170 Commits

This Branch

This Branch

All Branches

• feat(values): add networkPolicy configuration section

  Add networkPolicy section to values.yaml with comprehensive configuration options:
  - enabled: boolean flag to enable/disable NetworkPolicy (default: false)
  - policyTypes: configure Ingress and/or Egress policies
  - ingress: control which pods/namespaces can access Jellyfin
    - allowExternal: permit access from any namespace (default: true)
    - podSelector/namespaceSelector: restrict access to specific pods/namespaces
    - customRules: advanced ingress rules for complex scenarios
  - egress: control outbound connections from Jellyfin
    - allowDNS: permit DNS resolution (default: true, required)
    - allowAllEgress: permit all internet access (default: true)
    - restrictedEgress: high-security mode with HTTPS-only metadata access
    - customRules: advanced egress rules
  - metrics: automatic Prometheus integration configuration
  
  All parameters include detailed documentation explaining:
  - Purpose and usage
  - Default values and recommended settings
  - Examples for common scenarios
  - Security implications
  
  The configuration supports use cases from simple deployments to
  zero-trust environments while maintaining sensible defaults.
  
  Co-Authored-By: Claude <noreply@anthropic.com>
  Signed-off-by: Aleksei Sviridkin <f@lex.la>

  Aleksei SviridkinandClaude 2025-11-07 19:27:55 +03:00
  d2051f1dfe
• feat(templates): add NetworkPolicy template with ingress/egress rules

  Add comprehensive NetworkPolicy support for Jellyfin pod with:
  - Ingress rules: configurable external access or namespace/pod selectors
  - Egress rules: DNS resolution, metadata providers, custom rules
  - Automatic Prometheus integration when metrics are enabled
  - DLNA/hostNetwork detection with fail-safe error message
  - Support for restrictedEgress mode for high-security environments
  
  The NetworkPolicy is disabled by default to maintain backward compatibility.
  When enabled, it provides fine-grained control over network traffic:
  - Who can access Jellyfin (ingress)
  - What external connections Jellyfin can make (egress)
  
  NetworkPolicy requires CNI plugin support (Calico, Cilium, etc.) and
  cannot be used with hostNetwork mode (DLNA). The template includes
  validation to prevent misconfiguration.
  
  Co-Authored-By: Claude <noreply@anthropic.com>
  Signed-off-by: Aleksei Sviridkin <f@lex.la>

  Aleksei SviridkinandClaude 2025-11-07 19:27:38 +03:00
  24fa95525a
• feat(deployment): add envFrom support for ConfigMap/Secret environment variables

  Add support for loading environment variables from ConfigMap or Secret
  resources using envFrom field, following Kubernetes best practices for
  configuration management.
  
  Changes:
  - Add jellyfin.envFrom parameter in values.yaml
  - Add envFrom section in deployment.yaml template (before env)
  - Provide comprehensive documentation with examples
  - Bump chart version 2.5.0 -> 2.6.0 (minor - new feature)
  - Add changelog annotation for Artifact Hub
  
  Use cases:
  - Load multiple environment variables from ConfigMap without defining each one
  - Load secrets from external secret management systems
  - Separate configuration from chart values (12-factor app pattern)
  - Simplify configuration for complex deployments
  
  Example usage:
    jellyfin:
      envFrom:
        - configMapRef:
            name: jellyfin-config
        - secretRef:
            name: jellyfin-secrets
  
  Follows standard Kubernetes patterns used by most community Helm charts.
  
  Co-Authored-By: Claude <noreply@anthropic.com>
  Signed-off-by: Aleksei Sviridkin <f@lex.la>

  Aleksei SviridkinandClaude 2025-11-06 13:34:40 +03:00
  d20aac5794
• fix(templates)!: deprecate initContainers in favor of extraInitContainers

  BREAKING CHANGE: The 'initContainers' parameter is now deprecated in favor
  of 'extraInitContainers' for naming consistency with 'extraContainers'.
  Both parameters will work until 2030 for backward compatibility.
  
  The previous implementation used '.Values.initContainers' in the template
  but 'extraInitContainers' was defined in values.yaml, causing the feature
  to be completely non-functional.
  
