From 78659b1c779851bc349f2b55d6f49e001aeff8c1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1s=20Limpinho?= <53994778+TomasLimpinho@users.noreply.github.com> Date: Thu, 13 Nov 2025 22:29:04 +0000 Subject: [PATCH] radarr --- roles/radarr/files/radarr-deployment.yaml | 75 +++++++++++++++++++++++ roles/radarr/files/radarr-nfs-csi.yaml | 23 +++++++ roles/radarr/files/radarr-pvcs.yaml | 60 ++++++++++++++++++ roles/radarr/files/radarr-secret.yaml | 11 ++++ roles/radarr/files/radarr-service.yaml | 12 ++++ roles/radarr/tasks/main.yml | 51 +++++++++++++++ roles/radarr/vars/main.yml | 4 ++ 7 files changed, 236 insertions(+) create mode 100644 roles/radarr/files/radarr-deployment.yaml create mode 100644 roles/radarr/files/radarr-nfs-csi.yaml create mode 100644 roles/radarr/files/radarr-pvcs.yaml create mode 100644 roles/radarr/files/radarr-secret.yaml create mode 100644 roles/radarr/files/radarr-service.yaml create mode 100644 roles/radarr/tasks/main.yml create mode 100644 roles/radarr/vars/main.yml diff --git a/roles/radarr/files/radarr-deployment.yaml b/roles/radarr/files/radarr-deployment.yaml new file mode 100644 index 0000000..77dbe48 --- /dev/null +++ b/roles/radarr/files/radarr-deployment.yaml @@ -0,0 +1,75 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: radarr + namespace: stack-arr +spec: + replicas: 1 + selector: + matchLabels: + app: radarr + template: + metadata: + labels: + app: radarr + spec: + imagePullSecrets: + - name: regcred + containers: + - name: radarr + image: lscr.io/linuxserver/radarr:5.28.0 + securityContext: + capabilities: + add: + - NET_ADMIN + ports: + - containerPort: 7878 + name: webui + env: + - name: PUID + value: "1013" + - name: PGID + value: "1013" + - name: TZ + value: 'Etc/UTC' + - name: RADARR__POSTGRES__HOST + value: 'stolon-proxy-service.postgresql.svc.cluster.local' + - name: RADARR__POSTGRES__USER + valueFrom: + secretKeyRef: + name: radarr-secret + key: username + - name: RADARR__POSTGRES__PASSWORD + valueFrom: + secretKeyRef: + name: radarr-secret + key: password + - name: RADARR__POSTGRES__MAINDB + valueFrom: + secretKeyRef: + name: radarr-secret + key: maindb + - name: RADARR__POSTGRES__LOGDB + valueFrom: + secretKeyRef: + name: radarr-secret + key: logsdb + volumeMounts: + - name: config + mountPath: /config + - name: downloads + mountPath: /downloads + - name: movie + mountPath: /movie + volumes: + - name: config + persistentVolumeClaim: + claimName: radarr-config-pvc + - name: downloads + persistentVolumeClaim: + claimName: qbittorrent-downloads-pvc + - name: movie + persistentVolumeClaim: + claimName: radarr-movie-pvc + + diff --git a/roles/radarr/files/radarr-nfs-csi.yaml b/roles/radarr/files/radarr-nfs-csi.yaml new file mode 100644 index 0000000..3b8007d --- /dev/null +++ b/roles/radarr/files/radarr-nfs-csi.yaml @@ -0,0 +1,23 @@ +apiVersion: storage.k8s.io/v1 +kind: StorageClass +metadata: + name: radarr-nfs-csi + namespace: stack-arr +provisioner: nfs.csi.k8s.io +parameters: + server: 192.168.1.22 + share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/radarr +allowVolumeExpansion: true +reclaimPolicy: Retain +--- +apiVersion: storage.k8s.io/v1 +kind: StorageClass +metadata: + name: radarr-movie-nfs-csi + namespace: stack-arr +provisioner: nfs.csi.k8s.io +parameters: + server: 192.168.1.22 + share: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Filmes +allowVolumeExpansion: true +reclaimPolicy: Retain \ No newline at end of file diff --git a/roles/radarr/files/radarr-pvcs.yaml b/roles/radarr/files/radarr-pvcs.yaml new file mode 100644 index 0000000..f5b7c6e --- /dev/null +++ b/roles/radarr/files/radarr-pvcs.yaml @@ -0,0 +1,60 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: radarr-config-pv + namespace: stack-arr +spec: + capacity: + storage: 2Gi + storageClassName: radarr-nfs-csi + accessModes: + - ReadWriteOnce + persistentVolumeReclaimPolicy: Retain + nfs: + server: 192.168.1.22 + path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/radarr/config +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: radarr-config-pvc + namespace: stack-arr +spec: + storageClassName: radarr-nfs-csi + accessModes: + - ReadWriteOnce + volumeName: radarr-config-pv + resources: + requests: + storage: 2Gi +--- +apiVersion: v1 +kind: PersistentVolume +metadata: + name: radarr-movie-pv + namespace: stack-arr +spec: + capacity: + storage: 50Gi + storageClassName: radarr-movie-nfs-csi + accessModes: + - ReadWriteOnce + persistentVolumeReclaimPolicy: Retain + nfs: + server: 192.168.1.22 + path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Filmes +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: radarr-movie-pvc + namespace: stack-arr +spec: + storageClassName: radarr-movie-nfs-csi + accessModes: + - ReadWriteOnce + volumeName: radarr-movie-pv + resources: + requests: + storage: 50Gi +--- \ No newline at end of file diff --git a/roles/radarr/files/radarr-secret.yaml b/roles/radarr/files/radarr-secret.yaml new file mode 100644 index 0000000..1a567fd --- /dev/null +++ b/roles/radarr/files/radarr-secret.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: Secret +metadata: + name: radarr-secret + namespace: stack-arr +type: Opaque +data: + username: dXNlcm5hbWU= + password: cGFzc3dvcmQ= + maindb: bWFpbmRiLXByb3dsYXJy + logsdb: bG9nZGItcHJvd2xhcnI= \ No newline at end of file diff --git a/roles/radarr/files/radarr-service.yaml b/roles/radarr/files/radarr-service.yaml new file mode 100644 index 0000000..5fa6953 --- /dev/null +++ b/roles/radarr/files/radarr-service.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +kind: Service +metadata: + name: radarr-service + namespace: stack-arr +spec: + ports: + - port: 7878 + targetPort: 7878 + selector: + app: radarr + type: ClusterIP \ No newline at end of file diff --git a/roles/radarr/tasks/main.yml b/roles/radarr/tasks/main.yml new file mode 100644 index 0000000..93965a0 --- /dev/null +++ b/roles/radarr/tasks/main.yml @@ -0,0 +1,51 @@ +- name: Remover o diretório /tmp/stack-arr/radarr/kubernetes-files + ansible.builtin.file: + path: /tmp/stack-arr/radarr/kubernetes-files + state: absent + +- name: Criar diretório temporário no remoto + file: + path: /tmp/stack-arr/radarr/kubernetes-files + state: directory + mode: '0755' + +- name: Copy file with owner and permissions + ansible.builtin.copy: + src: ../files + dest: /tmp/stack-arr/radarr/kubernetes-files + owner: fenix + group: root + mode: '0644' + + +- name: Obter várias notas do Bitwarden + shell: | + echo "unlock" + BW_SESSION=$(bw unlock {{ bw_password }} --raw) + echo "get item" + bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }} + loop: + - { id: "iac.ansible.stackarr.radarr.secret", dest: "/tmp/stack-arr/radarr/kubernetes-files/files/radarr-secret.yaml" } + args: + executable: /bin/bash + environment: + BW_PASSWORD: "{{ BW_PASSWORD }}" + + +- name: Listar conteúdo do diretório remoto + shell: ls -l /tmp/stack-arr/radarr/kubernetes-files/files + register: resultado_ls + + +- name: Mostrar resultado do ls + debug: + var: resultado_ls.stdout_lines + + +- name: Aplicar o stolon + become: yes + become_user: fenix + shell: | + kubectl apply -f /tmp/stack-arr/radarr/kubernetes-files/files/ + environment: + KUBECONFIG: /home/fenix/.kube/config \ No newline at end of file diff --git a/roles/radarr/vars/main.yml b/roles/radarr/vars/main.yml new file mode 100644 index 0000000..c8fe60b --- /dev/null +++ b/roles/radarr/vars/main.yml @@ -0,0 +1,4 @@ +bw_password: "{{ lookup('env', 'BW_PASSWORD') }}" +VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}" +BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}" +BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}" \ No newline at end of file