookshelf-config-backup-source-external
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf-config-backup-source
helm.sh/chart: volsync-target-config-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-config-backup
spec:
sourcePVC: audiobookshelf-config
trigger:
schedule: 0 4 * * *
restic:
pruneIntervalDays: 7
repository: audiobookshelf-config-backup-secret
repository: audiobookshelf-config-backup-secret-external
retain:
hourly: 1
daily: 3
weekly: 2
hourly: 1
monthly: 2
weekly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: audiobookshelf-config-backup-source-local
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-config-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-config-backup
spec:
sourcePVC: audiobookshelf-config
trigger:
schedule: 0 2 * * *
restic:
pruneIntervalDays: 7
repository: audiobookshelf-config-backup-secret-local
retain:
daily: 3
hourly: 1
monthly: 2
weekly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-config-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: audiobookshelf-config-backup-source-remote
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-config-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-config-backup
spec:
sourcePVC: audiobookshelf-config
trigger:
schedule: 0 3 * * *
restic:
pruneIntervalDays: 7
repository: audiobookshelf-config-backup-secret-remote
retain:
daily: 3
hourly: 1
monthly: 2
weekly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

14
clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source.yaml → clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-external.yaml
View File

@@ -1,25 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: audiobookshelf-metadata-backup-source
name: audiobookshelf-metadata-backup-source-external
namespace: audiobookshelf
labels:
app.kubernetes.io/name: audiobookshelf-metadata-backup-source
helm.sh/chart: volsync-target-metadata-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-metadata-backup
spec:
sourcePVC: audiobookshelf-metadata
trigger:
schedule: 0 4 * * *
restic:
pruneIntervalDays: 7
repository: audiobookshelf-metadata-backup-secret
repository: audiobookshelf-metadata-backup-secret-external
retain:
hourly: 1
daily: 3
weekly: 2
hourly: 1
monthly: 2
weekly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-local.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: audiobookshelf-metadata-backup-source-local
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-metadata-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-metadata-backup
spec:
sourcePVC: audiobookshelf-metadata
trigger:
schedule: 0 2 * * *
restic:
pruneIntervalDays: 7
repository: audiobookshelf-metadata-backup-secret-local
retain:
daily: 3
hourly: 1
monthly: 2
weekly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi

29
clusters/cl01tl/manifests/audiobookshelf/ReplicationSource-audiobookshelf-metadata-backup-source-remote.yaml Normal file
View File

@@ -0,0 +1,29 @@
apiVersion: volsync.backube/v1alpha1
kind: ReplicationSource
metadata:
name: audiobookshelf-metadata-backup-source-remote
namespace: audiobookshelf
labels:
helm.sh/chart: volsync-target-metadata-0.3.0
app.kubernetes.io/instance: audiobookshelf
app.kubernetes.io/part-of: audiobookshelf
app.kubernetes.io/version: "0.3.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: audiobookshelf-metadata-backup
spec:
sourcePVC: audiobookshelf-metadata
trigger:
schedule: 0 3 * * *
restic:
pruneIntervalDays: 7
repository: audiobookshelf-metadata-backup-secret-remote
retain:
daily: 3
hourly: 1
monthly: 2
weekly: 2
yearly: 4
copyMethod: Snapshot
storageClassName: ceph-block
volumeSnapshotClassName: ceph-blockpool-snapshot
cacheCapacity: 1Gi