  Changes:
  - Fix extraInitContainers not working (was referencing wrong parameter)
  - Add deprecated 'initContainers' parameter to values.yaml with @deprecated tag
  - Update deployment.yaml to support both parameters with OR logic
  - Add TODO comment to remove initContainers support after 2030
  - Create NOTES.txt with:
    - Deprecation warning when using initContainers
    - Post-installation instructions for accessing Jellyfin
    - Persistence status information
    - Links to documentation
  - Improve extraInitContainers documentation with usage example
  - Bump chart version 2.5.0 -> 3.0.0 (major due to deprecation)
  - Add comprehensive changelog to artifacthub.io/changes
  
  Migration guide:
    Old: initContainers: [...]
    New: extraInitContainers: [...]
  
  The old parameter will continue to work but users will see a deprecation
  warning in NOTES.txt after installation.
  
  Follows best practices from community charts (Prometheus, Elastic, etc.)
  where 'extra*' prefix indicates user-provided extension points.
  
  Co-Authored-By: Claude <noreply@anthropic.com>
  Signed-off-by: Aleksei Sviridkin <f@lex.la>

  Aleksei SviridkinandClaude 2025-11-06 00:51:45 +03:00
  90861109aa
• feat(probes): add startup probe for handling slow initial startup

  Add startupProbe to give Jellyfin sufficient time to start, especially
  with large media libraries or slow storage. This prevents Kubernetes
  from killing the pod during initial startup phase.
  
  Changes:
  - Add startupProbe configuration in values.yaml with sensible defaults
    - failureThreshold: 30 (allows up to 5 minutes for startup)
    - periodSeconds: 10
    - Uses tcpSocket check on http port
  - Update deployment.yaml to include startupProbe from values
  - Bump chart version 2.5.0 -> 2.5.1
  - Add changelog annotation for Artifact Hub
  
  Benefits:
  - Prevents pod restarts during slow initial startup (large media libraries)
  - Liveness and readiness probes remain responsive after successful startup
  - Fully configurable and can be disabled by setting startupProbe: null
  - No breaking changes, backward compatible
  
  The startup probe gives Jellyfin up to 5 minutes (30 attempts * 10 seconds)
  to complete initialization. After the first success, liveness and readiness
  probes take over with their normal timing.
  
  Co-Authored-By: Claude <noreply@anthropic.com>
  Signed-off-by: Aleksei Sviridkin <f@lex.la>

  Aleksei SviridkinandClaude 2025-11-06 00:04:39 +03:00
  df3e66c5f9
• docs(troubleshooting): add inotify limits documentation and workaround

  Add comprehensive troubleshooting documentation for inotify instance limit
  errors that cause Jellyfin crashes in environments with many containers.
  
  Changes:
  - Add Troubleshooting section to README with inotify limits explanation
  - Document proper solution: increase kernel limits via sysctl
  - Provide workaround for managed clusters: DOTNET_USE_POLLING_FILE_WATCHER
  - Add commented example in values.yaml for easy copy-paste
  - Update Chart version from 2.5.0 to 2.5.1
  - Add Artifact Hub changelog annotation
  
  The proper solution is to increase inotify limits on Kubernetes nodes:
  ```bash
  sysctl -w fs.inotify.max_user_instances=512
  ```
  
  For managed Kubernetes where node access is restricted, users can use the
  polling workaround (less efficient but functional):
  ```yaml
  jellyfin:
    env:
      - name: DOTNET_USE_POLLING_FILE_WATCHER
        value: "1"
  ```
  
  This addresses the crash issue mentioned in #64.
  
  Fixes: #64
  
  Co-Authored-By: Claude <noreply@anthropic.com>
  Signed-off-by: Aleksei Sviridkin <f@lex.la>

  Aleksei SviridkinandClaude 2025-11-05 23:32:38 +03:00
  4a45dc998a
• feat(persistence): add cache volume persistence support

  Add dedicated cache volume configuration to reduce wear on SD cards and improve
  performance by allowing cache to be stored on separate storage.
  
