chore(deps): update helm release cilium to v1.19.4

2026-05-13 19:03:50 +00:00
24 changed files with 95 additions and 416 deletions
--- a/k8s-wheatley/lidarr/deployments.yaml
+++ b/k8s-wheatley/lidarr/deployments.yaml
@ -28,10 +28,8 @@ spec:
          volumeMounts:
            - mountPath: /config
              name: lidarr-config
-            - mountPath: /shared/media/music
-              name: nfs-media-music
-            - mountPath: /shared/media/downloads
-              name: nfs-media-downloads
+            - mountPath: /shared/media
+              name: nfs-media
          securityContext:
            seccompProfile:
              type: RuntimeDefault
@ -47,9 +45,6 @@ spec:
        - name: lidarr-config
          persistentVolumeClaim:
            claimName: lidarr-storage
-        - name: nfs-media-music
+        - name: nfs-media
          persistentVolumeClaim:
-            claimName: nfs-media-music
-        - name: nfs-media-downloads
-          persistentVolumeClaim:
-            claimName: nfs-media-downloads
+            claimName: nfs-media
--- a/k8s-wheatley/lidarr/kustomization.yaml
+++ b/k8s-wheatley/lidarr/kustomization.yaml
@ -4,6 +4,7 @@ kind: Kustomization
 namespace: lidarr

 resources:
+  - ../../kustomize-bases/nfs-media
  - configmap.yaml
  - deployments.yaml
  - ingress.yaml
@ -11,39 +12,21 @@ resources:
  - services.yaml
  - namespace.yaml

-components:
-  - ../../kustomize-bases/nfs-media/components/music
-  - ../../kustomize-bases/nfs-media/components/downloads
-
 patches:
  - target:
      kind: PersistentVolume
-      name: nfs-media-music
+      name: nfs-media
    patch: |
      - op: replace
        path: /metadata/name
-        value: nfs-media-lidarr-music
+        value: nfs-media-lidarr
  - target:
      kind: PersistentVolumeClaim
-      name: nfs-media-music
+      name: nfs-media
    patch: |
      - op: replace
        path: /spec/volumeName
-        value: nfs-media-lidarr-music
-  - target:
-      kind: PersistentVolume
-      name: nfs-media-downloads
-    patch: |
-      - op: replace
-        path: /metadata/name
-        value: nfs-media-lidarr-downloads
-  - target:
-      kind: PersistentVolumeClaim
-      name: nfs-media-downloads
-    patch: |
-      - op: replace
-        path: /spec/volumeName
-        value: nfs-media-lidarr-downloads
+        value: nfs-media-lidarr

 images:
  - name: linuxserver/lidarr
--- a/k8s-wheatley/plex/deployments.yaml
+++ b/k8s-wheatley/plex/deployments.yaml
@ -28,12 +28,8 @@ spec:
          volumeMounts:
            - mountPath: /config
              name: plex-config
-            - mountPath: /data/movies
-              name: nfs-media-movies
-            - mountPath: /data/series
-              name: nfs-media-series
-            - mountPath: /data/anime
-              name: nfs-media-anime
+            - mountPath: /data
+              name: nfs-media
          securityContext:
            seccompProfile:
              type: RuntimeDefault
@ -49,12 +45,6 @@ spec:
        - name: plex-config
          persistentVolumeClaim:
            claimName: plex-storage
-        - name: nfs-media-movies
+        - name: nfs-media
          persistentVolumeClaim:
-            claimName: nfs-media-movies
-        - name: nfs-media-series
-          persistentVolumeClaim:
-            claimName: nfs-media-series
-        - name: nfs-media-anime
-          persistentVolumeClaim:
-            claimName: nfs-media-anime
+            claimName: nfs-media
--- a/k8s-wheatley/plex/kustomization.yaml
+++ b/k8s-wheatley/plex/kustomization.yaml
@ -4,6 +4,7 @@ kind: Kustomization
 namespace: plex

 resources:
+  - ../../kustomize-bases/nfs-media
  - configmap.yaml
  - deployments.yaml
  - ingress.yaml
@ -12,69 +13,24 @@ resources:
  - services.yaml
  - namespace.yaml

