From 6d44b4292f39627f0f911e2f305e8667c72eb70c Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sun, 29 Mar 2026 10:11:22 +0300
Subject: [PATCH] add /api/download-status to book-search unprotected API
 ingress [ci skip]
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Needed for async polling from iOS Shortcuts — status endpoint
doesn't need Authentik auth (job IDs are unguessable UUIDs).
---
 stacks/ebooks/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/stacks/ebooks/main.tf b/stacks/ebooks/main.tf
index af880014..b0d0627b 100644
--- a/stacks/ebooks/main.tf
+++ b/stacks/ebooks/main.tf
@@ -832,5 +832,5 @@ module "book_search_api_ingress" {
   service_name    = "book-search"
   tls_secret_name = var.tls_secret_name
   protected       = false
-  ingress_path    = ["/api/download-url", "/shortcut"]
+  ingress_path    = ["/api/download-url", "/api/download-status", "/shortcut"]
 }