From 562ffcfc10891aecf1a0e4d301bb96619c51189a Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Thu, 23 Jul 2026 09:47:50 -0700
Subject: [PATCH] fix(authentik): increase startup probe timeout for migrations

Fresh authentik deployment runs ~100 database migrations which takes 15-20
minutes. Previous startup probe failureThreshold of 60 (10 minutes) killed
the pod before migrations could complete, causing infinite restart loop.

Increased to 120 failures (20 minutes) to allow migrations to finish.

Fixes: nginx 503 due to pod never becoming Ready.
---
 k8s/security/iam/authentik-values.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/k8s/security/iam/authentik-values.yaml b/k8s/security/iam/authentik-values.yaml
index 6fa792b..146d82a 100644
--- a/k8s/security/iam/authentik-values.yaml
+++ b/k8s/security/iam/authentik-values.yaml
@@ -143,6 +143,7 @@ server:
     failureThreshold: 6
   startupProbe:
     timeoutSeconds: 15
+    failureThreshold: 120  # 120 × 10s = 20min for fresh DB migrations
   # Every OIDC login (Grafana, Argo CD, MinIO, Forgejo) depends on this server —
   # its request latency/error rate explains SSO-driven slowness on those services.
   metrics: