update api env vars

This commit is contained in:
Arlan Lloyd 2025-10-31 18:58:29 +00:00 committed by Zoe Roux
parent 6238c8d9a0
commit 4708186f5c
No known key found for this signature in database
4 changed files with 18 additions and 35 deletions

View File

@ -26,7 +26,7 @@ Create the name of the api service account to use
{{/* {{/*
Create kyoo api-metadata name Create kyoo api-metadata name
*/}} */}}
{{- define "kyoo.apimetadata.fullname" -}} {{- define "kyoo.apiimagedata.fullname" -}}
{{- printf "%s-%s%s" (include "kyoo.fullname" .) .Values.api.name "metadata" | trunc 63 | trimSuffix "-" -}} {{- printf "%s-%s%s" (include "kyoo.fullname" .) .Values.api.name "metadata" | trunc 63 | trimSuffix "-" -}}
{{- end -}} {{- end -}}

View File

@ -55,38 +55,27 @@ spec:
{{- toYaml . | nindent 12 }} {{- toYaml . | nindent 12 }}
{{- end }} {{- end }}
env: env:
- name: TRANSCODER_URL - name: JWT_ISSUER
value: "http://{{ include "kyoo.transcoder.fullname" . }}:7666/video"
- name: KYOO_PREFIX
value: "/api"
- name: PUBLIC_URL
value: {{ .Values.kyoo.address | quote }} value: {{ .Values.kyoo.address | quote }}
- name: REQUIRE_ACCOUNT_VERIFICATION - name: AUTH_SERVER
value: {{ .Values.kyoo.requireAccountVerification | quote }} value: "http://{{ include "kyoo.auth.fullname" . }}:4568"
- name: DEFAULT_PERMISSIONS - name: IMAGES_PATH
value: {{ .Values.kyoo.defaultPermissions | quote }} value: "/images"
- name: UNLOGGED_PERMISSIONS - name: PGUSER
value: {{ .Values.kyoo.unloggedPermissions | quote}}
- name: KYOO_APIKEYS
valueFrom:
secretKeyRef:
key: {{ .Values.kyoo.apikey.apikeyKey }}
name: {{ .Values.kyoo.apikey.existingSecret }}
- name: POSTGRES_USER
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: {{ .Values.global.postgres.kyoo_api.kyoo_api.userKey }} key: {{ .Values.global.postgres.kyoo_api.kyoo_api.userKey }}
name: {{ .Values.global.postgres.kyoo_api.kyoo_api.existingSecret }} name: {{ .Values.global.postgres.kyoo_api.kyoo_api.existingSecret }}
- name: POSTGRES_PASSWORD - name: PGPASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: {{ .Values.global.postgres.kyoo_api.kyoo_api.passwordKey }} key: {{ .Values.global.postgres.kyoo_api.kyoo_api.passwordKey }}
name: {{ .Values.global.postgres.kyoo_api.kyoo_api.existingSecret }} name: {{ .Values.global.postgres.kyoo_api.kyoo_api.existingSecret }}
- name: POSTGRES_DB - name: PGDATABASE
value: {{ .Values.global.postgres.kyoo_api.database }} value: {{ .Values.global.postgres.kyoo_api.database }}
- name: POSTGRES_SERVER - name: PGHOST
value: {{ .Values.global.postgres.kyoo_api.host | quote }} value: {{ .Values.global.postgres.kyoo_api.host | quote }}
- name: POSTGRES_PORT - name: PGPORT
value: {{ .Values.global.postgres.kyoo_api.port | quote }} value: {{ .Values.global.postgres.kyoo_api.port | quote }}
{{- range $index, $provider := .Values.kyoo.oidc_providers }} {{- range $index, $provider := .Values.kyoo.oidc_providers }}
- name: OIDC_{{ $provider.name | upper }}_NAME - name: OIDC_{{ $provider.name | upper }}_NAME
@ -139,8 +128,8 @@ spec:
{{- end }} {{- end }}
volumeMounts: volumeMounts:
{{- if .Values.api.persistence.enabled }} {{- if .Values.api.persistence.enabled }}
- name: apimetadata - name: apiimagedata
mountPath: /metadata mountPath: /images
{{- end }} {{- end }}
{{- with .Values.api.kyoo_api.volumeMounts }} {{- with .Values.api.kyoo_api.volumeMounts }}
{{- toYaml . | nindent 12 }} {{- toYaml . | nindent 12 }}
@ -154,13 +143,13 @@ spec:
volumes: volumes:
{{- if .Values.api.persistence.enabled }} {{- if .Values.api.persistence.enabled }}
{{- if .Values.api.persistence.existingClaim }} {{- if .Values.api.persistence.existingClaim }}
- name: apimetadata - name: apiimagedata
persistentVolumeClaim: persistentVolumeClaim:
claimName: {{ .Values.api.persistence.existingClaim }} claimName: {{ .Values.api.persistence.existingClaim }}
{{- else }} {{- else }}
- name: apimetadata - name: apiimagedata
persistentVolumeClaim: persistentVolumeClaim:
claimName: {{ include "kyoo.apimetadata.fullname" . }} claimName: {{ include "kyoo.apiimagedata.fullname" . }}
{{- end }} {{- end }}
{{- end }} {{- end }}
{{- with .Values.api.volumes }} {{- with .Values.api.volumes }}

View File

@ -2,7 +2,7 @@
apiVersion: v1 apiVersion: v1
kind: PersistentVolumeClaim kind: PersistentVolumeClaim
metadata: metadata:
name: {{ include "kyoo.apimetadata.fullname" . }} name: {{ include "kyoo.apiimagedata.fullname" . }}
labels: labels:
{{- include "kyoo.labels" (dict "context" . "component" .Values.api.name "name" .Values.api.name) | nindent 4 }} {{- include "kyoo.labels" (dict "context" . "component" .Values.api.name "name" .Values.api.name) | nindent 4 }}
{{- with (mergeOverwrite (deepCopy .Values.global.persistentVolumeClaimAnnotations) .Values.api.persistence.annotations) }} {{- with (mergeOverwrite (deepCopy .Values.global.persistentVolumeClaimAnnotations) .Values.api.persistence.annotations) }}

View File

@ -75,12 +75,6 @@ kyoo:
guestClaims: '{"permissions": ["users.read", "users.write", "apikeys.read", "apikeys.write", "users.delete", "core.read", "core.write", "scanner.trigger"], "verified": true}' guestClaims: '{"permissions": ["users.read", "users.write", "apikeys.read", "apikeys.write", "users.delete", "core.read", "core.write", "scanner.trigger"], "verified": true}'
protectedClaims: "permissions,verified" protectedClaims: "permissions,verified"
# If this is true, new accounts wont have any permissions before you approve them in your admin dashboard.
requireAccountVerification: true
# Specify permissions of new accounts.
defaultPermissions: "overall.read,overall.play"
# Specify permissions of guest accounts, default is no permissions.
unloggedPermissions: ""
# A pattern (regex) to ignore video files. # A pattern (regex) to ignore video files.
libraryIgnorePattern: ".*/[dD]ownloads?/.*" libraryIgnorePattern: ".*/[dD]ownloads?/.*"
languages: "en" languages: "en"
@ -180,7 +174,7 @@ api:
extraContainers: [] extraContainers: []
extraInitContainers: [] extraInitContainers: []
extraVolumes: [] extraVolumes: []
# apimetadata # api image data
# user profile pictures # user profile pictures
persistence: persistence:
enabled: true enabled: true