refactors(recyclarr): updates version and storage

axeII · Mar 31, 2024 · 970e2c8 · 970e2c8
1 parent c0c9af5
commit 970e2c8
Show file tree

Hide file tree

Showing 3 changed files with 51 additions and 54 deletions.
diff --git a/kubernetes/apps/media/recyclarr/app/helmrelease.yaml b/kubernetes/apps/media/recyclarr/app/helmrelease.yaml
@@ -2,67 +2,78 @@
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
-  name: recyclarr
-  namespace: media
+  name: &app recyclarr
 spec:
   interval: 30m
   chart:
     spec:
       chart: app-template
-      version: 1.5.1
+      version: 2.6.0
       sourceRef:
         kind: HelmRepository
         name: bjw-s-charts
         namespace: flux-system
-  maxHistory: 2
   install:
     remediation:
       retries: 3
   upgrade:
     cleanupOnFail: true
     remediation:
       retries: 3
-  uninstall:
-    keepHistory: false
   values:
-    controller:
-      type: cronjob
-      annotations:
-        reloader.stakater.com/auto: "true"
-      cronjob:
-        schedule: "@daily"
-    image:
-      repository: ghcr.io/recyclarr/recyclarr
-      tag: 6.0.2
-    args:
-      - sync
-    env:
-      TZ: ${TIMEZONE}
-    envFrom:
-      - secretRef:
-          name: recyclarr-secret
-    service:
+    controllers:
       main:
-        enabled: false
-    podSecurityContext:
-      runAsUser: ${USER_ID}
-      runAsGroup: ${USER_ID}
-      fsGroup: ${USER_ID}
-      fsGroupChangePolicy: OnRootMismatch
+        type: cronjob
+        cronjob:
+          schedule: "@daily"
+          timeZone: &timeZone ${TIMEZONE}
+          concurrencyPolicy: Forbid
+          successfulJobsHistory: 1
+          failedJobsHistory: 1
+        containers:
+          main:
+            image:
+              repository: ghcr.io/recyclarr/recyclarr
+              tag: 6.0.2@sha256:02add40feae0569401b5020528e06419b47046723d0bb4bef1e82325e9eefdad
+            args:
+              - sync
+            env:
+              COMPlus_EnableDiagnostics: 0
+              TZ: *timeZone
+            envFrom:
+              - secretRef:
+                  name: recyclarr-secret
+            resources:
+              requests:
+                cpu: 10m
+              limits:
+                memory: 128Mi
+            securityContext:
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+              capabilities:
+                drop:
+                  - ALL
+        pod:
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+            runAsNonRoot: true
+            fsGroup: 1000
+            fsGroupChangePolicy: OnRootMismatch
     persistence:
       config:
         enabled: true
-        existingClaim: recyclarr-config
+        type: nfs
+        server: 192.168.69.69
+        path: /mnt/ThiccBoi/SiccBoi/data/recyclarr
       config-file:
-        enabled: true
         type: configMap
         name: recyclarr-configmap
-        mountPath: /config/recyclarr.yml
-        subPath: recyclarr.yml
-        readOnly: true
-    resources:
-      requests:
-        cpu: 10m
-        memory: 50Mi
-      limits:
-        memory: 200Mi
+        globalMounts:
+          - path: /config/recyclarr.yml
+            subPath: recyclarr.yml
+            readOnly: true
+    service:
+      main:
+        enabled: false
diff --git a/kubernetes/apps/media/recyclarr/app/kustomization.yaml b/kubernetes/apps/media/recyclarr/app/kustomization.yaml
@@ -3,7 +3,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: media
 resources:
-  - ./pvc.yaml
   - ./externalsecret.yaml
   - ./helmrelease.yaml
 configMapGenerator:

diff --git a/kubernetes/apps/media/recyclarr/app/pvc.yaml b/kubernetes/apps/media/recyclarr/app/pvc.yaml