unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

arrstack: add kids backend tier (sonarr/radarr/nzbget-kids) #412

Merged
benvin merged 3 commits from benvin/arrstack-kids into main 2026-08-25 08:03:21 +10:00
Conversation 0 Commits 3 Files Changed 22
+946
unkin-agent commented 2026-08-24 22:06:51 +10:00
Member
Copy Link
Copy Source

Splits the arrstack media pipeline into an adult and a kids tier so kids content lives in its own libraries, databases, and downloader while reusing the shared prowlarr, CNPG cluster, Valkey, media PVCs, and S3 buckets. Backend workloads only — no routing/ingress, no arrproxy, no adult-instance changes in this PR.

How:

  • sonarr-kids / radarr-kids: mirror the adult -unkin fork Deployments (same images/tags, 3 active-active replicas) on their own Postgres DBs (sonarr-kids-main / radarr-kids-main), UrlBase /3df803/sonarr and /3df803/radarr, and kids MediaCover/Backup S3 prefixes.
  • Media mounts use the tvshows/kids and movies/kids subPaths of the shared media-tv / media-movies PVCs, so kids libraries are isolated on the same CephFS subvolumes.
  • nzbget-kids: second downloader on its own RWO config PVC, completed downloads land in the kids media subtrees for same-filesystem hardlink imports.
  • postgres: two managed roles + Database CRDs and their VSO-synced -kids-db credential secrets.
  • per-app VMPodScrape for each kids exportarr sidecar; new apps registered in the base kustomization.

Validated: kustomize build + kubeconform (96/96 valid), yamllint + pre-commit clean.

Splits the arrstack media pipeline into an adult and a kids tier so kids content lives in its own libraries, databases, and downloader while reusing the shared prowlarr, CNPG cluster, Valkey, media PVCs, and S3 buckets. Backend workloads only — no routing/ingress, no arrproxy, no adult-instance changes in this PR. How: - sonarr-kids / radarr-kids: mirror the adult -unkin fork Deployments (same images/tags, 3 active-active replicas) on their own Postgres DBs (sonarr-kids-main / radarr-kids-main), UrlBase /3df803/sonarr and /3df803/radarr, and kids MediaCover/Backup S3 prefixes. - Media mounts use the tvshows/kids and movies/kids subPaths of the shared media-tv / media-movies PVCs, so kids libraries are isolated on the same CephFS subvolumes. - nzbget-kids: second downloader on its own RWO config PVC, completed downloads land in the kids media subtrees for same-filesystem hardlink imports. - postgres: two managed roles + Database CRDs and their VSO-synced <app>-kids-db credential secrets. - per-app VMPodScrape for each kids exportarr sidecar; new apps registered in the base kustomization. Validated: kustomize build + kubeconform (96/96 valid), yamllint + pre-commit clean.
unkin-agent added 1 commit 2026-08-24 22:06:51 +10:00
arrstack: add kids backend tier (sonarr/radarr/nzbget-kids)
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
0eddf060c2 
Split the arrstack media pipeline into an adult and a kids tier so kids
content lives in its own libraries, databases, and downloader while
reusing the shared prowlarr, CNPG cluster, Valkey, media PVCs, and S3
buckets. Backend workloads only — no routing/ingress or arrproxy changes
in this PR; the adult instances are untouched.

- sonarr-kids/radarr-kids: mirror the adult -unkin fork Deployments
  (same images/tags, 3 active-active replicas), pointed at their own
  Postgres DBs (sonarr-kids-main/radarr-kids-main), UrlBase
  /3df803/sonarr and /3df803/radarr, and kids MediaCover/Backup S3
  prefixes; media mounts use the tvshows/kids and movies/kids subPaths
  of the shared media-tv/media-movies PVCs.
- nzbget-kids: second downloader on its own RWO config PVC, writing
  completed downloads into the kids media subtrees for same-filesystem
  hardlink imports.
- postgres: two managed roles + Database CRDs (sonarr-kids/radarr-kids)
  and their VSO-synced <app>-kids-db credential secrets.
- per-app VMPodScrape for each kids exportarr sidecar; register the
  three new apps in the base kustomization.
unkinben added 1 commit 2026-08-24 22:24:49 +10:00
fix: convert third-party image URLs from artifactapi proxies to upstream registries
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
6ffd8c4cb9 
- nzbget-kids: docker.io/linuxserver/nzbget (was artifactapi/dockerhub)
- radarr-kids exportarr: ghcr.io/onedr0p/exportarr (was artifactapi/ghcr)
- sonarr-kids exportarr: ghcr.io/onedr0p/exportarr (was artifactapi/ghcr)

Kept docker-internal images unchanged per policy.
unkinben added 1 commit 2026-08-24 22:41:37 +10:00
Fix storage class: cephrbd-fast-retain → cephrbd-fast-delete (nzbget-kids)
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
21e9ccb437
benvin merged commit b419635fc2 into main 2026-08-25 08:03:21 +10:00
benvin deleted branch benvin/arrstack-kids 2026-08-25 08:03:22 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#412
Delete Branch "benvin/arrstack-kids"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?