feat(qbittorrent): Add Unpackerr

k8s-wheatley/qbittorrent/configmap.yaml

@@ -36,3 +36,15 @@ data:
   PGID: "1000"
   QBT_LEGAL_NOTICE: confirm
   QBT_WEBUI_PORT: "8112"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: unpackerr-envs
+data:
+  PUID: "1000"
+  PGID: "1000"
+  TZ: Europe/Amsterdam
+  UN_FOLDER_0_PATH: /shared/media/downloads
+  UN_RADARR_0_URL: http://radarr.radarr.svc.cluster.local
+  UN_SONARR_0_URL: http://sonarr.sonarr.svc.cluster.local

k8s-wheatley/qbittorrent/deployments.yaml

@@ -87,6 +87,26 @@ spec:
             capabilities:
               drop:
                 - "ALL"
+        - name: unpackerr
+          image: golift/unpackerr
+          imagePullPolicy: IfNotPresent
+          envFrom:
+            - configMapRef:
+                name: unpackerr-envs
+          volumeMounts:
+            - mountPath: /config
+              name: unpackerr-config
+            - mountPath: /shared/media/downloads
+              name: nfs-media
+          securityContext:
+            seccompProfile:
+              type: RuntimeDefault
+            runAsUser: 1000
+            runAsGroup: 1000
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - "ALL"
       volumes:
         - name: dev-tun
           hostPath:
@@ -95,6 +115,9 @@ spec:
         - name: qbittorrent-config
           persistentVolumeClaim:
             claimName: qbittorrent-storage
+        - name: unpackerr-config
+          persistentVolumeClaim:
+            claimName: unpackerr-storage
         - name: gluetun-wgconfig
           secret:
             secretName: gluetun-wgconfig

k8s-wheatley/qbittorrent/pvc.yaml

@@ -13,6 +13,18 @@ spec:
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
+metadata:
+  name: unpackerr-storage
+spec:
+  storageClassName: piraeus-lvmthin
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
 metadata:
   name: nfs-media
 spec:

k8s-wheatley/qbittorrent/secrets.yaml

@@ -17,3 +17,23 @@ spec:
       remoteRef:
         key: secrets/managed/qbittorrent/protonvpn-wgconfig
         property: config
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: unpackerr-env-secrets
+spec:
+  secretStoreRef:
+    name: vault-wheatley
+    kind: ClusterSecretStore
+  target:
+    name: unpackerr-env-secrets
+  data:
+    - secretKey: UN_RADARR_0_API_KEY
+      remoteRef:
+        key: secrets/managed/qbittorrent/unpackerr-env-secrets
+        property: radarr_api_key
+    - secretKey: UN_SONARR_0_API_KEY
+      remoteRef:
+        key: secrets/managed/qbittorrent/unpackerr-env-secrets
+        property: sonarr_api_key