refactor: reorganize manifests into namespace folders

Reviewed-on: #55

deployments/apps/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: apps
+  labels:
+    name: apps

deployments/bazarr/pvc.yaml

@@ -9,4 +9,4 @@ spec:
   storageClassName: longhorn
   resources:
     requests:
-      storage: 5Gi
+      storage: 2Gi

deployments/emby/pvc-emby-config.yaml

@@ -9,4 +9,4 @@ spec:
   storageClassName: longhorn
   resources:
     requests:
-      storage: 20Gi
+      storage: 10Gi

deployments/emby/pvc-media-data.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: media-data
+  namespace: media
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn
+  resources:
+    requests:
+      storage: 50Gi

deployments/lidarr/pvc.yaml

@@ -9,4 +9,4 @@ spec:
   storageClassName: longhorn
   resources:
     requests:
-      storage: 5Gi
+      storage: 5Gi

deployments/media/bazarr/deployment.yaml

@@ -17,32 +17,14 @@ spec:
     spec:
       containers:
         - name: bazarr
-          image: lscr.io/linuxserver/bazarr:1.5.0
+          image: lscr.io/linuxserver/bazarr:latest
           ports:
             - containerPort: 6767
-          env:
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-            - name: TZ
-              value: "America/New_York"
+          env: []
           resources:
             requests:
               cpu: 100m
-              memory: 256Mi
+              memory: 128Mi
             limits:
               cpu: 500m
               memory: 512Mi
-          volumeMounts:
-            - name: config
-              mountPath: /config
-            - name: media
-              mountPath: /media
-      volumes:
-        - name: config
-          persistentVolumeClaim:
-            claimName: bazarr-config
-        - name: media
-          persistentVolumeClaim:
-            claimName: media-data

deployments/media/bazarr/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: bazarr
+  namespace: media
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`bazarr.{{ DOMAIN }}`)
+      kind: Rule
+      services:
+        - name: bazarr
+          port: 6767
+  tls:
+    secretName: bazarr-tls-secret

deployments/media/bazarr/service.yaml

@@ -3,13 +3,10 @@ kind: Service
 metadata:
   name: bazarr
   namespace: media
-  labels:
-    app: bazarr
 spec:
-  type: ClusterIP
+  selector:
+    app: bazarr
   ports:
     - port: 6767
       targetPort: 6767
-      protocol: TCP
-  selector:
-    app: bazarr
+      name: http

deployments/media/emby/deployment.yaml

@@ -17,40 +17,15 @@ spec:
     spec:
       containers:
         - name: emby
-          image: lscr.io/linuxserver/emby:latest
+          image: emby/embyserver:latest
           ports:
             - containerPort: 8096
-          env:
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-            - name: TZ
-              value: "America/New_York"
+            - containerPort: 8920
+          env: []
           resources:
             requests:
               cpu: 500m
               memory: 1Gi
             limits:
-              cpu: "2"
-              memory: 2Gi
-          volumeMounts:
-            - name: config
-              mountPath: /config
-            # TODO: Update mount path to your actual media storage location
-            - name: media-movies
-              mountPath: /media/movies
-            - name: media-tv
-              mountPath: /media/tv
-      volumes:
-        - name: config
-          persistentVolumeClaim:
-            claimName: emby-config
-        - name: media-movies
-          # TODO: Change to your actual storage (NFS, local path, etc.)
-          emptyDir: {}
-        - name: media-tv
-          emptyDir: {}
-        - name: media
-          persistentVolumeClaim:
-            claimName: media-data
+              cpu: 2000m
+              memory: 4Gi

deployments/media/emby/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: emby
+  namespace: media
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`emby.{{ DOMAIN }}`)
+      kind: Rule
+      services:
+        - name: emby
+          port: 8096
+  tls:
+    secretName: emby-tls-secret

deployments/media/emby/service.yaml

@@ -3,18 +3,13 @@ kind: Service
 metadata:
   name: emby
   namespace: media
-  labels:
-    app: emby
 spec:
-  type: ClusterIP
+  selector:
+    app: emby
   ports:
     - port: 8096
       targetPort: 8096
-      protocol: TCP
       name: http
     - port: 8920
       targetPort: 8920
-      protocol: TCP
       name: https
-  selector:
-    app: emby

