feat(home): upgrade frigate helmrelease and kustomization

kubernetes/main/apps/home/frigate/app/helmrelease.yaml

@@ -1,16 +1,15 @@
 ---
-# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helm.toolkit.fluxcd.io/helmrelease_v2beta1.json
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helm.toolkit.fluxcd.io/helmrelease_v2beta2.json
 apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: frigate
-  namespace: home
 spec:
   interval: 30m
   chart:
     spec:
       chart: app-template
-      version: 2.2.0
+      version: 2.4.0
       sourceRef:
         kind: HelmRepository
         name: bjw-s
@@ -28,14 +27,15 @@ spec:
   dependsOn:
     - name: intel-device-plugin-gpu
       namespace: kube-system
+    - name: emqx
+      namespace: home
     - name: rook-ceph-cluster
       namespace: rook-ceph
     - name: volsync
       namespace: volsync
   values:
     controllers:
       main:
-        type: statefulset
         annotations:
           reloader.stakater.com/auto: "true"
         containers:
@@ -68,12 +68,12 @@ spec:
               privileged: true
             resources:
               requests:
+                gpu.intel.com/i915: "1"
                 cpu: 1000m
                 memory: 2Gi
-                gpu.intel.com/i915: 1
               limits:
-                memory: 10Gi
-                gpu.intel.com/i915: 1
+                gpu.intel.com/i915: "1"
+                memory: 8Gi
         pod:
           affinity:
             podAntiAffinity:
@@ -87,17 +87,7 @@ spec:
           nodeSelector:
             google.feature.node.kubernetes.io/coral: "true"
             intel.feature.node.kubernetes.io/gpu: "true"
-        statefulset:
-          volumeClaimTemplates:
-            - name: config
-              accessMode: ReadWriteOnce
-              size: 5Gi
-              storageClass: ceph-block
-              globalMounts:
-                - path: /data
     service:
-      type: LoadBalancer
-      externalTrafficPolicy: Local
       main:
         ports:
           http:
@@ -109,10 +99,12 @@ spec:
         enabled: true
         annotations:
           external-dns.alpha.kubernetes.io/target: ingress.donoso.family
+          nginx.ingress.kubernetes.io/auth-url: https://auth.donoso.family/oauth2/auth
+          nginx.ingress.kubernetes.io/auth-signin: https://auth.donoso.family/oauth2/start
           hajimari.io/icon: mdi:cctv
-        className: nginx
+        className: external
         hosts:
-          - host: &host "frigate.donoso.family"
+          - host: &host "{{ .Release.Name }}.donoso.family"
             paths:
               - path: /
                 service:
@@ -122,6 +114,11 @@ spec:
           - hosts:
               - *host
     persistence:
+      config:
+        enabled: true
+        existingClaim: config-frigate-0
+        globalMounts:
+          - path: /data
       config-file:
         type: configMap
         name: frigate-configmap
@@ -133,7 +130,7 @@ spec:
         enabled: true
         type: emptyDir
         medium: Memory
-        sizeLimit: 2Gi
+        sizeLimit: 4Gi
         globalMounts:
           - path: /dev/shm
       usb:

kubernetes/main/apps/home/frigate/app/kustomization.yaml

@@ -3,14 +3,13 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: home
 resources:
-  - ./data-pvc-0.yaml
   - ./externalsecret.yaml
   - ./helmrelease.yaml
   - ./volsync.yaml
 configMapGenerator:
   - name: frigate-configmap
     files:
-      - config.yml=./config/config.yml
+      - config.yml=./resources/config.yml
 generatorOptions:
   disableNameSuffixHash: true
   annotations:

kubernetes/main/apps/home/frigate/ks.yaml

@@ -0,0 +1,28 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app frigate
+  namespace: flux-system
+spec:
+  targetNamespace: home
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  dependsOn:
+    - name: external-secrets-stores
+    - name: node-feature-discovery-rules
+  path: ./kubernetes/main/apps/home/frigate/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  wait: false
+  interval: 30m
+  retryInterval: 1m
+  timeout: 5m
+  postBuild:
+    substitute:
+      APP: *app
+      VOLSYNC_CAPACITY: 5Gi

kubernetes/main/apps/home/kustomization.yaml

@@ -8,7 +8,7 @@ resources:
   # Flux-Kustomizations
   - ./emqx
   - ./esphome
-  - ./frigate
+  - ./frigate/ks.yaml
   - ./home-assistant
   - ./postgresql
   - ./scrypted