  Changes:
  - Add persistence.cache configuration in values.yaml with support for:
    - PVC (default type when enabled)
    - hostPath for direct host mount
    - emptyDir (default when disabled)
  - Add cache volume mount at /cache in deployment
  - Add cache PersistentVolumeClaim template
  - Support for existing PVC via existingClaim
  - Configurable size (default 10Gi), accessMode, storageClass, and annotations
  - Update Chart version from 2.5.0 to 2.5.1
  - Add Artifact Hub changelog annotation
  
  The cache volume is disabled by default to maintain backward compatibility.
  Users can enable it via:
  
  ```yaml
  persistence:
    cache:
      enabled: true
      type: pvc
      size: 10Gi
  ```
  
  This addresses the use case mentioned in #62 where users want to avoid SD card
  wear by storing cache on separate persistent storage.
  
  Fixes: #62
  
  Co-Authored-By: Claude <noreply@anthropic.com>
  Signed-off-by: Aleksei Sviridkin <f@lex.la>

  Aleksei SviridkinandClaude 2025-11-05 23:26:58 +03:00
  35f39bf92c
• fix(ipv6): use httpGet probes by default for IPv4 and IPv6 compatibility

  Change default health probes from tcpSocket to httpGet to fix issue #68
  where pods fail to start in IPv6-only clusters due to incompatible health checks.
  
  Changes:
  - Change default livenessProbe and readinessProbe to use httpGet with /health endpoint
  - Add comprehensive IPv6 and dual-stack configuration documentation
  - Document ipFamilyPolicy options (SingleStack, PreferDualStack, RequireDualStack)
  - Document ipFamilies configuration for IPv4-only, IPv6-only, and dual-stack setups
  - Add IPv6 Configuration section to README with examples
  - Update Chart version from 2.5.0 to 2.5.1
  
  The httpGet probe works with both IPv4 and IPv6 out of the box, while tcpSocket
  may fail in IPv6-only environments. Jellyfin's /health endpoint is specifically
  designed for health checks and verifies both HTTP and database connectivity.
  
  Fixes: #68
  
  Co-Authored-By: Claude <noreply@anthropic.com>
  Signed-off-by: Aleksei Sviridkin <f@lex.la>

  Aleksei SviridkinandClaude 2025-11-05 22:56:01 +03:00
  250a126357
• feat(gateway-api): add HTTPRoute support

  Add support for Kubernetes Gateway API HTTPRoute resource as a modern
  alternative to Ingress. The implementation follows the same pattern as
  the existing Ingress template.
  
  Changes:
  - Add HTTPRoute template with configurable parentRefs, hostnames, and rules
  - Add httpRoute section to values.yaml with generic examples
  - Update Chart version from 2.5.0 to 2.6.0
  - Add Artifact Hub changelog annotation
  - Add HTTPRoute documentation to README
  
  Co-Authored-By: Claude <noreply@anthropic.com>
  Signed-off-by: Aleksei Sviridkin <f@lex.la>

  Aleksei SviridkinandClaude 2025-11-05 22:36:09 +03:00
  f1ae87fba9
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-11-03 03:47:15 +00:00
  2401a45bb1
• chore(jellyfin): Bump chart version to 2.5.0 and set appVersion to 10.11.2
  github-actions[bot] 2025-11-03 03:47:07 +00:00
  jellyfin-2.5.0 2.5.0 2c1f2a526c
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-11-03 03:46:43 +00:00
  464c663c92
• feat: allow to enable or disable some pod privileges (#82)
  Benoît Sauvère 2025-11-02 20:46:36 -07:00
  39cb96db5d
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-11-03 03:46:27 +00:00
  969f7b8885
• Update jellyfin/jellyfin Docker tag to v10.11.2 (#85)
  renovate[bot] 2025-11-02 20:46:19 -07:00
  8a0fcbda21
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-10-27 07:04:09 +00:00
  9fbd74d9b7
• Merge pull request #84 from jellyfin/renovate/jellyfin-jellyfin-10.x

  Update jellyfin/jellyfin Docker tag to v10.11.1

  Tim Eisele 2025-10-27 08:03:56 +01:00
  99c4fcdbd8
• Update jellyfin/jellyfin Docker tag to v10.11.1
  renovate[bot] 2025-10-27 03:30:07 +00:00
  2e5386532e
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-10-20 03:31:47 +00:00
  5464aa942e
• chore(jellyfin): Bump chart version to 2.4.0 and set appVersion to 10.11.0
  github-actions[bot] 2025-10-20 03:31:37 +00:00
  jellyfin-2.4.0 2.4.0 aff38deb68
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-10-20 03:29:56 +00:00
  03f319d762
• Update jellyfin/jellyfin Docker tag to v10.11.0 (#80)

