blumeops/docs/how-to/authentik
Erich Blume 2d4098e480
All checks were successful
Build Container / detect (push) Successful in 2s
Build Container (Nix) / detect (push) Successful in 1s
Build Container / build (authentik) (push) Successful in 1s
Build Container (Nix) / build (authentik) (push) Successful in 3m6s
Fix authentik 2026.2.0 migration ordering bug (#275)
## Summary

- Patch `authentik_rbac/0010` migration to depend on `authentik_core/0056`, fixing non-deterministic ordering that crashes startup with `FieldError: Cannot resolve keyword 'group_id'`
- Upstream bug: goauthentik/authentik#19616, #20634 — no fix released yet
- Document the issue in the lessons-learned table

## Deployment and Testing

- [ ] CI builds container image
- [ ] Deploy from branch: `argocd app set authentik --revision fix/authentik-migration-ordering && argocd app sync authentik`
- [ ] Pods reach Running/Ready without crash-looping
- [ ] `kubectl logs` show 0056 migrating before 0010
- [ ] authentik UI loads at authentik.ops.eblu.me
- [ ] `mise run services-check`
- [ ] After merge: `argocd app set authentik --revision main && argocd app sync authentik`

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/275
2026-03-01 16:28:36 -08:00
..
authentik-api-client-generation.md C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
authentik-go-server-derivation.md C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
authentik-python-backend-derivation.md Fix authentik 2026.2.0 migration ordering bug (#275) 2026-03-01 16:28:36 -08:00
authentik-web-ui-derivation.md C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
build-authentik-container.md Review 3 docs: agent-change-process, build-authentik-container, create-authentik-secrets (#243) 2026-02-22 09:12:31 -08:00
build-authentik-from-source.md C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
create-authentik-secrets.md Review 3 docs: agent-change-process, build-authentik-container, create-authentik-secrets (#243) 2026-02-22 09:12:31 -08:00
deploy-authentik.md Review deploy-authentik: rewrite as process guide (#257) 2026-02-23 14:35:39 -08:00
migrate-grafana-to-authentik.md Review migrate-grafana-to-authentik: fix file paths, add last-reviewed 2026-02-24 07:29:41 -08:00
mirror-authentik-build-deps.md C2: Build authentik from source (Mikado chain) (#274) 2026-03-01 13:45:00 -08:00
provision-authentik-database.md Review 3 how-to docs and fix update-tailscale-acls inaccuracies 2026-02-25 07:02:49 -08:00