eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 65 Packages Wiki Activity Actions

Fix authentik 2026.2.0 migration ordering bug #275

Merged
eblume merged 1 commit from fix/authentik-migration-ordering into main 2026-03-01 16:28:37 -08:00
Conversation 0 Commits 1 Files changed 3 +10
eblume commented 2026-03-01 16:25:53 -08:00
Owner
Copy link

Summary

  • Patch authentik_rbac/0010 migration to depend on authentik_core/0056, fixing non-deterministic ordering that crashes startup with FieldError: Cannot resolve keyword 'group_id'
  • Upstream bug: goauthentik/authentik#19616, #20634 — no fix released yet
  • Document the issue in the lessons-learned table

Deployment and Testing

  • CI builds container image
  • Deploy from branch: argocd app set authentik --revision fix/authentik-migration-ordering && argocd app sync authentik
  • Pods reach Running/Ready without crash-looping
  • kubectl logs show 0056 migrating before 0010
  • authentik UI loads at authentik.ops.eblu.me
  • mise run services-check
  • After merge: argocd app set authentik --revision main && argocd app sync authentik
## Summary - Patch `authentik_rbac/0010` migration to depend on `authentik_core/0056`, fixing non-deterministic ordering that crashes startup with `FieldError: Cannot resolve keyword 'group_id'` - Upstream bug: goauthentik/authentik#19616, #20634 — no fix released yet - Document the issue in the lessons-learned table ## Deployment and Testing - [ ] CI builds container image - [ ] Deploy from branch: `argocd app set authentik --revision fix/authentik-migration-ordering && argocd app sync authentik` - [ ] Pods reach Running/Ready without crash-looping - [ ] `kubectl logs` show 0056 migrating before 0010 - [ ] authentik UI loads at authentik.ops.eblu.me - [ ] `mise run services-check` - [ ] After merge: `argocd app set authentik --revision main && argocd app sync authentik`
Django migration ordering bug in authentik 2026.2.0 — rbac/0010 (drops
Role.group_id) can execute before core/0056 (data migration that reads
Role.group_id), causing FieldError on startup. Add explicit dependency
via substituteInPlace. Upstream: goauthentik/authentik#19616

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
eblume merged commit 2d4098e480 into main 2026-03-01 16:28:37 -08:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eblume/blumeops!275
No description provided.