blumeops/containers/authentik
Erich Blume 2d4098e480
All checks were successful
Build Container / detect (push) Successful in 2s
Build Container (Nix) / detect (push) Successful in 1s
Build Container / build (authentik) (push) Successful in 1s
Build Container (Nix) / build (authentik) (push) Successful in 3m6s
Fix authentik 2026.2.0 migration ordering bug (#275)
## Summary

- Patch `authentik_rbac/0010` migration to depend on `authentik_core/0056`, fixing non-deterministic ordering that crashes startup with `FieldError: Cannot resolve keyword 'group_id'`
- Upstream bug: goauthentik/authentik#19616, #20634 — no fix released yet
- Document the issue in the lessons-learned table

## Deployment and Testing

- [ ] CI builds container image
- [ ] Deploy from branch: `argocd app set authentik --revision fix/authentik-migration-ordering && argocd app sync authentik`
- [ ] Pods reach Running/Ready without crash-looping
- [ ] `kubectl logs` show 0056 migrating before 0010
- [ ] authentik UI loads at authentik.ops.eblu.me
- [ ] `mise run services-check`
- [ ] After merge: `argocd app set authentik --revision main && argocd app sync authentik`

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/275
2026-03-01 16:28:36 -08:00
..
api-go-vendor-hook.nix C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
authentik-django.nix Fix authentik 2026.2.0 migration ordering bug (#275) 2026-03-01 16:28:36 -08:00
authentik-server.nix C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
client-go.nix C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
client-ts.nix C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
default.nix Fix authentik container: set TMPDIR=/tmp 2026-03-01 15:52:36 -08:00
python-deps.nix C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
sources.nix C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
test-build.nix C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
webui-deps.nix C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
webui.nix C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00