Add jellyfin (HA fork) app under a new media project

Deploys the jellyfin-ha fork (git.unkin.net/unkin/jellyfin-ha) to au-syd1 via ArgoCD, under a dedicated media AppProject/ApplicationSet rather than extending platform. - New media AppProject + media-apps ApplicationSet (watches apps/overlays/*/jellyfin); registered in the argocd kustomizations - apps/base/jellyfin: namespace, deployment (single replica to start), service, in-namespace Redis (transcode session store), gateway + httproute at jellyfin.k8s.syd1.au.unkin.net - Storage: RWO config (cephrbd), RWX transcode scratch and RWX media library (cephfs) per the HA fork's pod-takeover requirement - au-syd1 overlay
2026-07-05 22:32:24 +10:00
parent 391197ad1c
commit a29fa5b8cc
17 changed files with 408 additions and 0 deletions
@@ -0,0 +1,80 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: jellyfin
+  namespace: jellyfin
+spec:
+  # Start single-replica. Scaling to >1 (true HA) is a follow-up once the Redis
+  # transcode store and RWX transcode scratch are validated end-to-end.
+  replicas: 1
+  strategy:
+    # Config PVC is RWO; a Recreate rollout avoids two pods contending for it.
+    type: Recreate
+  selector:
+    matchLabels:
+      app: jellyfin
+  template:
+    metadata:
+      labels:
+        app: jellyfin
+    spec:
+      containers:
+        - name: jellyfin
+          image: git.unkin.net/unkin/jellyfin-ha:v0.1.0
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 8096
+              protocol: TCP
+          env:
+            # Distributed transcode session store (jellyfin-ha additions).
+            - name: Jellyfin__TranscodeStore__RedisConnectionString
+              value: "redis:6379,abortConnect=false"
+            - name: Jellyfin__TranscodeStore__LeaseDurationSeconds
+              value: "30"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 3
+          resources:
+            requests:
+              cpu: "1"
+              memory: 1Gi
+            limits:
+              cpu: "4"
+              memory: 6Gi
+          volumeMounts:
+            - name: config
+              mountPath: /config
+            - name: cache
+              mountPath: /cache
+            - name: transcode
+              mountPath: /transcode
+            - name: media
+              mountPath: /media
+              readOnly: true
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: jellyfin-config
+        - name: cache
+          emptyDir: {}
+        - name: transcode
+          persistentVolumeClaim:
+            claimName: jellyfin-transcode
+        - name: media
+          persistentVolumeClaim:
+            claimName: jellyfin-media