Ben Vincent
54c25be828
Why: Jellyfin ships and gets validated first, ahead of the rest of the media stack. Scoping this PR to jellyfin alone keeps the initial rollout small and lets the HA fork prove out against the real library before the download and manager apps follow. How: - Drop sonarr, radarr, prowlarr, bazarr, nzbget, and jellyseerr and their shared media-apps foundation from this PR; they land in later PRs. - Move jellyfin into its own jellyfin namespace and fold the namespace and the static mediafs PV plus its RWX claim into the jellyfin base. - Keep the static CephFS PV bound to the in-use mediafs library with reclaimPolicy Retain and staticVolume true so nothing can reclaim it, mounted into jellyfin by the movies and tvseries subPaths; keep redis, the fresh RWX transcode scratch, the intel iGPU nodeSelector and i915 request, gateway, and httproute. - Scope the media AppProject and ApplicationSet to the single jellyfin namespace and app, extensible as the remaining apps are added.
98 lines
2.8 KiB
YAML
98 lines
2.8 KiB
YAML
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: jellyfin
|
|
namespace: jellyfin
|
|
spec:
|
|
# Single-replica for now. The jellyfin-ha fork adds the Redis transcode store
|
|
# and RWX transcode scratch that make scaling to true HA a follow-up.
|
|
replicas: 1
|
|
strategy:
|
|
# Config PVC is RWO; Recreate avoids two pods contending for it.
|
|
type: Recreate
|
|
selector:
|
|
matchLabels:
|
|
app: jellyfin
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: jellyfin
|
|
spec:
|
|
securityContext:
|
|
fsGroup: 1000
|
|
nodeSelector:
|
|
feature.node.kubernetes.io/pci-0300_8086.present: "true"
|
|
containers:
|
|
- name: jellyfin
|
|
image: git.unkin.net/unkin/jellyfin-ha:v0.1.0
|
|
imagePullPolicy: IfNotPresent
|
|
ports:
|
|
- name: http
|
|
containerPort: 8096
|
|
protocol: TCP
|
|
env:
|
|
- name: TZ
|
|
value: Australia/Sydney
|
|
- name: PUID
|
|
value: "1000"
|
|
- name: PGID
|
|
value: "1000"
|
|
- name: JELLYFIN_PublishedServerUrl
|
|
value: https://jellyfin.k8s.syd1.au.unkin.net
|
|
# Distributed transcode session store (jellyfin-ha additions).
|
|
- name: Jellyfin__TranscodeStore__RedisConnectionString
|
|
value: "jellyfin-redis:6379,abortConnect=false"
|
|
- name: Jellyfin__TranscodeStore__LeaseDurationSeconds
|
|
value: "30"
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 1Gi
|
|
limits:
|
|
cpu: "4"
|
|
memory: 8Gi
|
|
gpu.intel.com/i915: "1"
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: http
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 30
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: http
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /config
|
|
- name: cache
|
|
mountPath: /cache
|
|
- name: transcode
|
|
mountPath: /transcode
|
|
- name: media-library
|
|
mountPath: /mnt/movies
|
|
subPath: movies
|
|
- name: media-library
|
|
mountPath: /mnt/tvseries
|
|
subPath: tvseries
|
|
volumes:
|
|
- name: config
|
|
persistentVolumeClaim:
|
|
claimName: jellyfin-config
|
|
- name: cache
|
|
persistentVolumeClaim:
|
|
claimName: jellyfin-cache
|
|
- name: transcode
|
|
persistentVolumeClaim:
|
|
claimName: jellyfin-transcode
|
|
- name: media-library
|
|
persistentVolumeClaim:
|
|
claimName: media-library
|