server/plex.yaml

---
apiVersion: v1
kind: Namespace
metadata:
    name: plex
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: plex
  namespace: plex
spec:
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: plex
  replicas: 1
  template:
    metadata:
      labels:
        app: plex
      annotations:
        backup.velero.io/backup-volumes-excludes: media,media-metadata,tmpfs
    spec:
      containers:
      - name: plex
        image: linuxserver/plex:latest
        # for debugging
        # command: ["/bin/sh"]
        # args: ["-c", "sleep 3600"]
        ports:
        - containerPort: 32400
          name: http-web-svc
        volumeMounts:
        - mountPath: "/config"
          name: config
        - mountPath: "/config/Library/Application Support/Plex Media Server/Media"
          name: media-metadata
        - mountPath: "/media"
          name: media
        - mountPath: "/transcodes"
          name: tmpfs
        # Quicksync
        - name: "render-device"
          mountPath: "/dev/dri/renderD128"
        env:
        - name: PUID
          value: "1000"
        - name: PGID
          value: "1000"
        ## NVIDIA
        #- name: NVIDIA_DRIVER_CAPABILITIES
        #  value: "all"
        # Quicksync
        securityContext:
            privileged: true
        livenessProbe:
          httpGet:
            path: /web/index.html
            port: 32400
          failureThreshold: 5
          initialDelaySeconds: 10
          periodSeconds: 30
          timeoutSeconds: 10
        ## NVIDIA
        #resources:
        #  limits:
        #    nvidia.com/gpu: 1
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: gpu-node
                operator: In
                values:
                - "true"

      volumes:
      - name: config
        persistentVolumeClaim:
          claimName: plex-config-pvc
      - name: media-metadata
        persistentVolumeClaim:
          claimName: plex-metadata-pvc
      - name: media
        persistentVolumeClaim:
          claimName: plex-pvc
          readOnly: true
      - name: tmpfs
        emptyDir:
          medium: Memory
          sizeLimit: 12Gi
      # Quicksync
      - name: "render-device"
        hostPath:
          path: "/dev/dri/renderD128"
---
apiVersion: v1
kind: Service
metadata:
  name: plex-service
  namespace: plex
spec:
  selector:
    app: plex
  type: ClusterIP
  ports:
  - name: plex-web-port
    protocol: TCP
    port: 32400
    targetPort: http-web-svc
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: plex
  namespace: plex
spec:
  entryPoints:
  - websecure
  routes:
  - kind: Rule
    match: Host(`plex.jibby.org`)
    services:
    - kind: Service
      name: plex-service
      port: 32400