0 Fork 0

Files

T

jakman85andClaude Opus 4.8 8392b52ee8 Onboard VPN downloaders (qBittorrent + Jackett) via ServiceDefinition renderer

Add catalog/ ServiceDefinitions for qbittorrent and jackett and their
rendered apps/ manifests, wired into apps/kustomization.yaml.

Both are VPN-class (egress: vpn -> egress-class=vpn pod label steered by the
CiliumEgressGatewayPolicy + host kill-switch, ADR-0015) and internal
forward-auth UIs (oauth2-proxy -> Keycloak, group media-users). Config on
3-replica Longhorn. qBittorrent's bulk downloads volume is DEFERRED pending
OQ-2 (non-provisioning bulk StorageClass stub), mirroring plex/arr.

Traces: R-NET-05/06 (VPN egress + kill-switch), R-IDP-02/06 (forward-auth),
R-STATE-02/03, R-OBS-01, R-UPD-01/03, R-GITOPS-02.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-25 08:40:48 -05:00

gitea.yaml

feat(apps): onboard Gitea via ServiceDefinition renderer

2026-08-25 08:23:33 -05:00

jackett.yaml

Onboard VPN downloaders (qBittorrent + Jackett) via ServiceDefinition renderer

2026-08-25 08:40:48 -05:00

kustomization.yaml

Onboard VPN downloaders (qBittorrent + Jackett) via ServiceDefinition renderer

2026-08-25 08:40:48 -05:00

pihole.yaml

feat(net): renderer emits gateway-ingress allow for exposed services (R-NET-01/02)