-components:
-  - ../../kustomize-bases/nfs-media/components/movies
-  - ../../kustomize-bases/nfs-media/components/series
-  - ../../kustomize-bases/nfs-media/components/anime
-
 patches:
  - target:
      kind: PersistentVolume
-      name: nfs-media-movies
+      name: nfs-media
    patch: |
      - op: replace
        path: /metadata/name
-        value: nfs-media-plex-movies
+        value: nfs-media-plex
      - op: replace
        path: /spec/accessModes/0
        value: ReadOnlyMany
  - target:
      kind: PersistentVolumeClaim
-      name: nfs-media-movies
+      name: nfs-media
    patch: |
      - op: replace
        path: /spec/volumeName
-        value: nfs-media-plex-movies
-      - op: replace
-        path: /spec/accessModes/0
-        value: ReadOnlyMany
-  - target:
-      kind: PersistentVolume
-      name: nfs-media-series
-    patch: |
-      - op: replace
-        path: /metadata/name
-        value: nfs-media-plex-series
-      - op: replace
-        path: /spec/accessModes/0
-        value: ReadOnlyMany
-  - target:
-      kind: PersistentVolumeClaim
-      name: nfs-media-series
-    patch: |
-      - op: replace
-        path: /spec/volumeName
-        value: nfs-media-plex-series
-      - op: replace
-        path: /spec/accessModes/0
-        value: ReadOnlyMany
-  - target:
-      kind: PersistentVolume
-      name: nfs-media-anime
-    patch: |
-      - op: replace
-        path: /metadata/name
-        value: nfs-media-plex-anime
-      - op: replace
-        path: /spec/accessModes/0
-        value: ReadOnlyMany
-  - target:
-      kind: PersistentVolumeClaim
-      name: nfs-media-anime
-    patch: |
-      - op: replace
-        path: /spec/volumeName
-        value: nfs-media-plex-anime
+        value: nfs-media-plex
      - op: replace
        path: /spec/accessModes/0
        value: ReadOnlyMany
--- a/k8s-wheatley/qbittorrent/deployments.yaml
+++ b/k8s-wheatley/qbittorrent/deployments.yaml
@ -94,7 +94,7 @@ spec:
            - mountPath: /config
              name: qbittorrent-config
            - mountPath: /shared/media/downloads
-              name: nfs-media-downloads
+              name: nfs-media
          securityContext:
            seccompProfile:
              type: RuntimeDefault
@ -114,7 +114,7 @@ spec:
                name: unpackerr-env-secrets
          volumeMounts:
            - mountPath: /shared/media/downloads
-              name: nfs-media-downloads
+              name: nfs-media
          securityContext:
            seccompProfile:
              type: RuntimeDefault
@ -136,7 +136,7 @@ spec:
            - mountPath: /config
              name: slskd-config
            - mountPath: /shared/media/downloads
-              name: nfs-media-downloads
+              name: nfs-media
          securityContext:
            seccompProfile:
              type: RuntimeDefault
@ -168,6 +168,6 @@ spec:
            defaultMode: 0755
        - name: gluetun-tmp
          emptyDir: {}
-        - name: nfs-media-downloads
+        - name: nfs-media
          persistentVolumeClaim:
-            claimName: nfs-media-downloads
+            claimName: nfs-media
--- a/k8s-wheatley/qbittorrent/kustomization.yaml
+++ b/k8s-wheatley/qbittorrent/kustomization.yaml
@ -4,6 +4,7 @@ kind: Kustomization
 namespace: qbittorrent

 resources:
+  - ../../kustomize-bases/nfs-media
  - configmap.yaml
  - deployments.yaml
  - ingress.yaml
@ -11,24 +12,24 @@ resources:
  - secrets.yaml
  - namespace.yaml

