♻️ defaultPodOptions

2025-09-17 18:24:14 +02:00 · 2023-11-01 10:52:00 +01:00
parent a83151c5f4
commit 7880743775
8 changed files with 55 additions and 56 deletions
--- a/kubernetes/apps/default/atuin/app/helmrelease.yaml
+++ b/kubernetes/apps/default/atuin/app/helmrelease.yaml
@@ -26,6 +26,8 @@ spec:
  uninstall:
    keepHistory: false
  values:
+    defaultPodOptions:
+      enableServiceLinks: false
    controllers:
      main:
        strategy: RollingUpdate
@@ -57,8 +59,6 @@ spec:
                cpu: 10m
              limits:
                memory: 512Mi
-        pod:
-          enableServiceLinks: false
    service:
      main:
        ports:
--- a/kubernetes/apps/default/authelia/app/helmrelease.yaml
+++ b/kubernetes/apps/default/authelia/app/helmrelease.yaml
@@ -31,6 +31,18 @@ spec:
    - name: authelia-redis
    - name: smtp-relay
  values:
+    defaultPodOptions:
+      enableServiceLinks: false
+      securityContext:
+        runAsUser: 568
+        runAsGroup: 568
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: kubernetes.io/hostname
+          whenUnsatisfiable: DoNotSchedule
+          labelSelector:
+            matchLabels:
+              app.kubernetes.io/name: *app
    controllers:
      main:
        replicas: 2
@@ -112,18 +124,6 @@ spec:
                memory: 32Mi
              limits:
                memory: 128Mi
-        pod:
-          enableServiceLinks: false
-          securityContext:
-            runAsUser: 568
-            runAsGroup: 568
-          topologySpreadConstraints:
-            - maxSkew: 1
-              topologyKey: kubernetes.io/hostname
-              whenUnsatisfiable: DoNotSchedule
-              labelSelector:
-                matchLabels:
-                  app.kubernetes.io/name: *app
    service:
      main:
        ports:
--- a/kubernetes/apps/default/bazarr/app/helmrelease.yaml
+++ b/kubernetes/apps/default/bazarr/app/helmrelease.yaml
@@ -32,6 +32,12 @@ spec:
    - name: volsync
      namespace: volsync
  values:
+    defaultPodOptions:
+      securityContext:
+        runAsUser: 568
+        runAsGroup: 568
+        fsGroup: 568
+        fsGroupChangePolicy: OnRootMismatch
    controllers:
      main:
        type: statefulset
@@ -70,12 +76,6 @@ spec:
              - --branch=master
              - --wait=86400 # 1 day
              - --root=/add-ons
-        pod:
-          securityContext:
-            runAsUser: 568
-            runAsGroup: 568
-            fsGroup: 568
-            fsGroupChangePolicy: OnRootMismatch
        statefulset:
          volumeClaimTemplates:
            - name: config
--- a/kubernetes/apps/default/flood/app/helmrelease.yaml
+++ b/kubernetes/apps/default/flood/app/helmrelease.yaml
@@ -27,6 +27,12 @@ spec:
  uninstall:
    keepHistory: false
  values:
+    defaultPodOptions:
+      securityContext:
+        runAsUser: 1001
+        runAsGroup: 1001
+        fsGroup: 1001
+        fsGroupChangePolicy: "OnRootMismatch"
    controllers:
      main:
        type: statefulset
@@ -50,12 +56,6 @@ spec:
                cpu: 15m
              limits:
                memory: 512Mi
-        pod:
-          securityContext:
-            runAsUser: 1001
-            runAsGroup: 1001
-            fsGroup: 1001
-            fsGroupChangePolicy: "OnRootMismatch"
        statefulset:
          volumeClaimTemplates:
            - name: config
--- a/kubernetes/apps/default/frigate/app/helmrelease.yaml
+++ b/kubernetes/apps/default/frigate/app/helmrelease.yaml
@@ -35,6 +35,10 @@ spec:
    - name: volsync
      namespace: volsync
  values:
+    defaultPodOptions:
+      nodeSelector:
+        google.feature.node.kubernetes.io/coral: "true"
+        intel.feature.node.kubernetes.io/gpu: "true"
