feat(media): deploy replex

[buroa]

No description provided.

[bot-blake]

--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: media/plex-tools

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: media/plex-tools

@@ -0,0 +1,29 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: cluster-apps
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: plex-tools
+  namespace: media
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: plex-tools
+  dependsOn:
+  - name: onepassword-store
+    namespace: external-secrets
+  - name: plex
+    namespace: media
+  interval: 30m
+  path: ./kubernetes/apps/media/plex/tools
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+    namespace: flux-system
+  targetNamespace: media
+  timeout: 5m
+  wait: true
+
--- kubernetes/apps/media/plex/tools Kustomization: media/plex-tools ExternalSecret: media/replex

+++ kubernetes/apps/media/plex/tools Kustomization: media/plex-tools ExternalSecret: media/replex

@@ -0,0 +1,24 @@

+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  labels:
+    app.kubernetes.io/name: plex-tools
+    kustomize.toolkit.fluxcd.io/name: plex-tools
+    kustomize.toolkit.fluxcd.io/namespace: media
+  name: replex
+  namespace: media
+spec:
+  dataFrom:
+  - extract:
+      key: plex
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword
+  target:
+    creationPolicy: Owner
+    name: replex-secret
+    template:
+      data:
+        REPLEX_TOKEN: '{{ .PLEX_TOKEN }}'
+
--- kubernetes/apps/media/plex/tools Kustomization: media/plex-tools HelmRelease: media/replex

+++ kubernetes/apps/media/plex/tools Kustomization: media/plex-tools HelmRelease: media/replex

@@ -0,0 +1,99 @@

+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  labels:
+    app.kubernetes.io/name: plex-tools
+    kustomize.toolkit.fluxcd.io/name: plex-tools
+    kustomize.toolkit.fluxcd.io/namespace: media
+  name: replex
+  namespace: media
+spec:
+  chart:
+    spec:
+      chart: app-template
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s
+        namespace: flux-system
+      version: 3.6.1
+  install:
+    remediation:
+      retries: 3
+  interval: 30m
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+      strategy: rollback
+  values:
+    controllers:
+      replex:
+        annotations:
+          reloader.stakater.com/auto: 'true'
+        containers:
+          app:
+            env:
+              REPLEX_HOST: http://plex.media.svc.cluster.local:32400
+            envFrom:
+            - secretRef:
+                name: replex-secret
+            image:
+              repository: ghcr.io/lostb1t/replex
+              tag: 0.27.23@sha256:5c29c04bd9d5cc8126ee74ae5466b8c78c133841810ea6e97afd6463b2dbb55c
+            probes:
+              liveness:
+                custom: true
+                enabled: true
+                spec:
+                  failureThreshold: 3
+                  httpGet:
+                    path: /identity
+                    port: 3001
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+              readiness:
+                custom: true
+                enabled: true
+                spec:
+                  failureThreshold: 3
+                  httpGet:
+                    path: /identity
+                    port: 3001
+                  initialDelaySeconds: 0
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+            resources:
+              limits:
+                memory: 512Mi
+              requests:
+                cpu: 10m
+            securityContext:
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop:
+                - ALL
+              readOnlyRootFilesystem: true
+    defaultPodOptions:
+      securityContext:
+        runAsGroup: 568
+        runAsNonRoot: true
+        runAsUser: 568
+    ingress:
+      app:
+        className: internal
+        hosts:
+        - host: '{{ .Release.Name }}.ktwo.io'
+          paths:
+          - path: /
+            service:
+              identifier: app
+              port: http
+    service:
+      app:
+        controller: replex
+        ports:
+          http:
+            port: 3001
+

[bot-blake]

--- HelmRelease: media/replex Service: media/replex

+++ HelmRelease: media/replex Service: media/replex

@@ -0,0 +1,22 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: replex
+  labels:
+    app.kubernetes.io/instance: replex
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: replex
+    app.kubernetes.io/service: replex
+spec:
+  type: ClusterIP
+  ports:
+  - port: 3001
+    targetPort: 3001
+    protocol: TCP
+    name: http
+  selector:
+    app.kubernetes.io/component: replex
+    app.kubernetes.io/instance: replex
+    app.kubernetes.io/name: replex
+
--- HelmRelease: media/replex Deployment: media/replex

+++ HelmRelease: media/replex Deployment: media/replex

@@ -0,0 +1,77 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: replex
+  labels:
+    app.kubernetes.io/component: replex
+    app.kubernetes.io/instance: replex
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: replex
+  annotations:
+    reloader.stakater.com/auto: 'true'
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: replex
+      app.kubernetes.io/name: replex
+      app.kubernetes.io/instance: replex
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: replex
+        app.kubernetes.io/instance: replex
+        app.kubernetes.io/name: replex
+    spec:
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      securityContext:
+        runAsGroup: 568
+        runAsNonRoot: true
+        runAsUser: 568
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers:
+      - env:
+        - name: REPLEX_HOST
+          value: http://plex.media.svc.cluster.local:32400
+        envFrom:
+        - secretRef:
+            name: replex-secret
+        image: ghcr.io/lostb1t/replex:0.27.23@sha256:5c29c04bd9d5cc8126ee74ae5466b8c78c133841810ea6e97afd6463b2dbb55c
+        livenessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /identity
+            port: 3001
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+        name: app
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /identity
+            port: 3001
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+        resources:
+          limits:
+            memory: 512Mi
+          requests:
+            cpu: 10m
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+
--- HelmRelease: media/replex Ingress: media/replex

+++ HelmRelease: media/replex Ingress: media/replex

@@ -0,0 +1,23 @@

+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: replex
+  labels:
+    app.kubernetes.io/instance: replex
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: replex
+spec:
+  ingressClassName: internal
+  rules:
+  - host: replex.ktwo.io
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: replex
+            port:
+              number: 3001
+