Onboard VPN downloaders (qBittorrent + Jackett) via ServiceDefinition renderer

0 Fork 0

Add catalog/ ServiceDefinitions for qbittorrent and jackett and their
rendered apps/ manifests, wired into apps/kustomization.yaml.

Both are VPN-class (egress: vpn -> egress-class=vpn pod label steered by the
CiliumEgressGatewayPolicy + host kill-switch, ADR-0015) and internal
forward-auth UIs (oauth2-proxy -> Keycloak, group media-users). Config on
3-replica Longhorn. qBittorrent's bulk downloads volume is DEFERRED pending
OQ-2 (non-provisioning bulk StorageClass stub), mirroring plex/arr.

Traces: R-NET-05/06 (VPN egress + kill-switch), R-IDP-02/06 (forward-auth),
R-STATE-02/03, R-OBS-01, R-UPD-01/03, R-GITOPS-02.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

This commit is contained in:

jakman85andClaude Opus 4.8 committed 2026-08-25 08:40:48 -05:00

1 parent 87087e06c7

commit 8392b52ee8

5 files changed

+493

No files matched your search

									
										apps/kustomization.yaml
									
		+2
		
												View File
												
				@@ -9,3 +9,5 @@ resources:

				  - pihole.yaml

				  - gitea.yaml

				  - plex.yaml

				  - qbittorrent.yaml

				  - jackett.yaml