Update Helm release plane-ce to v1.4.0

Reviewed-on: #3

deploy/deluge/deluge-deploy.yaml

@@ -13,9 +13,16 @@ spec:
       labels:
         app: deluge
     spec:
+      securityContext:
+        runAsUser: 0
       containers:
         - name: deluge
-          image: lscr.io/linuxserver/deluge:latest
+          image: bottledpills/deluge-openvpn:v1.7
+          securityContext:
+            privileged: true  # Often required for TUN/TAP devices
+            capabilities:
+              add:
+                - NET_ADMIN
           ports:
             - containerPort: 8112
               protocol: TCP
@@ -26,19 +33,31 @@ spec:
             - containerPort: 58846
               protocol: TCP
           env:
-            - name: PUID
-              value: "1000"
-            - name: PGID
-              value: "1000"
             - name: TZ
               value: Etc/UTC
             - name: DELUGE_LOGLEVEL
               value: "error"
+            - name: OPENVPN_PROVIDER
+              value: "nordvpn"
+            - name: OPENVPN_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: nordvpn-credentials
+                  key: username
+            - name: OPENVPN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: nordvpn-credentials
+                  key: password
+            - name: LOCAL_NETWORK
+              value: "10.10.10.0/24,10.244.0.0/24"
           volumeMounts:
             - name: config
               mountPath: /config
             - name: downloads
-              mountPath: /downloads
+              mountPath: /download
+            - name: dev-net-tun
+              mountPath: /dev/net/tun
       volumes:
         - name: config
           persistentVolumeClaim:
@@ -46,3 +65,7 @@ spec:
         - name: downloads
           persistentVolumeClaim:
             claimName: deluge-downloads
+        - name: dev-net-tun
+          hostPath:
+            path: /dev/net/tun
+            type: CharDevice

deploy/drone/drone-rbac.yaml

@@ -0,0 +1,26 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  namespace: drone
+  name: drone
+rules:
+- apiGroups: [""]
+  resources: ["secrets"]
+  verbs: ["create", "delete"]
+- apiGroups: [""]
+  resources: ["pods", "pods/log"]
+  verbs: ["get", "create", "delete", "list", "watch", "update"]
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: drone
+  namespace: drone
+subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: drone
+roleRef:
+  kind: Role
+  name: drone
+  apiGroup: rbac.authorization.k8s.io

deploy/drone/drone-runner-amd64.yaml

@@ -0,0 +1,36 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: drone-runner-amd64
+  namespace: drone
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: drone-runner-amd64
+  template:
+    metadata:
+      labels:
+        app: drone-runner-amd64
+    spec:
+      nodeSelector:
+        kubernetes.io/arch: "amd64"
+      containers:
+        - name: drone-runner-amd64
+          image: drone/drone-runner-kube:latest
+          imagePullPolicy: Always
+          env:
+            - name: DRONE_RPC_HOST
+              value: "drone.beatrice.wtf"
+            - name: DRONE_RPC_PROTO
+              value: "https"
+            - name: DRONE_RPC_SECRET
+              value: "26a2221fd8090ea38720fc445eca6a45a39a63fcce3ba30712e7153b855f8"
+            - name: DRONE_RUNNER_CAPACITY
+              value: "3"
+            - name: DRONE_DEBUG
+              value: "true"
+            - name: DRONE_NAMESPACE_DEFAULT
+              value: "drone"
+            - name: DRONE_NODE_SELECTOR_DEFAULT
+              value: "kubernetes.io/arch:amd64"

deploy/drone/drone-runner-arm64.yaml

@@ -0,0 +1,36 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: drone-runner-arm64
+  namespace: drone
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: drone-runner-arm64
+  template:
+    metadata:
+      labels:
+        app: drone-runner-arm64
+    spec:
+      nodeSelector:
+        kubernetes.io/arch: "arm64"
+      containers:
+        - name: drone-runner-arm64
+          image: drone/drone-runner-kube:latest
+          imagePullPolicy: Always
+          env:
+            - name: DRONE_RPC_HOST
+              value: "drone.beatrice.wtf"
+            - name: DRONE_RPC_PROTO
+              value: "https"
+            - name: DRONE_RPC_SECRET
+              value: "26a2221fd8090ea38720fc445eca6a45a39a63fcce3ba30712e7153b855f8"
+            - name: DRONE_RUNNER_CAPACITY
+              value: "3"
+            - name: DRONE_DEBUG
+              value: "true"
+            - name: DRONE_NAMESPACE_DEFAULT
+              value: "drone"
+            - name: DRONE_NODE_SELECTOR_DEFAULT
+              value: "kubernetes.io/arch:arm64"

deploy/drone/drone-runner.yaml

@@ -1,46 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: drone-runner
-  namespace: drone
-spec:
-  replicas: 3
-  selector:
-    matchLabels:
-      name: drone-runner
-  template:
-    metadata:
-      labels:
-        name: drone-runner
-    spec:
-      containers:
-        - name: drone-runner
-          image: drone/drone-runner-kube:latest
-          imagePullPolicy: Always
-          ports:
-          - containerPort: 3000
-          env:
-            - name: "DRONE_RPC_HOST"
-              value: "drone.beatrice.wtf"
-            - name: "DRONE_RPC_PROTO"
-              value: "https"
-            - name: "DRONE_RPC_SECRET"
-              value: "26a2221fd8090ea38720fc445eca6a45a39a63fcce3ba30712e7153b855f8"
-            - name: "DRONE_RUNNER_CAPACITY"
-              value: "3"
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: drone-runner
-  namespace: drone
-  labels:
-    name: drone-runner
-spec:
-  type: ClusterIP
-  ports:
-    - protocol: TCP
-      port: 3000
-      targetPort: 3000
-  selector:
-    name: drone-runner

deploy/drone/drone-server.yaml

@@ -38,6 +38,10 @@ spec:
               value: ":80"
             - name: "DRONE_SERVER_BUILD_LIMIT"
               value: "9"
+            - name: "DRONE_ALLOW_PRIVILEGED"
+              value: "true"
+            - name: "DRONE_LOGS_DEBUG"
+              value: "true"
           volumeMounts:
             - mountPath: /var/lib/drone
               name: drone-lib

deploy/drone/kustomization.yaml

@@ -1,5 +1,7 @@
 resources:
+  - drone-rbac.yaml
   - drone-server.yaml
-  - drone-runner.yaml
+  - drone-runner-arm64.yaml
+  - drone-runner-amd64.yaml
   - drone-ingress.yaml
   - drone-pvc.yaml

deploy/plane-ce/kustomization.yaml

@@ -3,7 +3,7 @@ namespace: plane-ce
 helmCharts:
   - name: plane-ce
     repo: https://helm.plane.so/
-    version: 1.0.30
+    version: 1.4.0
     releaseName: plane-app
     valuesInline:
       planeVersion: stable

renovate.json

@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}