deployments/media/lidarr/deployment.yaml

@@ -17,32 +17,14 @@ spec:
     spec:
       containers:
         - name: lidarr
-          image: lscr.io/linuxserver/lidarr:2.7.0
+          image: lscr.io/linuxserver/lidarr:latest
           ports:
             - containerPort: 8686
-          env:
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-            - name: TZ
-              value: "America/New_York"
+          env: []
           resources:
             requests:
               cpu: 100m
-              memory: 256Mi
+              memory: 128Mi
             limits:
               cpu: 500m
               memory: 512Mi
-          volumeMounts:
-            - name: config
-              mountPath: /config
-            - name: media
-              mountPath: /media
-      volumes:
-        - name: config
-          persistentVolumeClaim:
-            claimName: lidarr-config
-        - name: media
-          persistentVolumeClaim:
-            claimName: media-data

deployments/media/lidarr/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: lidarr
+  namespace: media
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`lidarr.{{ DOMAIN }}`)
+      kind: Rule
+      services:
+        - name: lidarr
+          port: 8686
+  tls:
+    secretName: lidarr-tls-secret

deployments/media/lidarr/service.yaml

@@ -3,13 +3,10 @@ kind: Service
 metadata:
   name: lidarr
   namespace: media
-  labels:
-    app: lidarr
 spec:
-  type: ClusterIP
+  selector:
+    app: lidarr
   ports:
     - port: 8686
       targetPort: 8686
-      protocol: TCP
-  selector:
-    app: lidarr
+      name: http

deployments/media/namespace.yaml

@@ -3,5 +3,4 @@ kind: Namespace
 metadata:
   name: media
   labels:
-    app.kubernetes.io/managed-by: orion
-    team: media
+    name: media

deployments/media/prowlarr/deployment.yaml

@@ -17,27 +17,14 @@ spec:
     spec:
       containers:
         - name: prowlarr
-          image: lscr.io/linuxserver/prowlarr:1.29.0
+          image: lscr.io/linuxserver/prowlarr:latest
           ports:
             - containerPort: 9696
-          env:
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-            - name: TZ
-              value: "America/New_York"
+          env: []
           resources:
             requests:
               cpu: 100m
-              memory: 256Mi
+              memory: 128Mi
             limits:
               cpu: 500m
               memory: 512Mi
-          volumeMounts:
-            - name: config
-              mountPath: /config
-      volumes:
-        - name: config
-          persistentVolumeClaim:
-            claimName: prowlarr-config

deployments/media/prowlarr/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: prowlarr
+  namespace: media
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`prowlarr.{{ DOMAIN }}`)
+      kind: Rule
+      services:
+        - name: prowlarr
+          port: 9696
+  tls:
+    secretName: prowlarr-tls-secret

deployments/media/prowlarr/service.yaml

@@ -3,13 +3,10 @@ kind: Service
 metadata:
   name: prowlarr
   namespace: media
-  labels:
-    app: prowlarr
 spec:
-  type: ClusterIP
+  selector:
+    app: prowlarr
   ports:
     - port: 9696
       targetPort: 9696
-      protocol: TCP
-  selector:
-    app: prowlarr
+      name: http

deployments/media/radarr/deployment.yaml

@@ -17,32 +17,14 @@ spec:
     spec:
       containers:
         - name: radarr
-          image: lscr.io/linuxserver/radarr:5.15.0
+          image: lscr.io/linuxserver/radarr:latest
           ports:
             - containerPort: 7878
-          env:
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-            - name: TZ
-              value: "America/New_York"
+          env: []
           resources:
             requests:
               cpu: 100m
-              memory: 256Mi
+              memory: 128Mi
             limits:
               cpu: 500m
               memory: 512Mi
-          volumeMounts:
-            - name: config
-              mountPath: /config
-            - name: media
-              mountPath: /media
-      volumes:
-        - name: config
-          persistentVolumeClaim:
-            claimName: radarr-config
-        - name: media
-          persistentVolumeClaim:
-            claimName: media-data

deployments/media/radarr/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: radarr
+  namespace: media
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`radarr.{{ DOMAIN }}`)
+      kind: Rule
+      services:
+        - name: radarr
+          port: 7878
+  tls:
+    secretName: radarr-tls-secret

