variable "tls_secret_name" {} variable "tier" { type = string } variable "nfs_server" { type = string } resource "kubernetes_namespace" "readarr" { metadata { name = "readarr" # labels = { # "istio-injection" : "enabled" # } } } module "tls_secret" { source = "../../../modules/kubernetes/setup_tls_secret" namespace = "readarr" tls_secret_name = var.tls_secret_name } module "nfs_data" { source = "../../../modules/kubernetes/nfs_volume" name = "readarr-data" namespace = "readarr" nfs_server = var.nfs_server nfs_path = "/mnt/main/servarr/readarr" } module "nfs_qbittorrent" { source = "../../../modules/kubernetes/nfs_volume" name = "readarr-qbittorrent" namespace = "readarr" nfs_server = var.nfs_server nfs_path = "/mnt/main/servarr/qbittorrent" } resource "kubernetes_deployment" "readarr" { metadata { name = "readarr" namespace = "readarr" labels = { app = "readarr" tier = var.tier } annotations = { "reloader.stakater.com/search" = "true" } } spec { replicas = 1 selector { match_labels = { app = "readarr" } } template { metadata { labels = { app = "readarr" } } spec { container { image = "lscr.io/linuxserver/readarr:develop" name = "readarr" port { container_port = 8787 } env { name = "PUID" value = 1000 } env { name = "PGID" value = 1000 } env { name = "TZ" value = "Etc/UTC" } volume_mount { name = "data" mount_path = "/config" } volume_mount { name = "data" mount_path = "/books" } volume_mount { name = "data" mount_path = "/downloads" } volume_mount { name = "qbittorrent" mount_path = "/mnt" read_only = true } } volume { name = "data" persistent_volume_claim { claim_name = module.nfs_data.claim_name } } volume { name = "qbittorrent" persistent_volume_claim { claim_name = module.nfs_qbittorrent.claim_name } } } } } } resource "kubernetes_service" "readarr" { metadata { name = "readarr" namespace = "readarr" labels = { app = "readarr" } } spec { selector = { app = "readarr" } port { name = "http" port = 8787 } } } module "ingress" { source = "../../../modules/kubernetes/ingress_factory" namespace = "readarr" name = "readarr" port = 8787 tls_secret_name = var.tls_secret_name protected = true }