yt-dlp-bot: deploy update to b9088d9

Per https://docs.goauthentik.io/install-config/configuration/#using-a-postgresql-connection-pooler

authentik/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: authentik
-  version: 2025.12.4
+  version: 2026.2.0
   repository: https://charts.goauthentik.io

authentik/values.yaml

@@ -15,6 +15,35 @@ authentik:
       service:
         labels:
           metrics_enabled: "true"
+    livenessProbe:
+      failureThreshold: 3      
+      initialDelaySeconds: 5
+      periodSeconds: 10
+      successThreshold: 1
+      timeoutSeconds: 10       
+      httpGet:
+        path: "{{ .Values.authentik.web.path }}-/health/live/"
+        port: http
+
+    readinessProbe:
+      failureThreshold: 3      
+      initialDelaySeconds: 5
+      periodSeconds: 10
+      successThreshold: 1
+      timeoutSeconds: 10       
+      httpGet:
+        path: "{{ .Values.authentik.web.path }}-/health/ready/"
+        port: http
+
+    startupProbe:
+      failureThreshold: 60     
+      initialDelaySeconds: 5
+      periodSeconds: 10
+      successThreshold: 1
+      timeoutSeconds: 10       
+      httpGet:
+        path: "{{ .Values.authentik.web.path }}-/health/live/"
+        port: http
   worker:
     replicas: 3
     volumeMounts:
@@ -32,8 +61,10 @@ authentik:
           secretKeyRef:
             name: authentik-credentials
             key: authentik-secret-key
+      - name: AUTHENTIK_POSTGRESQL__DISABLE_SERVER_SIDE_CURSORS
+        value: "true"
       - name: AUTHENTIK_POSTGRESQL__HOST
-        value: pooler-weyma-rw.cloudnativepg.svc.cluster.local
+        value: pooler-weyma-rw-authentik.cloudnativepg.svc.cluster.local
       - name: AUTHENTIK_POSTGRESQL__NAME
         value: authentik
       - name: AUTHENTIK_POSTGRESQL__USER
@@ -58,6 +89,22 @@ authentik:
             key: smtp-password
       - name: AUTHENTIK_EMAIL__TIMEOUT
         value: "30"
+      - name: AUTHENTIK_STORAGE__BACKEND
+        value: "s3"
+      - name: AUTHENTIK_STORAGE__S3__ENDPOINT
+        value: "https://weyma-s3.infra.dubyatp.xyz"
+      - name: AUTHENTIK_STORAGE__S3__BUCKET_NAME
+        value: "authentik-files"
+      - name: AUTHENTIK_STORAGE__S3__ACCESS_KEY
+        valueFrom:
+          secretKeyRef:
+            name: authentik-files
+            key: AWS_ACCESS_KEY_ID
+      - name: AUTHENTIK_STORAGE__S3__SECRET_KEY
+        valueFrom:
+          secretKeyRef:
+            name: authentik-files
+            key: AWS_SECRET_ACCESS_KEY      
   additionalObjects:
     - apiVersion: networking.k8s.io/v1
       kind: Ingress
@@ -145,4 +192,13 @@ authentik:
         target:
           creationPolicy: Owner
           deletionPolicy: Retain
-          name: authentik-db-auth
+          name: authentik-db-auth
+    - apiVersion: objectbucket.io/v1alpha1
+      kind: ObjectBucketClaim
+      metadata:
+        name: authentik-files
+      spec:
+        additionalConfig:
+          maxSize: 20Gi
+        bucketName: authentik-files
+        storageClassName: weyma-s3-bucket

gitea-runner/config.yaml

@@ -29,8 +29,9 @@ data:
       network: "host"
       privileged: false
       options:
-      workdir_parent:
-      valid_volumes: []
+      workdir_parent: /scratch
+      valid_volumes:
+        - /scratch/**
       docker_host: ""
       force_pull: true
       force_rebuild: false

gitea-runner/statefulset.yaml

@@ -61,11 +61,17 @@ spec:
           mountPath: /config
         - name: runner-data
           mountPath: /data
+        - name: runner-scratch
+          mountPath: /scratch
       dnsPolicy: ClusterFirst
       restartPolicy: Always
       schedulerName: default-scheduler
       terminationGracePeriodSeconds: 30
       volumes:
+        - name: runner-scratch
+          emptyDir:
+            medium: Memory
+            sizeLimit: 5Gi
         - name: runner-config
           configMap:
             name: runner-config

gitea/Chart.yaml

@@ -24,5 +24,5 @@ appVersion: "1.0"
 
 dependencies:
 - name: gitea
-  version: 12.5.5
+  version: 12.5.6
   repository: https://weyma-s3.infra.dubyatp.xyz/helm-bucket-ea34bc44-ef19-480d-a16a-1e583991f123/charts/

yt-dlp-bot/deployment.yaml

@@ -14,7 +14,7 @@ spec:
     spec:
       containers:
         - name: yt-dlp-bot
-          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:d7ad90a'
+          image: 'git.dubyatp.xyz/williamp/yt-dlp-bot:b9088d9'
           env:
             - name: OUT_PATH
               value: /data/youtube-vids