0 Fork 0

Files

T

jakman85andClaude Opus 4.8 0f12950831 Onboard arr apps (Sonarr + Radarr) via ServiceDefinition renderer

Add catalog/sonarr.yaml and catalog/radarr.yaml ServiceDefinitions and their
rendered apps/*.yaml manifests, wired into apps/kustomization.yaml.

- exposure: internal, egress: vpn (R-NET-05/06 VPN + kill-switch, ADR-0015)
- auth: forward-auth, groups: media-users (R-IDP-02/06)
- dependencies -> qbittorrent:8080, jackett:9117 as explicit east-west
  CiliumNetworkPolicy egress allows on top of default-deny (R-NET-01/02)
- config on longhorn (R-STATE-02); bulk media/downloads volume DEFERRED
  pending OQ-2 (bulk StorageClass is a non-provisioning stub)
- observability up-SLI alert (R-OBS-01), daily-offcluster backup (R-STATE-03)

Rendered with catalog/render.py --no-image-automation. Offline gates green:
schema validate, kubectl kustomize apps, render.py --selftest, make -C ci gate.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-25 08:32:39 -05:00

gitea.yaml

feat(apps): onboard Gitea via ServiceDefinition renderer

2026-08-25 08:23:33 -05:00

kustomization.yaml

Onboard arr apps (Sonarr + Radarr) via ServiceDefinition renderer

2026-08-25 08:32:39 -05:00

pihole.yaml

feat(net): renderer emits gateway-ingress allow for exposed services (R-NET-01/02)

2026-08-24 23:40:52 -05:00

plex.yaml

Onboard Plex to the k3s platform via ServiceDefinition (WS-APPS)