blumeops/containers
Erich Blume 2d4098e480
All checks were successful
Build Container / detect (push) Successful in 2s
Build Container (Nix) / detect (push) Successful in 1s
Build Container / build (authentik) (push) Successful in 1s
Build Container (Nix) / build (authentik) (push) Successful in 3m6s
Fix authentik 2026.2.0 migration ordering bug (#275)
## Summary

- Patch `authentik_rbac/0010` migration to depend on `authentik_core/0056`, fixing non-deterministic ordering that crashes startup with `FieldError: Cannot resolve keyword 'group_id'`
- Upstream bug: goauthentik/authentik#19616, #20634 — no fix released yet
- Document the issue in the lessons-learned table

## Deployment and Testing

- [ ] CI builds container image
- [ ] Deploy from branch: `argocd app set authentik --revision fix/authentik-migration-ordering && argocd app sync authentik`
- [ ] Pods reach Running/Ready without crash-looping
- [ ] `kubectl logs` show 0056 migrating before 0010
- [ ] authentik UI loads at authentik.ops.eblu.me
- [ ] `mise run services-check`
- [ ] After merge: `argocd app set authentik --revision main && argocd app sync authentik`

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/275
2026-03-01 16:28:36 -08:00
..
authentik Fix authentik 2026.2.0 migration ordering bug (#275) 2026-03-01 16:28:36 -08:00
cv Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
devpi Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
grafana C2: Upgrade Grafana to 12.x with Nix container and Kustomize (#260) 2026-02-23 18:07:18 -08:00
homepage Migrate upstream mirrors to mirrors/ Forgejo org (#265) 2026-02-24 20:43:14 -08:00
kiwix-serve Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
kubectl Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
miniflux Switch prometheus, teslamate, miniflux to forge mirrors 2026-02-24 21:01:08 -08:00
navidrome Migrate upstream mirrors to mirrors/ Forgejo org (#265) 2026-02-24 20:43:14 -08:00
nettest Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
ntfy Migrate upstream mirrors to mirrors/ Forgejo org (#265) 2026-02-24 20:43:14 -08:00
prometheus Switch prometheus, teslamate, miniflux to forge mirrors 2026-02-24 21:01:08 -08:00
quartz Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
runner-job-image Rename containers/forgejo-runner to runner-job-image 2026-02-23 17:44:51 -08:00
teslamate Switch prometheus, teslamate, miniflux to forge mirrors 2026-02-24 21:01:08 -08:00
transmission Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00