blumeops/docs/how-to
Erich Blume 2d4098e480
All checks were successful
Build Container / detect (push) Successful in 2s
Build Container (Nix) / detect (push) Successful in 1s
Build Container / build (authentik) (push) Successful in 1s
Build Container (Nix) / build (authentik) (push) Successful in 3m6s
Fix authentik 2026.2.0 migration ordering bug (#275)
## Summary

- Patch `authentik_rbac/0010` migration to depend on `authentik_core/0056`, fixing non-deterministic ordering that crashes startup with `FieldError: Cannot resolve keyword 'group_id'`
- Upstream bug: goauthentik/authentik#19616, #20634 — no fix released yet
- Document the issue in the lessons-learned table

## Deployment and Testing

- [ ] CI builds container image
- [ ] Deploy from branch: `argocd app set authentik --revision fix/authentik-migration-ordering && argocd app sync authentik`
- [ ] Pods reach Running/Ready without crash-looping
- [ ] `kubectl logs` show 0056 migrating before 0010
- [ ] authentik UI loads at authentik.ops.eblu.me
- [ ] `mise run services-check`
- [ ] After merge: `argocd app set authentik --revision main && argocd app sync authentik`

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/275
2026-03-01 16:28:36 -08:00
..
authentik Fix authentik 2026.2.0 migration ordering bug (#275) 2026-03-01 16:28:36 -08:00
configuration Review manage-forgejo-mirrors doc: clarify cron default, stamp reviewed 2026-02-26 07:17:18 -08:00
deployment Document container tag provenance and enhance container-list (#263) 2026-02-24 09:54:58 -08:00
forgejo-runner Review forgejo-runner docs: stamp reviewed, fix cross-links 2026-02-27 15:10:20 -08:00
grafana Review build-grafana-container docs: stamp reviewed, fix cross-links 2026-02-28 07:28:06 -08:00
knowledgebase Replace indri-runner-logs with general-purpose runner-logs Typer CLI (#244) 2026-02-22 10:20:11 -08:00
operations Review gandi-operations doc and reorganize how-to guides (#200) 2026-02-17 07:29:33 -08:00
plans Document AirPlay cross-VLAN firewall rules and fix rule ordering 2026-02-24 20:49:31 -08:00
ringtail Update ringtail flake inputs, add flake-update pipeline (#240) 2026-02-22 08:17:52 -08:00
zot Migrate upstream mirrors to mirrors/ Forgejo org (#265) 2026-02-24 20:43:14 -08:00
agent-change-process.md C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
how-to.md C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00