fix(invidious): add HMAC key

Re: https://github.com/iv-org/invidious/issues/3540

deploy/base/deploy-invidious.yaml

@@ -88,6 +88,12 @@ spec:
               name: invidious-credentials
               key: database-url
               optional: false
+        - name: INVIDIOUS_HMAC_KEY
+          valueFrom:
+            secretKeyRef:
+              name: invidious-credentials
+              key: hmac-key
+              optional: false
         volumeMounts:
         - mountPath: /invidious/config/config.yml
           subPath: config.yml

deploy/base/statefulset-gitea.yaml

@@ -30,7 +30,7 @@ spec:
         runAsGroup: 1000
       initContainers:
       - name: init-gitea
-        image: gitea/gitea:1.19.0-rootless
+        image: gitea/gitea:1.19.3-rootless
         imagePullPolicy: IfNotPresent
         command: ["/usr/sbin/init-directory-structure.sh"]
         env:
@@ -53,7 +53,7 @@ spec:
           subPath: init-directory-structure.sh
           name: scripts
       - name: setup-gitea
-        image: gitea/gitea:1.19.0-rootless
+        image: gitea/gitea:1.19.3-rootless
         imagePullPolicy: IfNotPresent
         command: ["/usr/sbin/setup.sh"]
         env:
@@ -97,7 +97,7 @@ spec:
           readOnlyRootFilesystem: true
       containers:
       - name: gitea
-        image: gitea/gitea:1.19.0-rootless
+        image: gitea/gitea:1.19.3-rootless
         imagePullPolicy: Always
         ports:
         - name: http

deploy/dev/kustomization.yaml

@@ -67,6 +67,7 @@ secretGenerator:
 - name: invidious-credentials
   literals:
   - database-url=postgresql://kemal:kemal@dev-db:5432/invidious
+  - hmac-key=fc93ecd912530fa278c8642cb16a2f86b76c228ce4b4b70a6e3107dfb57214ab
   # Individual keys required by init-invidious-db:
   - database-host=dev-db
   - database-port=5432

deploy/prod/kustomization.yaml

@@ -64,6 +64,7 @@ secretGenerator:
   files:
   - database-url=secrets/invidious-database-url
   - database-password=secrets/invidious-database-password
+  - hmac-key=secrets/invidious-hmac-key.txt
   options:
     labels:
       app: invidious