    controllers:
      main:
        type: statefulset
@@ -51,14 +55,6 @@ spec:
            envFrom:
              - secretRef:
                  name: frigate-secret
-            resources:
-              requests:
-                cpu: 10m
-                memory: 1000Mi
-                gpu.intel.com/i915: 1
-              limits:
-                memory: 6000Mi
-                gpu.intel.com/i915: 1
            probes:
              liveness: &probes
                enabled: true
@@ -74,6 +70,16 @@ spec:
              readiness: *probes
              startup:
                enabled: false
+            resources:
+              requests:
+                cpu: 10m
+                memory: 1000Mi
+                gpu.intel.com/i915: 1
+              limits:
+                memory: 6000Mi
+                gpu.intel.com/i915: 1
+            securityContext:
+              privileged: true
        statefulset:
          volumeClaimTemplates:
            - name: config
@@ -82,12 +88,6 @@ spec:
              storageClass: rook-ceph-block
              globalMounts:
                - path: /data
-        pod:
-          nodeSelector:
-            google.feature.node.kubernetes.io/coral: "true"
-            intel.feature.node.kubernetes.io/gpu: "true"
-        securityContext:
-          privileged: true
    service:
      main:
        type: LoadBalancer
--- a/kubernetes/apps/default/jellyfin/app/helmrelease.yaml
+++ b/kubernetes/apps/default/jellyfin/app/helmrelease.yaml
@@ -27,6 +27,15 @@ spec:
  uninstall:
    keepHistory: false
  values:
+    defaultPodOptions:
+      enableServiceLinks: false
+      nodeSelector:
+        intel.feature.node.kubernetes.io/gpu: "true"
+      securityContext:
+        runAsUser: 568
+        runAsGroup: 568
+        fsGroup: 568
+        fsGroupChangePolicy: OnRootMismatch
    controllers:
      main:
        type: statefulset
@@ -74,16 +83,6 @@ spec:
              storageClass: rook-ceph-block
              globalMounts:
                - path: /config
-        pod:
-          enableServiceLinks: false
-          nodeSelector:
-            intel.feature.node.kubernetes.io/gpu: "true"
-          securityContext:
-            runAsUser: 568
-            runAsGroup: 568
-            fsGroup: 568
-            fsGroupChangePolicy: OnRootMismatch
-            supplementalGroups: [44, 105, 10000]
    service:
      main:
        type: LoadBalancer
--- a/kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml
+++ b/kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml
@@ -27,6 +27,9 @@ spec:
  uninstall:
    keepHistory: false
  values:
+    defaultPodOptions:
+      nodeSelector:
+        zzh.feature.node.kubernetes.io/zigbee: "true"
    controllers:
      main:
        type: statefulset
@@ -86,9 +89,6 @@ spec:
                memory: 128Mi
              limits:
                memory: 512Mi
-        pod:
-          nodeSelector:
-            zzh.feature.node.kubernetes.io/zigbee: "true"
        statefulset:
          volumeClaimTemplates:
            - name: config
--- a/kubernetes/apps/default/zwave-js-ui/app/helmrelease.yaml
+++ b/kubernetes/apps/default/zwave-js-ui/app/helmrelease.yaml
@@ -27,6 +27,9 @@ spec:
  uninstall:
    keepHistory: false
  values:
+    defaultPodOptions:
+      nodeSelector:
+        aeotec.feature.node.kubernetes.io/zwave: "true"
    controllers:
      main:
        type: statefulset
@@ -62,9 +65,6 @@ spec:
                memory: 64Mi
              limits:
                memory: 512Mi
-        pod:
-          nodeSelector:
-            aeotec.feature.node.kubernetes.io/zwave: "true"
        statefulset:
          volumeClaimTemplates:
            - name: config