From 5ecaadd1003fe9cb2562b9acbf9fbd6be7960b6c Mon Sep 17 00:00:00 2001
From: ALI YESILKAYA <Aliyesilkaya93@gmail.com>
Date: Mon, 6 Jul 2026 21:33:01 +0200
Subject: [PATCH] =?UTF-8?q?fix(authentik):=20startupProbe=20=E2=80=94=20le?=
 =?UTF-8?q?s=20migrations=20du=201er=20boot=20d=C3=A9passent=20la=20livene?=
 =?UTF-8?q?ss=20(#77)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Le premier démarrage exécute les migrations de schéma (plusieurs minutes) ;
la livenessProbe (60 s) tuait le pod en boucle avant qu'il ne soit prêt.
La startupProbe accorde jusqu'à 10 min avant d'armer liveness/readiness.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 k8s/apps/authentik/deployment.yaml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/k8s/apps/authentik/deployment.yaml b/k8s/apps/authentik/deployment.yaml
index 5be98e7..78feee3 100644
--- a/k8s/apps/authentik/deployment.yaml
+++ b/k8s/apps/authentik/deployment.yaml
@@ -57,17 +57,23 @@ spec:
             limits:
               cpu: 1000m
               memory: 1536Mi
+          # Premier boot : les migrations de base prennent plusieurs minutes —
+          # la startupProbe laisse jusqu'à 10 min avant que la liveness ne s'active
+          startupProbe:
+            httpGet:
+              path: /-/health/live/
+              port: 9000
+            failureThreshold: 60
+            periodSeconds: 10
           readinessProbe:
             httpGet:
               path: /-/health/ready/
               port: 9000
-            initialDelaySeconds: 30
             periodSeconds: 15
           livenessProbe:
             httpGet:
               path: /-/health/live/
               port: 9000
-            initialDelaySeconds: 60
             periodSeconds: 30
       volumes:
         - name: media