  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

  renovate[bot] 2025-10-19 21:29:47 -06:00
  e61721a0c4
• Update actions/checkout action to v5 (#74)

  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

  renovate[bot] 2025-10-19 21:29:20 -06:00
  1f5468dc7d
• Update azure/setup-helm digest to 1a275c3 (#75)

  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

  renovate[bot] 2025-10-19 21:29:13 -06:00
  9580f942b2
• Update losisin/helm-docs-github-action action to v1.6.2 (#69)

  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

  renovate[bot] 2025-10-19 21:29:06 -06:00
  05f1cf699a
• Update actions/setup-python action to v6 (#76)

  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

  renovate[bot] 2025-10-19 21:28:58 -06:00
  b6dbc59a95
• Update actions/checkout digest to 08eba0b (#73)

  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

  renovate[bot] 2025-10-19 21:28:45 -06:00
  7ccd642596
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-10-20 03:28:39 +00:00
  2626f04146
• Add dnsConfig and dnsPolicy options (#72)
  Flozza 2025-10-19 21:28:30 -06:00
  29400a65d5
• Correct directory name in README (#78)
  Alexander Cleasby 2025-10-19 21:28:14 -06:00
  61b69b9f29
• Merge pull request #65 from FML128/master

  Fix for fresh start with metrix and hostPath option for media

  Tim Eisele 2025-05-01 16:06:28 +02:00
  1b01cffb2d
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-05-01 14:06:13 +00:00
  b6ef73e01b
• Merge pull request #61 from jellyfin/renovate/actions-setup-python-digest

  Update actions/setup-python digest to a26af69

  Tim Eisele 2025-05-01 16:06:05 +02:00
  c32d8ce6ce
• Merge pull request #63 from jellyfin/renovate/jellyfin-jellyfin-10.x

  Update jellyfin/jellyfin Docker tag to v10.10.7

  Tim Eisele 2025-05-01 16:05:56 +02:00
  c1b278e6b0
• Merge pull request #66 from jellyfin/renovate/ci-deps

  Update losisin/helm-docs-github-action action to v1.5.1

  Tim Eisele 2025-05-01 16:05:46 +02:00
  36cb066a49
• Update losisin/helm-docs-github-action action to v1.5.1
  renovate[bot] 2025-04-29 12:28:22 +00:00
  5ba4c5d8bc
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-04-27 22:10:07 +00:00
  2d884535f4
• Fixed README to be consistant with Values
  Merlin Jehli 2025-04-28 00:09:47 +02:00
  d056210a1e
• Added option for media mount to be a hostpath
  Merlin Jehli 2025-04-28 00:09:20 +02:00
  e92576240c
• Fixed init with metrics on
  Merlin Jehli 2025-04-28 00:08:38 +02:00
  54ccfcb5b3
• Update actions/setup-python digest to a26af69
  renovate[bot] 2025-04-24 04:21:41 +00:00
  f6a3da0cbd
• Update jellyfin/jellyfin Docker tag to v10.10.7
  renovate[bot] 2025-04-05 20:48:32 +00:00
  f82d00dcfa
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-03-23 14:31:20 +00:00
  0fcf1d2206
• Update losisin/helm-docs-github-action action to v1.5.0 (#57)

  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

  renovate[bot] 2025-03-23 08:31:10 -06:00
  0da1768ecb
• Add option for priorityClassName (#59)

  Signed-off-by: javex <code@inexplicity.de>

  Flozza 2025-03-23 08:31:01 -06:00
  580d063de4
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-03-23 14:30:46 +00:00
  a505e00c4a
• Add option for deployment annotations (#60)
  Jared 2025-03-23 08:30:37 -06:00
  712769f4f8
• docs(charts): 📝 write updated reademe
  github-actions[bot] 2025-03-20 13:11:27 +00:00
  0ab1b10bbd
• chore(jellyfin): Bump chart version to 2.3.0 and set appVersion to 10.10.6
  github-actions[bot] 2025-03-20 13:11:18 +00:00
  jellyfin-2.3.0 2.3.0 14b3b3035b
• fix: 🐛 unify value name and add default (#58)
  Lars 2025-03-20 07:09:09 -06:00
  0e6f86bc8b