deployments/media/radarr/service.yaml

@@ -3,13 +3,10 @@ kind: Service
 metadata:
   name: radarr
   namespace: media
-  labels:
-    app: radarr
 spec:
-  type: ClusterIP
+  selector:
+    app: radarr
   ports:
     - port: 7878
       targetPort: 7878
-      protocol: TCP
-  selector:
-    app: radarr
+      name: http

deployments/media/readarr/deployment.yaml

@@ -17,32 +17,14 @@ spec:
     spec:
       containers:
         - name: readarr
-          image: lscr.io/linuxserver/readarr:0.4.0
+          image: lscr.io/linuxserver/readarr:latest
           ports:
             - containerPort: 8787
-          env:
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-            - name: TZ
-              value: "America/New_York"
+          env: []
           resources:
             requests:
               cpu: 100m
-              memory: 256Mi
+              memory: 128Mi
             limits:
               cpu: 500m
               memory: 512Mi
-          volumeMounts:
-            - name: config
-              mountPath: /config
-            - name: media
-              mountPath: /media
-      volumes:
-        - name: config
-          persistentVolumeClaim:
-            claimName: readarr-config
-        - name: media
-          persistentVolumeClaim:
-            claimName: media-data

deployments/media/readarr/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: readarr
+  namespace: media
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`readarr.{{ DOMAIN }}`)
+      kind: Rule
+      services:
+        - name: readarr
+          port: 8787
+  tls:
+    secretName: readarr-tls-secret

deployments/media/readarr/service.yaml

@@ -3,13 +3,10 @@ kind: Service
 metadata:
   name: readarr
   namespace: media
-  labels:
-    app: readarr
 spec:
-  type: ClusterIP
+  selector:
+    app: readarr
   ports:
     - port: 8787
       targetPort: 8787
-      protocol: TCP
-  selector:
-    app: readarr
+      name: http

deployments/media/sonarr/deployment.yaml

@@ -17,32 +17,14 @@ spec:
     spec:
       containers:
         - name: sonarr
-          image: lscr.io/linuxserver/sonarr:4.0.11
+          image: lscr.io/linuxserver/sonarr:latest
           ports:
             - containerPort: 8989
-          env:
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
-            - name: TZ
-              value: "America/New_York"
+          env: []
           resources:
             requests:
               cpu: 100m
-              memory: 256Mi
+              memory: 128Mi
             limits:
               cpu: 500m
               memory: 512Mi
-          volumeMounts:
-            - name: config
-              mountPath: /config
-            - name: media
-              mountPath: /media
-      volumes:
-        - name: config
-          persistentVolumeClaim:
-            claimName: sonarr-config
-        - name: media
-          persistentVolumeClaim:
-            claimName: media-data

deployments/media/sonarr/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: sonarr
+  namespace: media
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`sonarr.{{ DOMAIN }}`)
+      kind: Rule
+      services:
+        - name: sonarr
+          port: 8989
+  tls:
+    secretName: sonarr-tls-secret

deployments/media/sonarr/service.yaml

@@ -3,13 +3,10 @@ kind: Service
 metadata:
   name: sonarr
   namespace: media
-  labels:
-    app: sonarr
 spec:
-  type: ClusterIP
+  selector:
+    app: sonarr
   ports:
     - port: 8989
       targetPort: 8989
-      protocol: TCP
-  selector:
-    app: sonarr
+      name: http

deployments/prowlarr/pvc.yaml

@@ -9,4 +9,4 @@ spec:
   storageClassName: longhorn
   resources:
     requests:
-      storage: 2Gi
+      storage: 2Gi

deployments/radarr/pvc.yaml

@@ -9,4 +9,4 @@ spec:
   storageClassName: longhorn
   resources:
     requests:
-      storage: 5Gi
+      storage: 5Gi

deployments/readarr/pvc.yaml

@@ -9,4 +9,4 @@ spec:
   storageClassName: longhorn
   resources:
     requests:
-      storage: 5Gi
+      storage: 2Gi

deployments/sonarr/pvc.yaml

@@ -9,4 +9,4 @@ spec:
   storageClassName: longhorn
   resources:
     requests:
-      storage: 5Gi
+      storage: 5Gi