bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(pegasus): apply image updates

Browse Source
This commit is contained in:
flux-bot 2026-01-21 13:33:42 +00:00
parent ba12854639
commit 5c1fa5f714
1 changed files with 16 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
services/pegasus/deployment.yaml
View File

@ -11,9 +11,9 @@ spec:
rollingUpdate: rollingUpdate:
maxSurge: 0 maxSurge: 0
maxUnavailable: 1 maxUnavailable: 1
selector: { matchLabels: { app: pegasus } } selector: {matchLabels: {app: pegasus}}
template: template:
metadata: { labels: { app: pegasus } } metadata: {labels: {app: pegasus}}
spec: spec:
nodeSelector: nodeSelector:
kubernetes.io/arch: amd64 kubernetes.io/arch: amd64
@ -52,48 +52,47 @@ spec:
runAsNonRoot: false runAsNonRoot: false
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
volumeMounts: volumeMounts:
- { name: media, mountPath: /media } - {name: media, mountPath: /media}
containers: containers:
- name: pegasus - name: pegasus
image: registry.bstein.dev/streaming/pegasus:1.2.32 # {"$imagepolicy": "jellyfin:pegasus"} image: registry.bstein.dev/streaming/pegasus-vault:1.2.32 # {"$imagepolicy": "jellyfin:pegasus"}
imagePullPolicy: Always imagePullPolicy: Always
command: ["/pegasus"] command: ["/pegasus"]
env: env:
- name: PEGASUS_MEDIA_ROOT - name: PEGASUS_MEDIA_ROOT
valueFrom: { configMapKeyRef: { name: pegasus-config, key: PEGASUS_MEDIA_ROOT } } valueFrom: {configMapKeyRef: {name: pegasus-config, key: PEGASUS_MEDIA_ROOT}}
- name: PEGASUS_BIND - name: PEGASUS_BIND
valueFrom: { configMapKeyRef: { name: pegasus-config, key: PEGASUS_BIND } } valueFrom: {configMapKeyRef: {name: pegasus-config, key: PEGASUS_BIND}}
- name: PEGASUS_USER_MAP_FILE - name: PEGASUS_USER_MAP_FILE
value: "/config/user-map.yaml" value: "/config/user-map.yaml"
- name: PEGASUS_SESSION_KEY - name: PEGASUS_SESSION_KEY
valueFrom: { secretKeyRef: { name: pegasus-secrets, key: PEGASUS_SESSION_KEY } } valueFrom: {secretKeyRef: {name: pegasus-secrets, key: PEGASUS_SESSION_KEY}}
- name: JELLYFIN_URL - name: JELLYFIN_URL
valueFrom: { secretKeyRef: { name: pegasus-secrets, key: JELLYFIN_URL } } valueFrom: {secretKeyRef: {name: pegasus-secrets, key: JELLYFIN_URL}}
- name: JELLYFIN_API_KEY - name: JELLYFIN_API_KEY
valueFrom: { secretKeyRef: { name: pegasus-secrets, key: JELLYFIN_API_KEY } } valueFrom: {secretKeyRef: {name: pegasus-secrets, key: JELLYFIN_API_KEY}}
- name: PEGASUS_DEBUG - name: PEGASUS_DEBUG
value: "1" value: "1"
- name: PEGASUS_DRY_RUN - name: PEGASUS_DRY_RUN
value: "0" value: "0"
ports: [{ name: http, containerPort: 8080 }] ports: [{name: http, containerPort: 8080}]
readinessProbe: readinessProbe:
httpGet: { path: /healthz, port: http } httpGet: {path: /healthz, port: http}
initialDelaySeconds: 2 initialDelaySeconds: 2
periodSeconds: 5 periodSeconds: 5
timeoutSeconds: 1 timeoutSeconds: 1
livenessProbe: livenessProbe:
httpGet: { path: /healthz, port: http } httpGet: {path: /healthz, port: http}
initialDelaySeconds: 10 initialDelaySeconds: 10
periodSeconds: 10 periodSeconds: 10
timeoutSeconds: 2 timeoutSeconds: 2
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
capabilities: { drop: ["ALL"] } capabilities: {drop: ["ALL"]}
resources: resources:
requests: { cpu: 100m, memory: 256Mi } requests: {cpu: 100m, memory: 256Mi}
limits: { cpu: 1000m, memory: 1Gi } limits: {cpu: 1000m, memory: 1Gi}
volumeMounts: volumeMounts:
- name: media - name: media
mountPath: /media mountPath: /media
@ -107,6 +106,6 @@ spec:
persistentVolumeClaim: persistentVolumeClaim:
claimName: jellyfin-media-asteria-new claimName: jellyfin-media-asteria-new
- name: config - name: config
configMap: { name: pegasus-user-map } configMap: {name: pegasus-user-map}
- name: tmp - name: tmp
emptyDir: {} emptyDir: {}