Onboard arr apps (Sonarr + Radarr) via ServiceDefinition renderer

0 Fork 0

Add catalog/sonarr.yaml and catalog/radarr.yaml ServiceDefinitions and their
rendered apps/*.yaml manifests, wired into apps/kustomization.yaml.

- exposure: internal, egress: vpn (R-NET-05/06 VPN + kill-switch, ADR-0015)
- auth: forward-auth, groups: media-users (R-IDP-02/06)
- dependencies -> qbittorrent:8080, jackett:9117 as explicit east-west
  CiliumNetworkPolicy egress allows on top of default-deny (R-NET-01/02)
- config on longhorn (R-STATE-02); bulk media/downloads volume DEFERRED
  pending OQ-2 (bulk StorageClass is a non-provisioning stub)
- observability up-SLI alert (R-OBS-01), daily-offcluster backup (R-STATE-03)

Rendered with catalog/render.py --no-image-automation. Offline gates green:
schema validate, kubectl kustomize apps, render.py --selftest, make -C ci gate.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

This commit is contained in:

jakman85andClaude Opus 4.8 committed 2026-08-25 08:32:39 -05:00

1 parent 87087e06c7

commit 0f12950831

5 files changed

+570

No files matched your search

									
										apps/kustomization.yaml
									
		+2
		
												View File
												
				@@ -8,4 +8,6 @@ kind: Kustomization

				resources:

				  - pihole.yaml

				  - gitea.yaml

				  - sonarr.yaml

				  - radarr.yaml

				  - plex.yaml