Update paperless-ngx to 3.0.5

Major app jump 2.20.15 -> 3.0.5. Chart major bump (7.1.1 -> 8.0.0):
the paperless.files.barcodes.scanner value is removed (pyzbar and
PAPERLESS_CONSUMER_BARCODE_SCANNER were removed upstream), the
paperless.ocr.mode default changes from the removed "skip" to "auto",
and the startup probe budget is raised to 600s for the one-time
Whoosh -> Tantivy index rebuild. New optional values:
paperless.ocr.archiveFileGeneration, paperless.files.deleteDuplicates,
oidc.provider.tokenAuthMethod.

paperless-ngx/Chart.yaml

@@ -4,9 +4,9 @@ description: A Helm chart to deploy Paperless-NGX on Kubernetes
 
 type: application
 
-version: 7.1.1+up2.20.15
+version: 8.0.0+up3.0.5
 
-appVersion: 2.20.15
+appVersion: 3.0.5
 
 maintainers:
   - name: jklein

paperless-ngx/templates/paperless-server.sfs.yaml

@@ -126,6 +126,8 @@ spec:
               value: "{{ .Values.paperless.ocr.languages }}"
             - name: PAPERLESS_OCR_MODE
               value: "{{ .Values.paperless.ocr.mode }}"
+            - name: PAPERLESS_ARCHIVE_FILE_GENERATION
+              value: "{{ .Values.paperless.ocr.archiveFileGeneration }}"
             - name: PAPERLESS_OCR_ROTATE_PAGES
               value: "{{ .Values.paperless.ocr.rotate_pages }}"
             - name: PAPERLESS_OCR_OUTPUT_TYPE
@@ -142,8 +144,8 @@ spec:
               value: "{{ .Values.paperless.files.barcodes.barcodeString }}"
             - name: PAPERLESS_CONSUMER_BARCODE_RETAIN_SPLIT_PAGES
               value: "{{ .Values.paperless.files.barcodes.retainBarcodePage }}"
-            - name: PAPERLESS_CONSUMER_BARCODE_SCANNER
+            - name: PAPERLESS_CONSUMER_DELETE_DUPLICATES
-              value: "{{ .Values.paperless.files.barcodes.scanner }}"
+              value: "{{ .Values.paperless.files.deleteDuplicates }}"
             {{- if .Values.paperless.files.tikaGotenberg.enabled }}
             - name:  PAPERLESS_TIKA_ENABLED
               value: "{{ .Values.paperless.files.tikaGotenberg.enabled }}"
@@ -169,6 +171,9 @@ spec:
                           "fetch_userinfo": true,
                           "oauth_pkce_enabled": true,
                           "server_url": "{{ required "A OIDC-discovery-document-url must be provided" .Values.oidc.provider.discoveryUrl }}",
+                          {{- if .Values.oidc.provider.tokenAuthMethod }}
+                          "token_auth_method": "{{ .Values.oidc.provider.tokenAuthMethod }}",
+                          {{- end }}
                           "uid_field": "sub"
                         }
                       }
@@ -217,13 +222,15 @@ spec:
             successThreshold: 1
             timeoutSeconds: 5
           # The startup probe gates liveness/readiness. Paperless runs database
-          # migrations and index checks on startup: budget 10s * 30 = 300s.
+          # migrations on startup, and since 3.0 the first start after an
+          # upgrade also rebuilds the search index from scratch (Whoosh ->
+          # Tantivy): budget 10s * 60 = 600s.
           startupProbe:
             httpGet:
               path: /
               port: 8000
             periodSeconds: 10
-            failureThreshold: 30
+            failureThreshold: 60
             timeoutSeconds: 5
       restartPolicy: Always
       volumes:

paperless-ngx/values.yaml

@@ -21,20 +21,31 @@ paperless:
   replicas: 1
   ocr:
     languages: "eng"
-    mode: "skip"
+    # Paperless-ngx 3.x modes: auto (default, skips OCR when embedded text
+    # exists), redo, force, off. The 2.x values "skip"/"skip_noarchive" were
+    # removed upstream; "skip" maps to "auto".
+    mode: "auto"
+    # Archive (PDF/A) generation, decoupled from OCR in 3.0: auto (default,
+    # skip archive for born-digital PDFs), always (2.x behavior), never.
+    archiveFileGeneration: "auto"
     rotate_pages: "true"
     output_type: "pdfa"
   files:
     filenameFormat: "{{ created_year }}/{{ correspondent }}/{{ title }}"
     storage: 20Gi
     maxUploadFileSize: 10m
+    # The barcode scanner backend is no longer configurable: paperless-ngx 3.0
+    # removed pyzbar and PAPERLESS_CONSUMER_BARCODE_SCANNER; zxing-cpp is the
+    # only backend now.
     barcodes:
       enabled: true
       barcodeString: "PATCHT"
       retainBarcodePage: false
       asn:
         enabled: true
-      scanner: PYZBAR
+    # Paperless-ngx 3.0 no longer rejects duplicate documents by default; set
+    # to true to restore the 2.x behavior of deleting duplicates on consume.
+    deleteDuplicates: false
     tikaGotenberg:
       enabled: false
       tikaEndpoint: null
@@ -112,3 +123,7 @@ oidc:
     name: null
     clientId: null
     discoveryUrl: null
+    # Optional: explicit token endpoint auth method (e.g. client_secret_basic).
+    # Some providers need this since the allauth update in paperless-ngx 3.0
+    # (login fails at the callback with invalid_client otherwise).
+    tokenAuthMethod: null