-components:
-  - ../../kustomize-bases/nfs-media/components/downloads
-
 patches:
  - target:
      kind: PersistentVolume
-      name: nfs-media-downloads
+      name: nfs-media
    patch: |
      - op: replace
        path: /metadata/name
-        value: nfs-media-qbittorrent-downloads
+        value: nfs-media-qbittorrent
+      - op: replace
+        path: /spec/nfs/path
+        value: /tank/media/downloads
  - target:
      kind: PersistentVolumeClaim
-      name: nfs-media-downloads
+      name: nfs-media
    patch: |
      - op: replace
        path: /spec/volumeName
-        value: nfs-media-qbittorrent-downloads
+        value: nfs-media-qbittorrent

 images:
  - name: ghcr.io/qdm12/gluetun
--- a/k8s-wheatley/radarr/deployments.yaml
+++ b/k8s-wheatley/radarr/deployments.yaml
@ -28,10 +28,8 @@ spec:
          volumeMounts:
            - mountPath: /config
              name: radarr-config
-            - mountPath: /shared/media/movies
-              name: nfs-media-movies
-            - mountPath: /shared/media/downloads
-              name: nfs-media-downloads
+            - mountPath: /shared/media
+              name: nfs-media
          securityContext:
            seccompProfile:
              type: RuntimeDefault
@ -47,9 +45,6 @@ spec:
        - name: radarr-config
          persistentVolumeClaim:
            claimName: radarr-storage
-        - name: nfs-media-movies
+        - name: nfs-media
          persistentVolumeClaim:
-            claimName: nfs-media-movies
-        - name: nfs-media-downloads
-          persistentVolumeClaim:
-            claimName: nfs-media-downloads
+            claimName: nfs-media
--- a/k8s-wheatley/radarr/kustomization.yaml
+++ b/k8s-wheatley/radarr/kustomization.yaml
@ -4,6 +4,7 @@ kind: Kustomization
 namespace: radarr

 resources:
+  - ../../kustomize-bases/nfs-media
  - configmap.yaml
  - deployments.yaml
  - ingress.yaml
@ -12,39 +13,21 @@ resources:
  - services.yaml
  - namespace.yaml

-components:
-  - ../../kustomize-bases/nfs-media/components/movies
-  - ../../kustomize-bases/nfs-media/components/downloads
-
 patches:
  - target:
      kind: PersistentVolume
-      name: nfs-media-movies
+      name: nfs-media
    patch: |
      - op: replace
        path: /metadata/name
-        value: nfs-media-radarr-movies
+        value: nfs-media-radarr
  - target:
      kind: PersistentVolumeClaim
-      name: nfs-media-movies
+      name: nfs-media
    patch: |
      - op: replace
        path: /spec/volumeName
-        value: nfs-media-radarr-movies
-  - target:
-      kind: PersistentVolume
-      name: nfs-media-downloads
-    patch: |
-      - op: replace
-        path: /metadata/name
-        value: nfs-media-radarr-downloads
-  - target:
-      kind: PersistentVolumeClaim
-      name: nfs-media-downloads
-    patch: |
-      - op: replace
-        path: /spec/volumeName
-        value: nfs-media-radarr-downloads
+        value: nfs-media-radarr

 images:
  - name: linuxserver/radarr
--- a/k8s-wheatley/sonarr/deployments.yaml
+++ b/k8s-wheatley/sonarr/deployments.yaml
@ -28,12 +28,8 @@ spec:
          volumeMounts:
            - mountPath: /config
              name: sonarr-config
-            - mountPath: /shared/media/series
-              name: nfs-media-series
-            - mountPath: /shared/media/anime
-              name: nfs-media-anime
-            - mountPath: /shared/media/downloads
-              name: nfs-media-downloads
+            - mountPath: /shared/media
+              name: nfs-media
          securityContext:
            seccompProfile:
              type: RuntimeDefault
@ -49,12 +45,6 @@ spec:
        - name: sonarr-config
          persistentVolumeClaim:
            claimName: sonarr-storage
-        - name: nfs-media-series
+        - name: nfs-media
          persistentVolumeClaim:
-            claimName: nfs-media-series
-        - name: nfs-media-anime
-          persistentVolumeClaim:
-            claimName: nfs-media-anime
-        - name: nfs-media-downloads
-          persistentVolumeClaim:
-            claimName: nfs-media-downloads
+            claimName: nfs-media
--- a/k8s-wheatley/sonarr/kustomization.yaml
+++ b/k8s-wheatley/sonarr/kustomization.yaml
@ -4,6 +4,7 @@ kind: Kustomization
 namespace: sonarr

 resources:
+  - ../../kustomize-bases/nfs-media
  - configmap.yaml
  - deployments.yaml
  - ingress.yaml
@ -12,54 +13,21 @@ resources:
  - services.yaml
  - namespace.yaml

