Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: deploy dashbrr #3275

Merged
merged 1 commit into from
Nov 29, 2024
Merged

feat: deploy dashbrr #3275

merged 1 commit into from
Nov 29, 2024

Conversation

joryirving
Copy link
Owner

No description provided.

@smurf-bot smurf-bot bot added area/kubernetes Changes made in the kubernetes directory area/docs area/terraform cluster/main labels Nov 29, 2024
@smurf-bot
Copy link
Contributor

smurf-bot bot commented Nov 29, 2024 •
edited
Loading 

--- kubernetes/main/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/dashbrr

+++ kubernetes/main/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/dashbrr

@@ -0,0 +1,47 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: cluster-apps
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dashbrr
+  namespace: flux-system
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: dashbrr
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  dependsOn:
+  - name: crunchy-postgres-operator-cluster
+  - name: crunchy-postgres-stores
+  - name: external-secrets-stores
+  interval: 30m
+  path: ./kubernetes/main/apps/downloads/dashbrr/app
+  postBuild:
+    substitute:
+      APP: dashbrr
+    substituteFrom:
+    - kind: ConfigMap
+      name: cluster-settings
+      optional: true
+    - kind: ConfigMap
+      name: cluster-settings-main
+      optional: true
+    - kind: Secret
+      name: cluster-secrets
+      optional: true
+    - kind: Secret
+      name: cluster-secrets-main
+      optional: true
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  targetNamespace: downloads
+  timeout: 5m
+  wait: false
+
--- kubernetes/main/apps/database/crunchy-postgres/cluster Kustomization: flux-system/crunchy-postgres-operator-cluster PostgresCluster: database/postgres

+++ kubernetes/main/apps/database/crunchy-postgres/cluster Kustomization: flux-system/crunchy-postgres-operator-cluster PostgresCluster: database/postgres

@@ -181,12 +181,17 @@

   - databases:
     - bazarr
     name: bazarr
     password:
       type: AlphaNumeric
   - databases:
+    - dashbrr
+    name: dashbrr
+    password:
+      type: AlphaNumeric
+  - databases:
     - lubelog
     name: lubelog
     password:
       type: AlphaNumeric
   - databases:
     - gatus
--- kubernetes/main/apps/self-hosted/homepage/app Kustomization: flux-system/homepage ExternalSecret: self-hosted/homepage-secret

+++ kubernetes/main/apps/self-hosted/homepage/app Kustomization: flux-system/homepage ExternalSecret: self-hosted/homepage-secret

@@ -80,13 +80,13 @@

         HOMEPAGE_VAR_KOMGA_USERNAME: '{{ .HOMEPAGE_VAR_KOMGA_USERNAME }}'
         HOMEPAGE_VAR_LUBELOG_PASSWORD: '{{ .HOMEPAGE_VAR_LUBELOG_PASSWORD }}'
         HOMEPAGE_VAR_LUBELOG_USERNAME: '{{ .HOMEPAGE_VAR_LUBELOG_USERNAME }}'
         HOMEPAGE_VAR_MYLAR_TOKEN: '{{ .MYLAR_API_KEY }}'
         HOMEPAGE_VAR_OVERSEERR_TOKEN: '{{ .OVERSEERR_API_KEY }}'
         HOMEPAGE_VAR_PAPERLESS_TOKEN: '{{ .HOMEPAGE_VAR_PAPERLESS_TOKEN }}'
-        HOMEPAGE_VAR_PLEX_TOKEN: '{{ .PLEX_TOKEN }}'
+        HOMEPAGE_VAR_PLEX_TOKEN: '{{ .PLEX_API_KEY }'
         HOMEPAGE_VAR_PORTAINER_TOKEN: '{{ .PORTAINER_TOKEN }}'
         HOMEPAGE_VAR_PROWLARR_TOKEN: '{{ .PROWLARR_API_KEY }}'
         HOMEPAGE_VAR_QBITTORRENT_PASSWORD: '{{ .QBITTORRENT_PASSWORD }}'
         HOMEPAGE_VAR_QBITTORRENT_USERNAME: '{{ .QBITTORRENT_USERNAME }}'
         HOMEPAGE_VAR_RADARR_TOKEN: '{{ .RADARR_API_KEY }}'
         HOMEPAGE_VAR_READARR_TOKEN: '{{ .READARR_API_KEY }}'
--- kubernetes/main/apps/downloads/bazarr/app Kustomization: flux-system/bazarr ExternalSecret: downloads/bazarr-secret

