Automated Manifest Update (#4996)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

### Details
- **Trigger**: `workflow_dispatch` by `@alexlebens`
- **Commit**: `4e2027b` (on `main`)
- **Charts Updated**: `audiobookshelf,authentik`

Reviewed-on: #4996
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/authentik/Deployment-authentik-server.yaml

@@ -12,7 +12,7 @@ metadata:
     app.kubernetes.io/part-of: "authentik"
     app.kubernetes.io/version: "2026.2.1"
 spec:
-  replicas: 1
+  replicas: 2
   revisionHistoryLimit: 3
   selector:
     matchLabels:
@@ -89,19 +89,19 @@ spec:
             httpGet:
               path: '/-/health/live/'
               port: http
-            initialDelaySeconds: 5
+            initialDelaySeconds: 15
             periodSeconds: 10
             successThreshold: 1
-            timeoutSeconds: 3
+            timeoutSeconds: 5
           readinessProbe:
             failureThreshold: 3
             httpGet:
               path: '/-/health/ready/'
               port: http
-            initialDelaySeconds: 5
+            initialDelaySeconds: 15
             periodSeconds: 10
             successThreshold: 1
-            timeoutSeconds: 3
+            timeoutSeconds: 5
           startupProbe:
             failureThreshold: 60
             httpGet:
@@ -111,7 +111,10 @@ spec:
             periodSeconds: 10
             successThreshold: 1
             timeoutSeconds: 3
-          resources: {}
+          resources:
+            requests:
+              cpu: 100m
+              memory: 700Mi
       affinity:
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:

clusters/cl01tl/manifests/authentik/Deployment-authentik-worker.yaml

@@ -12,7 +12,7 @@ metadata:
     app.kubernetes.io/part-of: "authentik"
     app.kubernetes.io/version: "2026.2.1"
 spec:
-  replicas: 1
+  replicas: 2
   revisionHistoryLimit: 3
   selector:
     matchLabels:
@@ -110,7 +110,10 @@ spec:
             periodSeconds: 10
             successThreshold: 1
             timeoutSeconds: 3
-          resources: {}
+          resources:
+            requests:
+              cpu: 100m
+              memory: 512Mi
       affinity:
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:

clusters/cl01tl/manifests/authentik/ExternalSecret-authentik-key-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: key
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/authentik/key
-        metadataPolicy: None
         property: key

clusters/cl01tl/manifests/authentik/HTTPRoute-authentik-server.yaml

@@ -29,4 +29,4 @@ spec:
       matches:
         - path:
             type: PathPrefix
-            value: /
+            value: '/'

clusters/cl01tl/manifests/authentik/Service-authentik-worker-metrics.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: authentik-worker-metrics
+  namespace: "authentik"
+  labels:
+    helm.sh/chart: "authentik-2026.2.1"
+    app.kubernetes.io/name: "authentik"
+    app.kubernetes.io/instance: "authentik"
+    app.kubernetes.io/component: "worker-metrics"
+    app.kubernetes.io/managed-by: "Helm"
+    app.kubernetes.io/part-of: "authentik"
+    app.kubernetes.io/version: "2026.2.1"
+spec:
+  type: ClusterIP
+  ports:
+    - name: metrics
+      protocol: TCP
+      port: 9300
+      targetPort: metrics
+  selector:
+    app.kubernetes.io/name: "authentik"
+    app.kubernetes.io/instance: "authentik"
+    app.kubernetes.io/component: "worker"

clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-worker.yaml

@@ -0,0 +1,27 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: authentik-worker
+  namespace: "authentik"
+  labels:
+    helm.sh/chart: "authentik-2026.2.1"
+    app.kubernetes.io/name: "authentik"
+    app.kubernetes.io/instance: "authentik"
+    app.kubernetes.io/component: "worker-metrics"
+    app.kubernetes.io/managed-by: "Helm"
+    app.kubernetes.io/part-of: "authentik"
+    app.kubernetes.io/version: "2026.2.1"
+spec:
+  endpoints:
+    - port: metrics
+      interval: 30s
+      scrapeTimeout: 3s
+      path: /metrics
+  namespaceSelector:
+    matchNames:
+      - authentik
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: "authentik"
+      app.kubernetes.io/instance: "authentik"
+      app.kubernetes.io/component: "worker-metrics"