add(jackett)

charts/jackett/.helmignore

@@ -0,0 +1,30 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+
+# helm-docs templates
+*.gotmpl
+
+# helm unit tests
+tests/

charts/jackett/Chart.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: v2
+description: root-less jackett chart - The API Support for your favorite torrent trackers
+name: jackett
+version: 1.0.0
+kubeVersion: ">=1.22.0-0"
+maintainers:
+  - name: nold
+    email: [email protected]
+dependencies:
+  - name: common
+    repository: https://bjw-s.github.io/helm-charts
+    version: 1.2.0

charts/jackett/README.md

@@ -0,0 +1,5 @@
+# Jackett
+
+Helm Chart for rootless jackett. See `values.yaml` for exampe values.
+
+Based on: [bjw-s common chart](https://github.com/bjw-s/helm-charts/tree/main/charts/library/common)

charts/jackett/templates/common.yaml

@@ -0,0 +1,9 @@
+---
+{{- include "bjw-s.common.loader.init" . }}
+
+{{- define "app.hardcodedValues" -}}
+{{- end -}}
+{{- $_ := mergeOverwrite .Values (include "app.hardcodedValues" . | fromYaml) -}}
+
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

charts/jackett/values.yaml

@@ -0,0 +1,55 @@
+---
+image:
+  repository: lib42/jackett
+  tag: "latest"
+  pullPolicy: Always
+
+env:
+  - name: TZ
+    value: UTC
+
+ingress:
+  main:
+    enabled: false
+    #annotations:
+    #  cert-manager.io/cluster-issuer: "vault-issuer"
+    #  traefik.ingress.kubernetes.io/router.tls: 'true'
+    #  nginx.ingress.kubernetes.io/proxy-body-size: 50m
+    #hosts:
+    #  - host: jacket.local
+    #    paths:
+    #      - path: /
+    #        pathType: Prefix
+    #tls:
+    #  - secretName: jacket-tls
+    #    hosts:
+    #       - jacket.local
+
+service:
+  main:
+    enabled: true
+    ports:
+      http:
+        port: 9117
+
+persistence:
+  config:
+    enabled: true
+    mountPath: /config
+    size: 100M
+
+podSecurityContext:
+  runAsUser: 1420
+  runAsGroup: 1420
+  fsGroup: 1420
+  fsGroupChangePolicy: "OnRootMismatch"
+
+securityContext:
+  runAsNonRoot: true
+  privileged: false
+  # FIXME: Jackett crashes if rootfs is read only
+  readOnlyRootFilesystem: false
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+    - ALL