+++ kubernetes/main/apps/downloads/bazarr/app Kustomization: flux-system/bazarr ExternalSecret: downloads/bazarr-secret

@@ -19,9 +19,9 @@

     name: onepassword-connect
   target:
     name: bazarr-secret
     template:
       data:
         BAZARR__API_KEY: '{{ .BAZARR_API_KEY }}'
-        PLEX_TOKEN: '{{ .PLEX_TOKEN }}'
+        PLEX_TOKEN: '{{ .PLEX_API_KEY }'
       engineVersion: v2
 
--- kubernetes/main/apps/media/plex/app Kustomization: flux-system/plex ExternalSecret: media/plex-secret

+++ kubernetes/main/apps/media/plex/app Kustomization: flux-system/plex ExternalSecret: media/plex-secret

@@ -16,9 +16,9 @@

     kind: ClusterSecretStore
     name: onepassword-connect
   target:
     name: plex-secret
     template:
       data:
-        PLEX_TOKEN: '{{ .PLEX_TOKEN }}'
+        PLEX_TOKEN: '{{ .PLEX_API_KEY }'
       engineVersion: v2
 
--- kubernetes/main/apps/downloads/readarr/app Kustomization: flux-system/readarr ExternalSecret: downloads/readarr-db-secret

+++ kubernetes/main/apps/downloads/readarr/app Kustomization: flux-system/readarr ExternalSecret: downloads/readarr-db-secret

@@ -22,12 +22,12 @@

     name: readarr-secret
     template:
       data:
         READARR__POSTGRES__CACHEDB: readarr_cache
         READARR__POSTGRES__HOST: '{{ index . "pgbouncer-host" }}'
         READARR__POSTGRES__LOGDB: readarr_log
-        READARR__POSTGRES__MAINDB: readarr_main
+        READARR__POSTGRES__MAINDB: '{{ .dbname }}'
         READARR__POSTGRES__PASSWORD: '{{ .password }}'
         READARR__POSTGRES__PORT: '{{ index . "pgbouncer-port" }}'
         READARR__POSTGRES__USER: '{{ .user }}'
       type: Opaque
 
--- kubernetes/main/apps/downloads/radarr/app Kustomization: flux-system/radarr ExternalSecret: downloads/radarr-db-secret

+++ kubernetes/main/apps/downloads/radarr/app Kustomization: flux-system/radarr ExternalSecret: downloads/radarr-db-secret

@@ -20,12 +20,12 @@

     creationPolicy: Merge
     deletionPolicy: Retain
     name: radarr-secret
     template:
       data:
         RADARR__POSTGRES__HOST: '{{ index . "pgbouncer-host" }}'
-        RADARR__POSTGRES__MAINDB: radarr_main
+        RADARR__POSTGRES__MAINDB: '{{ .dbname }}'
         RADARR__POSTGRES__PASSWORD: '{{ .password }}'
         RADARR__POSTGRES__PORT: '{{ index . "pgbouncer-port" }}'
         RADARR__POSTGRES__USER: '{{ .user }}'
       type: Opaque
 
--- kubernetes/main/apps/media/plex/kometa Kustomization: flux-system/kometa ExternalSecret: media/kometa-secret

+++ kubernetes/main/apps/media/plex/kometa Kustomization: flux-system/kometa ExternalSecret: media/kometa-secret

