♻️ defaultPodOptions

kubernetes/apps/default/atuin/app/helmrelease.yaml

@@ -26,6 +26,8 @@ spec:
   uninstall:
     keepHistory: false
   values:
+    defaultPodOptions:
+      enableServiceLinks: false
     controllers:
       main:
         strategy: RollingUpdate
@@ -57,8 +59,6 @@ spec:
                 cpu: 10m
               limits:
                 memory: 512Mi
-        pod:
-          enableServiceLinks: false
     service:
       main:
         ports:

kubernetes/apps/default/authelia/app/helmrelease.yaml

@@ -31,6 +31,18 @@ spec:
     - name: authelia-redis
     - name: smtp-relay
   values:
+    defaultPodOptions:
+      enableServiceLinks: false
+      securityContext:
+        runAsUser: 568
+        runAsGroup: 568
+      topologySpreadConstraints:
+        - maxSkew: 1
+          topologyKey: kubernetes.io/hostname
+          whenUnsatisfiable: DoNotSchedule
+          labelSelector:
+            matchLabels:
+              app.kubernetes.io/name: *app
     controllers:
       main:
         replicas: 2
@@ -112,18 +124,6 @@ spec:
                 memory: 32Mi
               limits:
                 memory: 128Mi
-        pod:
-          enableServiceLinks: false
-          securityContext:
-            runAsUser: 568
-            runAsGroup: 568
-          topologySpreadConstraints:
-            - maxSkew: 1
-              topologyKey: kubernetes.io/hostname
-              whenUnsatisfiable: DoNotSchedule
-              labelSelector:
-                matchLabels:
-                  app.kubernetes.io/name: *app
     service:
       main:
         ports:

kubernetes/apps/default/bazarr/app/helmrelease.yaml

@@ -32,6 +32,12 @@ spec:
     - name: volsync
       namespace: volsync
   values:
+    defaultPodOptions:
+      securityContext:
+        runAsUser: 568
+        runAsGroup: 568
+        fsGroup: 568
+        fsGroupChangePolicy: OnRootMismatch
     controllers:
       main:
         type: statefulset
@@ -70,12 +76,6 @@ spec:
               - --branch=master
               - --wait=86400 # 1 day
               - --root=/add-ons
-        pod:
-          securityContext:
-            runAsUser: 568
-            runAsGroup: 568
-            fsGroup: 568
-            fsGroupChangePolicy: OnRootMismatch
         statefulset:
           volumeClaimTemplates:
             - name: config

kubernetes/apps/default/flood/app/helmrelease.yaml

@@ -27,6 +27,12 @@ spec:
   uninstall:
     keepHistory: false
   values:
+    defaultPodOptions:
+      securityContext:
+        runAsUser: 1001
+        runAsGroup: 1001
+        fsGroup: 1001
+        fsGroupChangePolicy: "OnRootMismatch"
     controllers:
       main:
         type: statefulset
@@ -50,12 +56,6 @@ spec:
                 cpu: 15m
               limits:
                 memory: 512Mi
-        pod:
-          securityContext:
-            runAsUser: 1001
-            runAsGroup: 1001
-            fsGroup: 1001
-            fsGroupChangePolicy: "OnRootMismatch"
         statefulset:
           volumeClaimTemplates:
             - name: config

kubernetes/apps/default/frigate/app/helmrelease.yaml

@@ -35,6 +35,10 @@ spec:
     - name: volsync
       namespace: volsync
   values:
+    defaultPodOptions:
+      nodeSelector:
+        google.feature.node.kubernetes.io/coral: "true"
+        intel.feature.node.kubernetes.io/gpu: "true"
     controllers:
       main:
         type: statefulset
@@ -51,14 +55,6 @@ spec:
             envFrom:
               - secretRef:
                   name: frigate-secret
-            resources:
-              requests:
-                cpu: 10m
-                memory: 1000Mi
-                gpu.intel.com/i915: 1
-              limits:
-                memory: 6000Mi
-                gpu.intel.com/i915: 1
             probes:
               liveness: &probes
                 enabled: true
@@ -74,6 +70,16 @@ spec:
               readiness: *probes
               startup:
                 enabled: false
+            resources:
+              requests:
+                cpu: 10m
+                memory: 1000Mi
+                gpu.intel.com/i915: 1
+              limits:
+                memory: 6000Mi
+                gpu.intel.com/i915: 1
+            securityContext:
+              privileged: true
         statefulset:
           volumeClaimTemplates:
             - name: config
@@ -82,12 +88,6 @@ spec:
               storageClass: rook-ceph-block
               globalMounts:
                 - path: /data
-        pod:
-          nodeSelector:
-            google.feature.node.kubernetes.io/coral: "true"
-            intel.feature.node.kubernetes.io/gpu: "true"
-        securityContext:
-          privileged: true
     service:
       main:
         type: LoadBalancer

kubernetes/apps/default/jellyfin/app/helmrelease.yaml

@@ -27,6 +27,15 @@ spec:
   uninstall:
     keepHistory: false
   values:
+    defaultPodOptions:
+      enableServiceLinks: false
+      nodeSelector:
+        intel.feature.node.kubernetes.io/gpu: "true"
+      securityContext:
+        runAsUser: 568
+        runAsGroup: 568
+        fsGroup: 568
+        fsGroupChangePolicy: OnRootMismatch
     controllers:
       main:
         type: statefulset
@@ -74,16 +83,6 @@ spec:
               storageClass: rook-ceph-block
               globalMounts:
                 - path: /config
-        pod:
-          enableServiceLinks: false
-          nodeSelector:
-            intel.feature.node.kubernetes.io/gpu: "true"
-          securityContext:
-            runAsUser: 568
-            runAsGroup: 568
-            fsGroup: 568
-            fsGroupChangePolicy: OnRootMismatch
-            supplementalGroups: [44, 105, 10000]
     service:
       main:
         type: LoadBalancer

kubernetes/apps/default/zigbee2mqtt/app/helmrelease.yaml

@@ -27,6 +27,9 @@ spec:
   uninstall:
     keepHistory: false
   values:
+    defaultPodOptions:
+      nodeSelector:
+        zzh.feature.node.kubernetes.io/zigbee: "true"
     controllers:
       main:
         type: statefulset
@@ -86,9 +89,6 @@ spec:
                 memory: 128Mi
               limits:
                 memory: 512Mi
-        pod:
-          nodeSelector:
-            zzh.feature.node.kubernetes.io/zigbee: "true"
         statefulset:
           volumeClaimTemplates:
             - name: config

kubernetes/apps/default/zwave-js-ui/app/helmrelease.yaml

@@ -27,6 +27,9 @@ spec:
   uninstall:
     keepHistory: false
   values:
+    defaultPodOptions:
+      nodeSelector:
+        aeotec.feature.node.kubernetes.io/zwave: "true"
     controllers:
       main:
         type: statefulset
@@ -62,9 +65,6 @@ spec:
                 memory: 64Mi
               limits:
                 memory: 512Mi
-        pod:
-          nodeSelector:
-            aeotec.feature.node.kubernetes.io/zwave: "true"
         statefulset:
           volumeClaimTemplates:
             - name: config