-components:
-  - ../../kustomize-bases/nfs-media/components/series
-  - ../../kustomize-bases/nfs-media/components/anime
-  - ../../kustomize-bases/nfs-media/components/downloads
-
 patches:
  - target:
      kind: PersistentVolume
-      name: nfs-media-series
+      name: nfs-media
    patch: |
      - op: replace
        path: /metadata/name
-        value: nfs-media-sonarr-series
+        value: nfs-media-sonarr
  - target:
      kind: PersistentVolumeClaim
-      name: nfs-media-series
+      name: nfs-media
    patch: |
      - op: replace
        path: /spec/volumeName
-        value: nfs-media-sonarr-series
-  - target:
-      kind: PersistentVolume
-      name: nfs-media-anime
-    patch: |
-      - op: replace
-        path: /metadata/name
-        value: nfs-media-sonarr-anime
-  - target:
-      kind: PersistentVolumeClaim
-      name: nfs-media-anime
-    patch: |
-      - op: replace
-        path: /spec/volumeName
-        value: nfs-media-sonarr-anime
-  - target:
-      kind: PersistentVolume
-      name: nfs-media-downloads
-    patch: |
-      - op: replace
-        path: /metadata/name
-        value: nfs-media-sonarr-downloads
-  - target:
-      kind: PersistentVolumeClaim
-      name: nfs-media-downloads
-    patch: |
-      - op: replace
-        path: /spec/volumeName
-        value: nfs-media-sonarr-downloads
+        value: nfs-media-sonarr

