-
Notifications
You must be signed in to change notification settings - Fork 33
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Michael Fornaro <20387402+xUnholy@users.noreply.github.com>
- Loading branch information
Showing
25 changed files
with
607 additions
and
237 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,70 @@ | ||
| --- | ||
| # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json | ||
| name: "Publish Kubernetes Schemas" | ||
|
|
||
| on: | ||
| workflow_dispatch: {} | ||
| schedule: | ||
| - cron: "0 0 * * 0" | ||
| push: | ||
| branches: | ||
| - "main" | ||
| paths: | ||
| - ".github/workflows/schemas.yaml" | ||
|
|
||
| env: | ||
| OCI_REPO: "oci://ghcr.io/xunholy/kubernetes-schemas/${{ github.event.repository.name }}" | ||
|
|
||
| jobs: | ||
| publish: | ||
| name: Schemas | ||
| runs-on: ["gha-runner-scale-set"] | ||
| permissions: | ||
| contents: read | ||
| packages: write | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| token: "${{ steps.app-token.outputs.token }}" | ||
|
|
||
| - name: Generate Token | ||
| uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1 | ||
| id: app-token | ||
| with: | ||
| app-id: "${{ secrets.BOT_APP_ID }}" | ||
| private-key: "${{ secrets.BOT_APP_PRIVATE_KEY }}" | ||
|
|
||
| - name: Setup Homebrew | ||
| uses: Homebrew/actions/setup-homebrew@master | ||
|
|
||
| - name: Setup Workflow Tools | ||
| run: brew install kubectl uv | ||
|
|
||
| - name: Setup Python | ||
| uses: actions/setup-python@v5 | ||
| with: | ||
| python-version: 3.13.x | ||
|
|
||
| - name: Setup Node | ||
| uses: actions/setup-node@v4 | ||
| with: | ||
| node-version: 22.x | ||
|
|
||
| - name: Install Python Dependencies | ||
| run: uv pip install pyyaml | ||
|
|
||
| - name: Download and run crd-extractor | ||
| run: | | ||
| curl -fsSL -o $GITHUB_WORKSPACE/crd-extractor.sh \ | ||
| https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/Utilities/crd-extractor.sh | ||
| chmod +x $GITHUB_WORKSPACE/crd-extractor.sh | ||
| bash $GITHUB_WORKSPACE/crd-extractor.sh | ||
| - name: Deploy to Cloudflare Pages | ||
| uses: cloudflare/wrangler-action@v3 | ||
| with: | ||
| apiToken: "${{ secrets.CLOUDFLARE_API_TOKEN }}" | ||
| accountId: "${{ secrets.CLOUDFLARE_ACCOUNT_ID }}" | ||
| workingDirectory: /home/runner/.datree/crdSchemas | ||
| command: pages deploy --project-name=kubernetes-schemas --branch main . |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -11,4 +11,4 @@ spec: | |
| eventSeverity: info | ||
| eventSources: | ||
| - kind: Kustomization | ||
| name: 'flux-system' | ||
| name: '*' | ||
109 changes: 109 additions & 0 deletions
109
kubernetes/namespaces/base/home-system/jellyseerr/app/helmrelease.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,109 @@ | ||
| --- | ||
| # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/helm.toolkit.fluxcd.io/helmrelease_v2beta2.json | ||
| apiVersion: helm.toolkit.fluxcd.io/v2 | ||
| kind: HelmRelease | ||
| metadata: | ||
| name: jellyseerr | ||
| namespace: home-system | ||
| spec: | ||
| interval: 5m | ||
| chart: | ||
| spec: | ||
| version: 3.6.0 | ||
| chart: app-template | ||
| sourceRef: | ||
| kind: HelmRepository | ||
| name: bjw-charts | ||
| namespace: flux-system | ||
| interval: 5m | ||
| install: | ||
| timeout: 10m | ||
| replace: true | ||
| crds: CreateReplace | ||
| createNamespace: true | ||
| remediation: | ||
| retries: 3 | ||
| upgrade: | ||
| remediation: | ||
| remediateLastFailure: true | ||
| retries: 3 | ||
| strategy: rollback | ||
| cleanupOnFail: true | ||
| crds: CreateReplace | ||
| test: | ||
| enable: true | ||
| rollback: | ||
| recreate: true | ||
| force: true | ||
| cleanupOnFail: true | ||
| uninstall: | ||
| keepHistory: false | ||
| driftDetection: | ||
| mode: enabled | ||
| maxHistory: 3 | ||
| values: | ||
| controllers: | ||
| jellyseerr: | ||
| containers: | ||
| app: | ||
| image: | ||
| repository: docker.io/fallenbagel/jellyseerr | ||
| tag: 2.2.3@sha256:a324fa4d81cce73116801bee3c50b632f3457c0ca0ad31aa692c640e22f50dea | ||
| env: | ||
| TZ: Australia/Melbourne | ||
| LOG_LEVEL: "info" | ||
| PORT: &port 80 | ||
| envFrom: | ||
| - secretRef: | ||
| name: jellyseerr-secret | ||
| probes: | ||
| liveness: &probes | ||
| enabled: true | ||
| custom: true | ||
| spec: | ||
| httpGet: | ||
| path: /api/v1/status | ||
| port: *port | ||
| initialDelaySeconds: 0 | ||
| periodSeconds: 10 | ||
| timeoutSeconds: 1 | ||
| failureThreshold: 3 | ||
| readiness: *probes | ||
| securityContext: | ||
| allowPrivilegeEscalation: false | ||
| readOnlyRootFilesystem: true | ||
| capabilities: { drop: ["ALL"] } | ||
| resources: | ||
| requests: | ||
| cpu: 10m | ||
| limits: | ||
| memory: 2Gi | ||
| defaultPodOptions: | ||
| securityContext: | ||
| runAsNonRoot: true | ||
| runAsUser: 1000 | ||
| runAsGroup: 1000 | ||
| fsGroup: 1000 | ||
| fsGroupChangePolicy: OnRootMismatch | ||
| seccompProfile: { type: RuntimeDefault } | ||
| service: | ||
| app: | ||
| controller: jellyseerr | ||
| ports: | ||
| http: | ||
| port: *port | ||
| persistence: | ||
| config: | ||
| existingClaim: jellyseerr | ||
| globalMounts: | ||
| - path: /app/config | ||
| cache: | ||
| existingClaim: jellyseerr-cache | ||
| globalMounts: | ||
| - path: /app/config/cache | ||
| logs: | ||
| type: emptyDir | ||
| globalMounts: | ||
| - path: /app/config/logs | ||
| tmp: | ||
| type: emptyDir |
File renamed without changes.
12 changes: 12 additions & 0 deletions
12
kubernetes/namespaces/base/home-system/jellyseerr/app/pvc.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,12 @@ | ||
| --- | ||
| apiVersion: v1 | ||
| kind: PersistentVolumeClaim | ||
| metadata: | ||
| name: jellyseerr-cache | ||
| spec: | ||
| accessModes: ["ReadWriteOnce"] | ||
| resources: | ||
| requests: | ||
| storage: 15Gi | ||
| # TODO: Update once storage class is created | ||
| # storageClassName: ceph-block |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.