@@ -32,13 +32,13 @@

         KOMETA_MYANIMELIST_CLIENT_ID: '{{ .MYANIMELIST_CLIENT_ID }}'
         KOMETA_MYANIMELIST_CLIENT_SECRET: '{{ .MYANIMELIST_CLIENT_SECRET }}'
         KOMETA_MYANIMELIST_EXPIRES_IN: '{{ .MYANIMELIST_EXPIRES_IN }}'
         KOMETA_MYANIMELIST_LOCALHOST_URL: '{{ .MYANIMELIST_LOCALHOST_URL }}'
         KOMETA_MYANIMELIST_REFRESH_TOKEN: '{{ .MYANIMELIST_REFRESH_TOKEN }}'
         KOMETA_OMDB_API_KEY: '{{ .OMDB_API_KEY }}'
-        KOMETA_PLEX_API_KEY: '{{ .PLEX_TOKEN }}'
+        KOMETA_PLEX_API_KEY: '{{ .PLEX_API_KEY }'
         KOMETA_RADARR_API_KEY: '{{ .RADARR_API_KEY }}'
         KOMETA_SONARR_API_KEY: '{{ .SONARR_API_KEY }}'
         KOMETA_TAUTULLI_API_KEY: '{{ .TAUTULLI_API_KEY }}'
         KOMETA_TMDB_API_KEY: '{{ .TMDB_API_KEY }}'
         KOMETA_TRAKT_ACCESS_TOKEN: '{{ .TRAKT_ACCESS_TOKEN }}'
         KOMETA_TRAKT_CLIENT_ID: '{{ .TRAKT_CLIENT_ID }}'
--- kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ExternalSecret: downloads/dashbrr-secret

+++ kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ExternalSecret: downloads/dashbrr-secret

@@ -0,0 +1,39 @@

+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  labels:
+    app.kubernetes.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dashbrr-secret
+  namespace: downloads
+spec:
+  dataFrom:
+  - extract:
+      key: radarr
+  - extract:
+      key: sonarr
+  - extract:
+      key: prowlarr
+  - extract:
+      key: plex
+  - extract:
+      key: dashbrr
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    name: dashbrr-secret
+    template:
+      data:
+        DASHBRR_PLEX_API_KEY: '{{ .PLEX_API_KEY }}'
+        DASHBRR_PROWLARR_API_KEY: '{{ .PROWLARR_API_KEY }}'
+        DASHBRR_RADARR_API_KEY: '{{ .RADARR_API_KEY }}'
+        DASHBRR_SONARR_API_KEY: '{{ .SONARR_API_KEY }}'
+        OIDC_CLIENT_ID: '{{ .DASHBRR_CLIENT_ID }}'
+        OIDC_CLIENT_SECRET: '{{ .DASHBRR_CLIENT_SECRET }}'
+        OIDC_ISSUER: https://sso...PLACEHOLDER_SECRET_DOMAIN../application/o/dashbrr/
+        OIDC_REDIRECT_URL: https://dashbrr...PLACEHOLDER_SECRET_DOMAIN../api/auth/callback
+      engineVersion: v2
+
--- kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ExternalSecret: downloads/dashbrr-db-secret

+++ kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ExternalSecret: downloads/dashbrr-db-secret

@@ -0,0 +1,32 @@

+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  labels:
+    app.kubernetes.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dashbrr-db-secret
+  namespace: downloads
+spec:
+  dataFrom:
+  - extract:
+      key: postgres-pguser-dashbrr
+  refreshInterval: 1m
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: crunchy-pgo-secrets
+  target:
+    creationPolicy: Merge
+    deletionPolicy: Retain
+    name: dashbrr-secret
+    template:
+      data:
+        DASHBRR__DB_HOST: '{{ index . "pgbouncer-host" }}'
+        DASHBRR__DB_NAME: '{{ .dbname }}'
+        DASHBRR__DB_PASSWORD: '{{ .password }}'
+        DASHBRR__DB_PORT: '{{ index . "pgbouncer-port" }}'
+        DASHBRR__DB_TYPE: postgres
+        DASHBRR__DB_USER: '{{ .user }}'
+      type: Opaque
+
--- kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr HelmRelease: downloads/dashbrr