 images:
  - name: linuxserver/sonarr
--- a/kustomize-bases/nfs-media/components/anime/kustomization.yaml
+++ b/kustomize-bases/nfs-media/components/anime/kustomization.yaml
@ -1,5 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1alpha1
-kind: Component
-resources:
-  - pvc.yaml
--- a/kustomize-bases/nfs-media/components/anime/pvc.yaml
+++ b/kustomize-bases/nfs-media/components/anime/pvc.yaml
@ -1,33 +0,0 @@
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: nfs-media-anime
-spec:
-  capacity:
-    storage: 40Ti
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    server: 10.0.69.10
-    path: /tank/media/anime
-  mountOptions:
-    - vers=4.1
-    - rsize=1048576
-    - wsize=1048576
-    - hard
-    - timeo=600
-    - noatime
-  persistentVolumeReclaimPolicy: Retain
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: nfs-media-anime
-spec:
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 40Ti
-  volumeName: nfs-media-anime
--- a/kustomize-bases/nfs-media/components/downloads/kustomization.yaml
+++ b/kustomize-bases/nfs-media/components/downloads/kustomization.yaml
@ -1,5 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1alpha1
-kind: Component
-resources:
-  - pvc.yaml
--- a/kustomize-bases/nfs-media/components/downloads/pvc.yaml
+++ b/kustomize-bases/nfs-media/components/downloads/pvc.yaml
@ -1,33 +0,0 @@
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: nfs-media-downloads
-spec:
-  capacity:
-    storage: 40Ti
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    server: 10.0.69.10
-    path: /tank/media/downloads
-  mountOptions:
-    - vers=4.1
-    - rsize=1048576
-    - wsize=1048576
-    - hard
-    - timeo=600
-    - noatime
-  persistentVolumeReclaimPolicy: Retain
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: nfs-media-downloads
-spec:
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 40Ti
-  volumeName: nfs-media-downloads
--- a/kustomize-bases/nfs-media/components/movies/kustomization.yaml
+++ b/kustomize-bases/nfs-media/components/movies/kustomization.yaml
@ -1,5 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1alpha1
-kind: Component
-resources:
-  - pvc.yaml
--- a/kustomize-bases/nfs-media/components/movies/pvc.yaml
+++ b/kustomize-bases/nfs-media/components/movies/pvc.yaml
@ -1,33 +0,0 @@
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: nfs-media-movies
-spec:
-  capacity:
-    storage: 40Ti
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    server: 10.0.69.10
-    path: /tank/media/movies
-  mountOptions:
-    - vers=4.1
-    - rsize=1048576
-    - wsize=1048576
-    - hard
-    - timeo=600
-    - noatime
-  persistentVolumeReclaimPolicy: Retain
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: nfs-media-movies
-spec:
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 40Ti
-  volumeName: nfs-media-movies
--- a/kustomize-bases/nfs-media/components/music/kustomization.yaml
+++ b/kustomize-bases/nfs-media/components/music/kustomization.yaml
@ -1,5 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1alpha1
-kind: Component
-resources:
-  - pvc.yaml
--- a/kustomize-bases/nfs-media/components/music/pvc.yaml
+++ b/kustomize-bases/nfs-media/components/music/pvc.yaml
@ -1,33 +0,0 @@
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: nfs-media-music
-spec:
-  capacity:
-    storage: 40Ti
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    server: 10.0.69.10
-    path: /tank/media/music
-  mountOptions:
-    - vers=4.1
-    - rsize=1048576
-    - wsize=1048576
-    - hard
-    - timeo=600
-    - noatime
-  persistentVolumeReclaimPolicy: Retain
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: nfs-media-music
-spec:
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 40Ti
-  volumeName: nfs-media-music
--- a/kustomize-bases/nfs-media/components/roms/kustomization.yaml
+++ b/kustomize-bases/nfs-media/components/roms/kustomization.yaml
@ -1,5 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1alpha1
-kind: Component
-resources:
-  - pvc.yaml
--- a/kustomize-bases/nfs-media/components/roms/pvc.yaml
+++ b/kustomize-bases/nfs-media/components/roms/pvc.yaml
@ -1,33 +0,0 @@
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: nfs-media-roms
-spec:
-  capacity:
-    storage: 40Ti
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    server: 10.0.69.10
-    path: /tank/media/roms
-  mountOptions:
-    - vers=4.1
-    - rsize=1048576
-    - wsize=1048576
-    - hard
-    - timeo=600
-    - noatime
-  persistentVolumeReclaimPolicy: Retain
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: nfs-media-roms
-spec:
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 40Ti
-  volumeName: nfs-media-roms
--- a/kustomize-bases/nfs-media/components/series/kustomization.yaml
+++ b/kustomize-bases/nfs-media/components/series/kustomization.yaml
@ -1,5 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1alpha1
-kind: Component
-resources:
-  - pvc.yaml
--- a/kustomize-bases/nfs-media/components/series/pvc.yaml
+++ b/kustomize-bases/nfs-media/components/series/pvc.yaml
@ -1,33 +0,0 @@
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: nfs-media-series
-spec:
-  capacity:
-    storage: 40Ti
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    server: 10.0.69.10
-    path: /tank/media/series
-  mountOptions:
-    - vers=4.1
-    - rsize=1048576
-    - wsize=1048576
-    - hard
-    - timeo=600
-    - noatime
-  persistentVolumeReclaimPolicy: Retain
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: nfs-media-series
-spec:
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 40Ti
-  volumeName: nfs-media-series
--- a/kustomize-bases/nfs-media/kustomization.yaml
+++ b/kustomize-bases/nfs-media/kustomization.yaml
@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - pvc.yaml
--- a/kustomize-bases/nfs-media/pvc.yaml
+++ b/kustomize-bases/nfs-media/pvc.yaml
@ -0,0 +1,40 @@
+# Shared NFS media storage template — used by plex, sonarr, radarr, and qbittorrent.
+# All apps on k8s-wheatley mount the same NFS server: 10.0.69.10
+#
+# Each app overlays this base with JSON patches in its kustomization.yaml:
+#   - Always: rename PV (metadata.name) and update PVC volumeName to match
+#   - plex only: patch accessModes to ReadOnlyMany on both PV and PVC
+#   - qbittorrent only: patch nfs.path to /tank/media/downloads
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: nfs-media  # renamed per-app via JSON patch
+spec:
+  capacity:
+    storage: 40Ti
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    server: 10.0.69.10
+    path: /tank/media
+  mountOptions:
+    - vers=4.1
+    - rsize=1048576
+    - wsize=1048576
+    - hard
+    - timeo=600
+    - noatime
+  persistentVolumeReclaimPolicy: Retain
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nfs-media
+spec:
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 40Ti
+  volumeName: nfs-media  # patched per-app to match PV name