Update Helm release authentik to v2025.12.1

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2025.10.3
+  version: 2025.12.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.6
@@ -11,5 +11,5 @@ dependencies:
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:b9fe766e223b1f65430c64c02f94c1f97ad7149a5a9acc7bab8339615706293f
-generated: "2026-01-08T23:01:41.173354097Z"
+digest: sha256:a473d3cc3e54c917f3d14c96f3de72e81940c82b3fbe6ce316e4d28a7bdcc56d
+generated: "2026-01-16T04:35:09.331202688Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,7 +21,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.10.3
+    version: 2025.12.1
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/yubal-playlist/templates/external-secret.yaml

@@ -19,6 +19,20 @@ spec:
         key: /cl01tl/lidarr2/key
         metadataPolicy: None
         property: key
+    - secretKey: subsonic-user
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/navidrome/admin
+        metadataPolicy: None
+        property: user
+    - secretKey: subsonic-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/navidrome/admin
+        metadataPolicy: None
+        property: password
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/helm/yubal-playlist/values.yaml

@@ -29,6 +29,20 @@ yubal-playlist:
                 secretKeyRef:
                   name: yubal-playlist-config-secret
                   key: lidarr-key
+            - name: YUBAL_SUBSONIC_ENDPOINT
+              value: http://navidrome.navidrome
+            - name: YUBAL_SUBSONIC_PORT
+              value: 80
+            - name: YUBAL_SUBSONIC_USER
+              valueFrom:
+                secretKeyRef:
+                  name: yubal-playlist-config-secret
+                  key: subsonic-user
+            - name: YUBAL_SUBSONIC_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: yubal-playlist-config-secret
+                  key: subsonic-password
           resources:
             requests:
               cpu: 10m