♻️ apply kube templates

kubernetes/apps/default/pyload/app/gatus.yaml

@@ -1,26 +0,0 @@
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: pyload-gatus-ep
-  namespace: default
-  labels:
-    gatus.io/enabled: "true"
-data:
-  config.yaml: |
-    endpoints:
-      - name: pyload
-        group: internal
-        url: 192.168.8.1
-        interval: 1m
-        ui:
-          hide-hostname: true
-          hide-url: true
-        dns:
-          query-name: pyload.${SECRET_CLUSTER_DOMAIN}
-          query-type: A
-        conditions:
-          - "[BODY] == 192.168.169.101"
-          - "[DNS_RCODE] == NOERROR"
-        alerts:
-          - type: pushover

kubernetes/apps/default/pyload/app/helmrelease.yaml

@@ -35,7 +35,6 @@ spec:
         fsGroupChangePolicy: OnRootMismatch
     controllers:
       main:
-        type:  statefulset
         containers:
           main:
             image:
@@ -63,14 +62,6 @@ spec:
                   timeoutSeconds: 10
               readiness: *probe
               startup: *probe
-        statefulset:
-          volumeClaimTemplates:
-            - name: config
-              accessMode: ReadWriteOnce
-              size: 1Gi
-              storageClass: rook-ceph-block
-              globalMounts:
-                - path: /config
     service:
       main:
         ports:
@@ -98,6 +89,11 @@ spec:
           - hosts:
               - *host
     persistence:
+      config:
+        enabled: true
+        existingClaim: *app
+        globalMounts:
+          - path: /config
       downloads:
         type: nfs
         server: "${LOCAL_LAN_TRUENAS}"

kubernetes/apps/default/pyload/app/kustomization.yaml

@@ -4,6 +4,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: default
 resources:
-  - ./gatus.yaml
   - ./helmrelease.yaml
-  - ./volsync.yaml
+  - ../../../../templates/gatus/guarded
+  - ../../../../templates/volsync

kubernetes/apps/default/pyload/app/volsync.yaml

@@ -1,48 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: pyload-restic
-  namespace: default
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    name: pyload-restic-secret
-    template:
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/pyload'
-        RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
-        AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
-        AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
-  dataFrom:
-    - extract:
-        key: volsync-restic-template
----
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/volsync.backube/replicationsource_v1alpha1.json
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: pyload
-  namespace: default
-spec:
-  sourcePVC: config-pyload-0
-  trigger:
-    schedule: "0 7 * * *"
-  restic:
-    copyMethod: Snapshot
-    pruneIntervalDays: 7
-    repository: pyload-restic-secret
-    cacheCapacity: 2Gi
-    volumeSnapshotClassName: csi-ceph-blockpool
-    storageClassName: rook-ceph-block
-    moverSecurityContext:
-      runAsUser: 568
-      runAsGroup: 568
-      fsGroup: 568
-    retain:
-      daily: 7
-      within: 3d

kubernetes/apps/default/pyload/ks.yaml

@@ -3,18 +3,27 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: cluster-apps-pyload-app
+  name: &app pyload
   namespace: flux-system
 spec:
+  targetNamespace: default
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
   dependsOn:
-    - name: cluster-apps-external-secrets-stores
-    - name: cluster-apps-rook-ceph-cluster
-    - name: cluster-apps-volsync-app
+    - name: external-secrets-stores
+    - name: rook-ceph-cluster
+    - name: volsync
   path: ./kubernetes/apps/default/pyload/app
   prune: true
   sourceRef:
     kind: GitRepository
     name: home-ops-kubernetes
+  wait: false
   interval: 30m
   retryInterval: 1m
-  timeout: 3m
+  timeout: 5m
+  postBuild:
+    substitute:
+      APP: *app
+      VOLSYNC_CAPACITY: 2Gi