fix(invidious): add HMAC key

Re: https://github.com/iv-org/invidious/issues/3540

deploy/base/deploy-invidious.yaml

@@ -88,6 +88,12 @@ spec:
               name: invidious-credentials
               key: database-url
               optional: false
+        - name: INVIDIOUS_HMAC_KEY
+          valueFrom:
+            secretKeyRef:
+              name: invidious-credentials
+              key: hmac-key
+              optional: false
         volumeMounts:
         - mountPath: /invidious/config/config.yml
           subPath: config.yml

deploy/dev/kustomization.yaml

@@ -67,6 +67,7 @@ secretGenerator:
 - name: invidious-credentials
   literals:
   - database-url=postgresql://kemal:kemal@dev-db:5432/invidious
+  - hmac-key=fc93ecd912530fa278c8642cb16a2f86b76c228ce4b4b70a6e3107dfb57214ab
   # Individual keys required by init-invidious-db:
   - database-host=dev-db
   - database-port=5432

deploy/prod/kustomization.yaml

@@ -64,6 +64,7 @@ secretGenerator:
   files:
   - database-url=secrets/invidious-database-url
   - database-password=secrets/invidious-database-password
+  - hmac-key=secrets/invidious-hmac-key.txt
   options:
     labels:
       app: invidious