feat: add Invidious deployment, services, and persistent volume claims

cluster/apps/invidious/invidious.yml

@@ -0,0 +1,77 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: invidious
+  namespace: default
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: invidious
+  template:
+    metadata:
+      labels:
+        app: invidious
+    spec:
+      initContainers:
+      - name: wait-for-db
+        image: busybox
+        command:
+          - sh
+          - -c
+          - |
+            until nc -z -v -w30 invidious-db-service 5432; do
+              echo "Waiting for database to be ready..."
+              sleep 2
+            done
+      - name: wait-for-helper
+        image: busybox
+        command:
+          - sh
+          - -c
+          - |
+            until nc -z -v -w30 inv-sig-helper 12999; do
+              echo "Waiting for helper to be ready..."
+              sleep 2
+            done
+      containers:
+      - name: invidious-server
+        image: quay.io/invidious/invidious:2025.04.04-0c07e9d
+        ports:
+        - containerPort: 3000
+        env:
+        - name: hmac_key
+          valueFrom:
+            secretKeyRef:
+              name: invidious-hmac-key
+              key: key
+        - name: DB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: invidious-postgres-secret
+              key: password
+        - name: VISITOR_DATA
+          valueFrom:
+            secretKeyRef:
+              name: invidious-secret
+              key: visitor-data
+        - name: PO_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: invidious-secret
+              key: po-token
+        - name: INVIDIOUS_CONFIG
+          valueFrom:
+            configMapKeyRef:
+              name: invidious-config
+              key: config.yml
+        - name: INVIDIOUS_PORT
+          value: "3000"
+        volumeMounts:
+        - name: config-volume
+          mountPath: /etc/invidious
+      volumes:
+      - name: config-volume
+        configMap:
+          name: invidious-config