+++ kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr HelmRelease: downloads/dashbrr

@@ -0,0 +1,117 @@

+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  labels:
+    app.kubernetes.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dashbrr
+  namespace: downloads
+spec:
+  chart:
+    spec:
+      chart: app-template
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s
+        namespace: flux-system
+      version: 3.5.1
+  dependsOn:
+  - name: rook-ceph-cluster
+    namespace: rook-ceph
+  - name: volsync
+    namespace: storage
+  install:
+    remediation:
+      retries: 3
+  interval: 30m
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+      strategy: rollback
+  values:
+    controllers:
+      dashbrr:
+        annotations:
+          reloader.stakater.com/auto: 'true'
+        containers:
+          app:
+            env:
+              DASHBRR__CONFIG_PATH: /config/config.toml
+              DASHBRR__DB_PATH: /cache/._
+              DASHBRR__LISTEN_ADDR: 0.0.0.0:8080
+              GIN_MODE: debug
+              TZ: America/Edmonton
+            envFrom:
+            - secretRef:
+                name: dashbrr-secret
+            image:
+              repository: ghcr.io/autobrr/dashbrr
+              tag: v0.2.0@sha256:b3b898d4bf9b463bf802e7af188de45e6ca08eb96e828b4e9cbfde6e418441ad
+            probes:
+              liveness:
+                custom: true
+                enabled: true
+                spec:
+                  failureThreshold: 3
+                  httpGet:
+                    path: /health
+                    port: 8080
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+              readiness:
+                custom: true
+                enabled: true
+                spec:
+                  failureThreshold: 3
+                  httpGet:
+                    path: /health
+                    port: 8080
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+            resources:
+              limits:
+                memory: 2Gi
+              requests:
+                cpu: 100m
+            securityContext:
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop:
+                - ALL
+              readOnlyRootFilesystem: true
+        labels:
+          postgres: 'true'
+    ingress:
+      app:
+        annotations:
+          external-dns.alpha.kubernetes.io/target: internal...PLACEHOLDER_SECRET_DOMAIN..
+        className: internal
+        hosts:
+        - host: '{{ .Release.Name }}...PLACEHOLDER_SECRET_DOMAIN..'
+          paths:
+          - path: /
+            service:
+              identifier: app
+              port: http
+    persistence:
+      cache:
+        sizeLimit: 1Gi
+        type: emptyDir
+      config:
+        name: dashbrr-config
+        type: configMap
+    service:
+      app:
+        controller: dashbrr
+        ports:
+          http:
+            port: 8080
+    serviceAccount:
+      create: true
+      name: dashbrr
+
--- kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ClusterRole: flux-system/dashbrr

+++ kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ClusterRole: flux-system/dashbrr

@@ -0,0 +1,19 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dashbrr
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - services
+  verbs:
+  - get
+  - watch
+  - list
+
--- kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ClusterRoleBinding: flux-system/dashbrr

+++ kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ClusterRoleBinding: flux-system/dashbrr

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dashbrr
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: dashbrr
+subjects:
+- kind: ServiceAccount
+  name: dashbrr
+  namespace: downloads
+
--- kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ConfigMap: downloads/dashbrr-gatus-ep

+++ kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ConfigMap: downloads/dashbrr-gatus-ep

