unkin-agent
9cdcdf62bc
## Why Servarr MediaCover assets (movie/series posters and fanart) and app backups currently live on each replica's local `/config`, which is an `emptyDir`. A poster the leader downloads is invisible to the other replicas behind the Service, so covers render inconsistently and backups are leader-local. This provisions a shared Ceph RGW (S3) bucket to hold those assets instead. ## Changes - Add an `arrstack-media` `ObjectStoreUser` + `Bucket` (cephrgw-operator), mirroring the CNPG backup pattern. The operator mints the `arrstack-media-s3` credential Secret in-namespace (`AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `S3_ENDPOINT`), so **no Vault KV seeding is required**. - Wire the radarr Deployment to the bucket via `Radarr__MediaCover__S3__*` env (creds from the operator Secret; estate CA mounted at `/etc/ssl/vault-ca/ca.crt` for RGW TLS validation). ## Notes - The env keys are unknown to the current `-unkin2` image and are ignored by it; they activate once the `-unkin3+` image (radarr MediaCover-S3 support, separate radarr PR) ships. sonarr/prowlarr wiring and backups-to-S3 follow in later PRs. - `kubectl kustomize apps/base/arrstack` builds clean. Reviewed-on: #387 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
35 lines
1.1 KiB
YAML
35 lines
1.1 KiB
YAML
---
|
|
# Shared Ceph RGW (S3) bucket for arrstack media assets (Servarr MediaCover
|
|
# posters/fanart and, later, application backups), provisioned by the in-estate
|
|
# cephrgw-operator. Moving these off each replica's local /config (an emptyDir)
|
|
# lets any radarr/sonarr/prowlarr replica serve covers and store backups without
|
|
# leader-local state. The operator mints the S3 credential Secret
|
|
# (arrstack-media-s3) in this namespace with keys AWS_ACCESS_KEY_ID,
|
|
# AWS_SECRET_ACCESS_KEY and S3_ENDPOINT, so no Vault KV seeding is required.
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: ObjectStoreUser
|
|
metadata:
|
|
name: arrstack-media
|
|
namespace: arrstack
|
|
spec:
|
|
displayName: "arrstack media assets owner"
|
|
uid: arrstack-media
|
|
maxBuckets: 5
|
|
secretName: arrstack-media-s3
|
|
retainOnDelete: true
|
|
---
|
|
apiVersion: ceph.unkin.net/v1alpha1
|
|
kind: Bucket
|
|
metadata:
|
|
name: arrstack-media
|
|
namespace: arrstack
|
|
spec:
|
|
placementTarget: ec
|
|
bucketName: arrstack-media
|
|
ownerRef: arrstack-media
|
|
versioning: false
|
|
tags:
|
|
app: arrstack
|
|
purpose: media-assets
|
|
retainOnDelete: true
|