mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
Scooby HuskyandClaude Opus 4.6
ce23f9282c
- Revert talos-client-cert secret to prometheus namespace (prometheus pods mount this secret, not kube-system pods) - Add CHOWN/DAC_OVERRIDE/SETUID/SETGID capabilities to frigate (s6-overlay needs chown for log directories) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
188 lines
4.2 KiB
YAML
188 lines
4.2 KiB
YAML
# Frigate Helm Chart Values
|
|
# NVR with realtime object detection for IP cameras
|
|
#
|
|
# FEATURES:
|
|
# ✓ Object detection for IP cameras
|
|
# ✓ Persistent storage for recordings via Rook-Ceph
|
|
# ✓ TLS certificates via cert-manager
|
|
# ✓ Ingress via Istio VirtualService
|
|
# ✓ MQTT integration (optional)
|
|
|
|
# Reduce Istio sidecar CPU request - frigate already uses 1 CPU request
|
|
# and the cluster runs at ~98% CPU allocation. Default 10m sidecar request
|
|
# can prevent scheduling.
|
|
podAnnotations:
|
|
sidecar.istio.io/proxyCPU: "1m"
|
|
|
|
image:
|
|
repository: ghcr.io/blakeblackshear/frigate
|
|
tag: "0.13.2"
|
|
pullPolicy: IfNotPresent
|
|
|
|
service:
|
|
main:
|
|
type: ClusterIP
|
|
ports:
|
|
http:
|
|
port: 5000
|
|
|
|
# Ingress disabled - Istio VirtualService handles routing
|
|
ingress:
|
|
main:
|
|
enabled: false
|
|
|
|
env:
|
|
TZ: America/New_York
|
|
FRIGATE_MQTT_HOST: "mosquitto.mqtt"
|
|
FRIGATE_MQTT_PORT: "1883"
|
|
|
|
envFromSecrets:
|
|
- frigate-rtsp-credentials
|
|
|
|
config: |
|
|
mqtt:
|
|
host: mosquitto.mqtt
|
|
port: 1883
|
|
topic_prefix: frigate
|
|
client_id: frigate
|
|
detectors:
|
|
cpu1:
|
|
type: cpu
|
|
cameras:
|
|
basement:
|
|
ffmpeg:
|
|
inputs:
|
|
- path: rtsp://admin:admin!@172.28.200.10:554/cam/realmonitor?channel=1&subtype=1
|
|
roles:
|
|
- detect
|
|
- path: rtsp://admin:admin!@172.28.200.10:554/cam/realmonitor?channel=1&subtype=0
|
|
roles:
|
|
- record
|
|
detect:
|
|
width: 704
|
|
height: 480
|
|
fps: 5
|
|
record:
|
|
enabled: true
|
|
retain:
|
|
days: 5
|
|
mode: all
|
|
snapshots:
|
|
enabled: true
|
|
timestamp: true
|
|
bounding_box: true
|
|
patio:
|
|
ffmpeg:
|
|
inputs:
|
|
- path: rtsp://admin:admin!@172.28.200.11:554/cam/realmonitor?channel=1&subtype=1
|
|
roles:
|
|
- detect
|
|
- path: rtsp://admin:admin!@172.28.200.11:554/cam/realmonitor?channel=1&subtype=0
|
|
roles:
|
|
- record
|
|
detect:
|
|
width: 704
|
|
height: 480
|
|
fps: 5
|
|
record:
|
|
enabled: true
|
|
retain:
|
|
days: 5
|
|
mode: all
|
|
snapshots:
|
|
enabled: true
|
|
timestamp: true
|
|
bounding_box: true
|
|
backyard:
|
|
ffmpeg:
|
|
inputs:
|
|
- path: rtsp://admin:admin!@172.28.200.12:554/cam/realmonitor?channel=1&subtype=1
|
|
roles:
|
|
- detect
|
|
- path: rtsp://admin:admin!@172.28.200.12:554/cam/realmonitor?channel=1&subtype=0
|
|
roles:
|
|
- record
|
|
detect:
|
|
width: 704
|
|
height: 480
|
|
fps: 5
|
|
record:
|
|
enabled: true
|
|
retain:
|
|
days: 5
|
|
mode: all
|
|
snapshots:
|
|
enabled: true
|
|
timestamp: true
|
|
bounding_box: true
|
|
go2rtc:
|
|
streams:
|
|
basement: rtsp://admin:admin!@172.28.200.10:554/cam/realmonitor?channel=1&subtype=0
|
|
basement_alt: rtsp://admin:admin!@172.28.200.10:554/cam/realmonitor?channel=1&subtype=1
|
|
patio: rtsp://admin:admin!@172.28.200.11:554/cam/realmonitor?channel=1&subtype=0
|
|
patio_alt: rtsp://admin:admin!@172.28.200.11:554/cam/realmonitor?channel=1&subtype=1
|
|
backyard: rtsp://admin:admin!@172.28.200.12:554/cam/realmonitor?channel=1&subtype=0
|
|
backyard_alt: rtsp://admin:admin!@172.28.200.12:554/cam/realmonitor?channel=1&subtype=1
|
|
objects:
|
|
track:
|
|
- person
|
|
- car
|
|
- dog
|
|
- cat
|
|
- vehicle
|
|
motion:
|
|
threshold: 25
|
|
|
|
persistence:
|
|
config:
|
|
enabled: true
|
|
storageClass: rook-ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 15Gi
|
|
media:
|
|
enabled: true
|
|
storageClass: rook-ceph-block
|
|
accessMode: ReadWriteOnce
|
|
size: 500Gi
|
|
|
|
shmSize: 2Gi
|
|
|
|
tmpfs:
|
|
enabled: true
|
|
sizeLimit: 2Gi
|
|
|
|
securityContext:
|
|
privileged: false
|
|
capabilities:
|
|
add:
|
|
- CHOWN
|
|
- DAC_OVERRIDE
|
|
- SETUID
|
|
- SETGID
|
|
drop:
|
|
- ALL
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 1Gi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 4Gi
|
|
|
|
probes:
|
|
liveness:
|
|
enabled: true
|
|
initialDelaySeconds: 5
|
|
failureThreshold: 5
|
|
readiness:
|
|
enabled: true
|
|
initialDelaySeconds: 5
|
|
failureThreshold: 5
|
|
startup:
|
|
enabled: true
|
|
failureThreshold: 5
|
|
|
|
nodeSelector:
|
|
kubernetes.io/arch: amd64
|