0da9e4c82d
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/, repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/) - Retire oneoffs/ directories across services - Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding - Reorganize scripts/ into ops/, render/, sync/, manual-tests/ - Add Makefile with render/validate/test/flux targets and repo-structure tests - Update flux-system application CRs to the new paths - Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror) - Refresh knowledge catalogs, dashboards, vmalert rules, quality contract Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
27 lines
819 B
YAML
27 lines
819 B
YAML
# services/pegasus/kustomization.yaml
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: jellyfin
|
|
resources:
|
|
- configmap.yaml
|
|
- image.yaml
|
|
- vault-serviceaccount.yaml
|
|
- secretproviderclass.yaml
|
|
- service.yaml
|
|
- deployment.yaml
|
|
- vault-sync-deployment.yaml
|
|
- ingress.yaml
|
|
patches:
|
|
- target: { kind: Deployment, name: pegasus, namespace: jellyfin }
|
|
patch: |
|
|
- op: add
|
|
path: /spec/template/spec/containers/-
|
|
value:
|
|
name: shell
|
|
image: alpine:3.20
|
|
command: ["sh","-c","sleep infinity"]
|
|
securityContext: { runAsUser: 10001, runAsGroup: 10001, allowPrivilegeEscalation: false }
|
|
volumeMounts:
|
|
- { name: media, mountPath: /media }
|
|
- { name: config, mountPath: /config, readOnly: true }
|