0 Fork 0

Files

T

jakman85andClaude Opus 4.8 b6f72eab0c feat(apps): onboard seerr (Overseerr request UI) — completes arr↔seerr↔plex graph

Phase 6: add the seerr ServiceDefinition and its rendered manifests. seerr is the
final missing node in the media dependency graph (docs/13 row 5; docs/03 allow rules).

- catalog/seerr.yaml: public | egress internet | config on longhorn (5Gi) |
  auth native (Plex accounts, documented SSO exception, docs/15) | 3 explicit egress
  deps: sonarr:8989, radarr:7878, plex:32400. No bulk volume (OQ-2 unresolved).
- apps/seerr.yaml: rendered via catalog/render.py --no-image-automation (default-deny
  DNS-only baseline + 3 dep CiliumNetworkPolicies + gateway-ingress + internet world
  egress + HTTPRoute seerr.home.keithjackson.dev:5055 + ServiceMonitor + alerts).
- apps/kustomization.yaml: add seerr.yaml (with the arr/media stack).

Gates: render --selftest PASS; ci lint PASS; L0 kyverno 17/17 (schema + default-deny +
egress-class + auth-mode + host-ns); L1 render 3/3. Other apps byte-identical.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-26 00:27:47 -05:00

gitea-actions-runner-secret.sops.yaml

Phase-6: enable Gitea Actions, in-cluster act_runner, static CI gate

2026-08-25 23:51:52 -05:00

gitea-actions.yaml

fix(ci): kyverno CLI arch x86_64 in install-tools; wait for dind certs

2026-08-26 00:04:04 -05:00

gitea-bootstrap-patch.yaml

Phase-6: enable Gitea Actions, in-cluster act_runner, static CI gate

2026-08-25 23:51:52 -05:00

gitea-bootstrap-secret.sops.yaml

fix(gitea): mount PVC at /data + headless-install bootstrap (Phase 6)