chore(k8s/amour/frigate): configure mqtt and tensorrt

Author: uhthomas

k8s/amour/frigate/BUILD.bazel

@@ -4,6 +4,7 @@ cue_library(
     name = "cue_frigate_library",
     srcs = [
         "config_map_list.cue",
+        "external_secret_list.cue",
         "ingress_list.cue",
         "list.cue",
         "namespace_list.cue",
@@ -13,6 +14,7 @@ cue_library(
     importpath = "github.com/uhthomas/automata/k8s/amour/frigate",
     visibility = ["//visibility:public"],
     deps = [
+        "//cue.mod/gen/github.com/external-secrets/external-secrets/apis/externalsecrets/v1beta1:cue_v1beta1_library",
         "//cue.mod/gen/k8s.io/api/apps/v1:cue_v1_library",
         "//cue.mod/gen/k8s.io/api/core/v1:cue_v1_library",
         "//cue.mod/gen/k8s.io/api/networking/v1:cue_v1_library",

k8s/amour/frigate/config_map_list.cue

@@ -18,32 +18,29 @@ import (
 #ConfigMapList: items: [{
 	data: "config.yaml": yaml.Marshal({
 		mqtt: {
-			// Required: host name
-			host: "mqtt.server.com"
-			// Optional: port (default: shown below)
-			port: 1883
-			// Optional: topic prefix (default: shown below)
-			// WARNING: must be unique if you are running multiple instances
-			topic_prefix: "frigate"
-			// Optional: client id (default: shown below)
-			// WARNING: must be unique if you are running multiple instances
-			client_id: "frigate"
-			// Optional: user
-			user: "mqtt_user"
-			// Optional: password
-			// NOTE: Environment variables that begin with 'FRIGATE_' may be referenced in {}.
-			//       eg. password: '{FRIGATE_MQTT_PASSWORD}'
-			password: "password"
-			// Optional: interval in seconds for publishing stats (default: shown below)
-			stats_interval: 60
+			host:     "emqx.emqx"
+			user:     "frigate"
+			password: "{FRIGATE_MQTT_PASSWORD}"
 		}
-		detectors: {
-			// coral:
-			//   type: edgetpu
-			//   device: usb
-			cpu1: {
-				type: "cpu"
-			}
+		ffmpeg: hwaccel_args: "preset-nvidia-h264"
+		detectors: tensorrt: {
+			type:   "tensorrt"
+			device: 0
+		}
+		model: {
+			path:               "/config/model_cache/tensorrt/yolov7-320.trt"
+			input_tensor:       "nchw"
+			input_pixel_format: "rgb"
+			width:              320
+			height:             320
+		}
+		cameras: dummy_camera: {
+			enabled: false
+			ffmpeg: inputs: [{
+				path: "rtsp://127.0.0.1:554/rtsp"
+				roles: ["detect"]
+			}]
+
 		}
 	})
 }]

k8s/amour/frigate/external_secret_list.cue

@@ -0,0 +1,32 @@
+package frigate
+
+import externalsecretsv1beta1 "github.com/external-secrets/external-secrets/apis/externalsecrets/v1beta1"
+
+#ExternalSecretList: externalsecretsv1beta1.#ExternalSecretList & {
+	apiVersion: "external-secrets.io/v1beta1"
+	kind:       "ExternalSecretList"
+	items: [...{
+		apiVersion: "external-secrets.io/v1beta1"
+		kind:       "ExternalSecret"
+	}]
+}
+
+#ExternalSecretList: items: [{
+	spec: {
+		secretStoreRef: {
+			name: "onepassword"
+			kind: "ClusterSecretStore"
+		}
+		target: template: metadata: {
+			annotations: {}
+			labels: {}
+		}
+		data: [{
+			secretKey: "mqtt-password"
+			remoteRef: {
+				key:      "frigate-emqx"
+				property: "password"
+			}
+		}]
+	}
+}]

k8s/amour/frigate/list.cue

@@ -31,7 +31,7 @@ import (
 
 _items: [
 	#ConfigMapList.items,
-	// #ExternalSecretList.items,
+	#ExternalSecretList.items,
 	#IngressList.items,
 	#NamespaceList.items,
 	#ServiceList.items,

k8s/amour/frigate/stateful_set_list.cue

@@ -38,17 +38,23 @@ import (
 						containerPort: 8554
 					}]
 					env: [{
+						name:  "PUID"
+						value: "1000"
+					}, {
+						name:  "PGID"
+						value: "3000"
+					}, {
 						name:  "NVIDIA_DRIVER_CAPABILITIES"
 						value: "all"
 					}, {
 						name:  "NVIDIA_VISIBLE_DEVICES"
 						value: "all"
 					}, {
-						name:  "PUID"
-						value: "1000"
-					}, {
-						name:  "PGID"
-						value: "3000"
+						name: "FRIGATE_MQTT_PASSWORD"
+						valueFrom: secretKeyRef: {
+							name: #Name
+							key:  "mqtt-password"
+						}
 					}]
 					resources: limits: {
 						(v1.#ResourceCPU):    "1"