@@ -0,0 +1,29 @@

+---
+apiVersion: v1
+data:
+  config.yaml: |
+    endpoints:
+      - name: "dashbrr"
+        group: main-guarded
+        url: 1.1.1.1
+        interval: 1m
+        ui:
+          hide-hostname: true
+          hide-url: true
+        dns:
+          query-name: "dashbrr...PLACEHOLDER_SECRET_DOMAIN.."
+          query-type: A
+        conditions:
+          - "len([BODY]) == 0"
+        alerts:
+          - type: discord
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/name: dashbrr
+    gatus.io/enabled: 'true'
+    kustomize.toolkit.fluxcd.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dashbrr-gatus-ep
+  namespace: downloads
+
--- kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ConfigMap: downloads/dashbrr-config

+++ kubernetes/main/apps/downloads/dashbrr/app Kustomization: flux-system/dashbrr ConfigMap: downloads/dashbrr-config

@@ -0,0 +1,15 @@

+---
+apiVersion: v1
+data:
+  config.toml: ''
+kind: ConfigMap
+metadata:
+  annotations:
+    kustomize.toolkit.fluxcd.io/substitute: disabled
+  labels:
+    app.kubernetes.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/name: dashbrr
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dashbrr-config
+  namespace: downloads
+

@smurf-bot
Copy link
Contributor

smurf-bot bot commented Nov 29, 2024 •
edited
Loading 

--- HelmRelease: downloads/dashbrr ServiceAccount: downloads/dashbrr

+++ HelmRelease: downloads/dashbrr ServiceAccount: downloads/dashbrr

@@ -0,0 +1,12 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: dashbrr
+  labels:
+    app.kubernetes.io/instance: dashbrr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: dashbrr
+secrets:
+- name: dashbrr-default-sa-token
+
--- HelmRelease: downloads/dashbrr Service: downloads/dashbrr

+++ HelmRelease: downloads/dashbrr Service: downloads/dashbrr

@@ -0,0 +1,22 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dashbrr
+  labels:
+    app.kubernetes.io/instance: dashbrr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: dashbrr
+    app.kubernetes.io/service: dashbrr
+spec:
+  type: ClusterIP
+  ports:
+  - port: 8080
+    targetPort: 8080
+    protocol: TCP
+    name: http
+  selector:
+    app.kubernetes.io/component: dashbrr
+    app.kubernetes.io/instance: dashbrr
+    app.kubernetes.io/name: dashbrr
+
--- HelmRelease: downloads/dashbrr Deployment: downloads/dashbrr

+++ HelmRelease: downloads/dashbrr Deployment: downloads/dashbrr

@@ -0,0 +1,96 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: dashbrr
+  labels:
+    app.kubernetes.io/component: dashbrr
+    app.kubernetes.io/instance: dashbrr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: dashbrr
+    postgres: 'true'
+  annotations:
+    reloader.stakater.com/auto: 'true'
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: dashbrr
+      app.kubernetes.io/name: dashbrr
+      app.kubernetes.io/instance: dashbrr
+  template:
+    metadata:
+      annotations:
+        checksum/secrets: f9a2edb516d89dc9e0af00dcf3d13ae57cbe1bc631c4b35d393a497ef218d929
+      labels:
+        app.kubernetes.io/component: dashbrr
+        app.kubernetes.io/instance: dashbrr
+        app.kubernetes.io/name: dashbrr
+    spec:
+      enableServiceLinks: false
+      serviceAccountName: dashbrr
+      automountServiceAccountToken: true
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers:
+      - env:
+        - name: DASHBRR__CONFIG_PATH
+          value: /config/config.toml
+        - name: DASHBRR__DB_PATH
+          value: /cache/._
+        - name: DASHBRR__LISTEN_ADDR
+          value: 0.0.0.0:8080
+        - name: GIN_MODE
+          value: debug
+        - name: TZ
+          value: America/Edmonton
+        envFrom:
+        - secretRef:
+            name: dashbrr-secret
+        image: ghcr.io/autobrr/dashbrr:v0.2.0@sha256:b3b898d4bf9b463bf802e7af188de45e6ca08eb96e828b4e9cbfde6e418441ad
+        livenessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /health
+            port: 8080
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+        name: app
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /health
+            port: 8080
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+        resources:
+          limits:
+            memory: 2Gi
+          requests:
+            cpu: 100m
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+        volumeMounts:
+        - mountPath: /cache
+          name: cache
+        - mountPath: /config
+          name: config
+      volumes:
+      - emptyDir:
+          sizeLimit: 1Gi
+        name: cache
+      - configMap:
+          name: dashbrr-config
+        name: config
+
--- HelmRelease: downloads/dashbrr Ingress: downloads/dashbrr

+++ HelmRelease: downloads/dashbrr Ingress: downloads/dashbrr

@@ -0,0 +1,25 @@

+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: dashbrr
+  labels:
+    app.kubernetes.io/instance: dashbrr
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: dashbrr
+  annotations:
+    external-dns.alpha.kubernetes.io/target: internal...PLACEHOLDER_SECRET_DOMAIN..
+spec:
+  ingressClassName: internal
+  rules:
+  - host: dashbrr...PLACEHOLDER_SECRET_DOMAIN..
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: dashbrr
+            port:
+              number: 8080
+

@smurf-bot
Copy link
Contributor

smurf-bot bot commented Nov 29, 2024 •
edited
Loading

📝 Terraform Plan for terraform/authentik

→ Resource Changes: 3 to create, 0 to update, 0 to re-create, 0 to delete.

✨ Create

authentik_application.application["dashbrr"] 
+ group              = "Monitoring"
+ id                 = (known after apply)
+ meta_icon          = "https://raw.githubusercontent.com/joryirving/home-ops/main/docs/src/assets/icons/dashbrr.png"
+ meta_launch_url    = "https://dashbrr.jory.dev/api/auth/callback"
+ name               = "Dashbrr"
+ open_in_new_tab    = true
+ policy_engine_mode = "all"
+ protocol_provider  = (known after apply)
+ slug               = "dashbrr"
+ uuid               = (known after apply)
authentik_policy_binding.application_policy_binding["dashbrr"] 
+ enabled        = true
+ failure_result = false
+ group          = "9704b845-23f4-413c-a892-6f22ee7f7c4b"
+ id             = (known after apply)
+ negate         = false
+ order          = 0
+ target         = (known after apply)
+ timeout        = 30
authentik_provider_oauth2.oauth2["dashbrr"] 
+ access_code_validity       = "minutes=1"
+ access_token_validity      = "hours=4"
+ allowed_redirect_uris      = [
+     {
+         "matching_mode" = "strict"
+         "url"           = "https://dashbrr.jory.dev/api/auth/callback"
      },
  ]
+ authentication_flow        = "745ba906-041d-4740-a7f4-200811f2b00e"
+ authorization_flow         = "01a99e21-6d65-4d0b-a795-fb88146b240e"
+ client_id                  = (sensitive value)
+ client_secret              = (sensitive value)
+ client_type                = "confidential"
+ id                         = (known after apply)
+ include_claims_in_id_token = true
+ invalidation_flow          = "b13379f7-628c-4967-ac4d-571890ccf1c8"
+ issuer_mode                = "per_provider"
+ name                       = "dashbrr"
+ property_mappings          = [
+     "19b3134c-7727-4977-8035-376b0e7b4aff",
+     "f3d51311-4d25-43ef-ba79-d48727efc50f",
+     "55c034ce-f36a-47b5-abc7-fbbf26755e96",
  ]
+ refresh_token_validity     = "days=30"
+ signing_key                = "a9791054-b30b-4862-ba60-2d00372998ee"
+ sub_mode                   = "hashed_user_id"

Triggered by @joryirving, Commit: c5d4b8436984b70a59dda8c2c8a874a05a3c26e1

@joryirving joryirving merged commit fd129e7 into main Nov 29, 2024
12 checks passed
@joryirving joryirving deleted the feat/dashbrr branch November 29, 2024 21:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
area/docs area/kubernetes Changes made in the kubernetes directory area/terraform cluster/main
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@joryirving