immich added

cluster/apps/immich/machine-learning/DaemonSet.yaml

@@ -0,0 +1,84 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: immich-machine-learning
+  namespace: immich
+  annotations:
+    reloader.stakater.com/auto: 'true'
+  labels:
+    app: immich-machine-learning
+spec:
+  selector:
+    matchLabels:
+      app: immich-machine-learning
+  template:
+    metadata:
+      labels:
+        app: immich-machine-learning
+    spec:
+      automountServiceAccountToken: false
+      containers:
+        - name: immich-machine-learning
+          image: ghcr.io/immich-app/immich-machine-learning:v2.1.0 # {"$imagepolicy": "immich:immich-machine-learning"}
+          imagePullPolicy: IfNotPresent
+          resources:
+            limits:
+              memory: 8Gi
+            requests:
+              memory: 500Mi
+              cpu: 500m
+          env:
+            - name: DB_HOSTNAME
+              valueFrom:
+                secretKeyRef:
+                  name: immich-db-app
+                  key: host
+                  optional: false
+            - name: DB_DATABASE_NAME
+              valueFrom:
+                secretKeyRef:
+                  name: immich-db-app
+                  key: dbname
+                  optional: false
+            - name: DB_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: immich-db-app
+                  key: username
+                  optional: false
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: immich-db-app
+                  key: password
+                  optional: false
+          envFrom:
+            - configMapRef:
+                name: immich
+                optional: false
+          livenessProbe:
+            httpGet:
+              path: /ping
+              port: 3003
+            initialDelaySeconds: 60
+          readinessProbe:
+            httpGet:
+              path: /ping
+              port: 3003
+          startupProbe:
+            httpGet:
+              path: /ping
+              port: 3003
+          securityContext:
+            privileged: true # for intel quick sync
+            seccompProfile:
+              type: 'RuntimeDefault'
+          volumeMounts:
+            - name: immich-machine-learning
+              mountPath: /cache
+      nodeSelector:
+        intel.feature.node.kubernetes.io/gpu: 'true'
+      volumes:
+        - name: immich-machine-learning
+          persistentVolumeClaim:
+            claimName: immich-machine-learning

cluster/apps/immich/machine-learning/ImageAutomation/ImagePolicy.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: image.toolkit.fluxcd.io/v1
+kind: ImagePolicy
+metadata:
+  name: immich-machine-learning
+  namespace: immich
+spec:
+  imageRepositoryRef:
+    name: immich-machine-learning
+  policy:
+    # https://github.com/immich-app/immich/releases
+    semver:
+      range: '2.*.*'
+  filterTags:
+    pattern: 'v.*'

cluster/apps/immich/machine-learning/ImageAutomation/ImageRepository.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: image.toolkit.fluxcd.io/v1
+kind: ImageRepository
+metadata:
+  name: immich-machine-learning
+  namespace: immich
+spec:
+  # https://github.com/immich-app/immich/pkgs/container/immich-machine-learning
+  image: ghcr.io/immich-app/immich-machine-learning
+  interval: 24h
+  exclusionList:
+    - .*openvino
+    - .*cuda
+    - .*armnn
+    - pr*
+    - main
+    - main*

cluster/apps/immich/machine-learning/pvc.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: immich-machine-learning
+  namespace: immich
+  labels:
+    app: immich-machine-learning
+    velero.io/exclude-from-backup: 'true' # because this is nfs storage
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: k8s-nfs-ssd
+  resources:
+    requests:
+      storage: 10Gi

cluster/apps/immich/machine-learning/service.yml

@@ -0,0 +1,15 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: immich-machine-learning
+  namespace: immich
+  labels:
+    app: immich-machine-learning
+spec:
+  ports:
+    - name: http
+      targetPort: 3003
+      port: 3003
+  selector:
+    app: immich-machine-learning