chore(deps): update helm release authentik to v2023.10.6 #392
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
1a7f690
to
ca11de3
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
ca11de3
to
d622806
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
d622806
to
11b719f
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
11b719f
to
d62c5f7
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
d62c5f7
to
765dda3
Compare
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
765dda3
to
45b148f
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
45b148f
to
dccc3f6
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
dccc3f6
to
6885abf
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
6885abf
to
a845392
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
a845392
to
8fa2195
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
8fa2195
to
b5ff190
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
b5ff190
to
df492a9
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
df492a9
to
3535604
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
3535604
to
c9210b8
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
c9210b8
to
a276930
Compare
--- . Kustomization: flux-system/flux-system HelmRelease: auth/authentik
+++ . Kustomization: flux-system/flux-system HelmRelease: auth/authentik
@@ -6,13 +6,13 @@
namespace: auth
spec:
interval: 1h
chart:
spec:
chart: authentik
- version: 2023.5.1
+ version: 2023.10.6
sourceRef:
kind: HelmRepository
name: authentik
namespace: auth
values:
ingress:
@@ -26,32 +26,12 @@
paths:
- path: /
tls:
- hosts:
- auth.bo0tzz.me
secretName: authentik-web-tls
- envFrom:
- - secretRef:
- name: authentik-secret
- envValueFrom:
- AUTHENTIK_POSTGRESQL__HOST:
- secretKeyRef:
- name: authentik-postgres-authentik
- key: HOST
- AUTHENTIK_POSTGRESQL__NAME:
- secretKeyRef:
- name: authentik-postgres-authentik
- key: DATABASE_NAME
- AUTHENTIK_POSTGRESQL__USER:
- secretKeyRef:
- name: authentik-postgres-authentik
- key: LOGIN
- AUTHENTIK_POSTGRESQL__PASSWORD:
- secretKeyRef:
- name: authentik-postgres-authentik
- key: PASSWORD
authentik:
log_level: trace
email:
port: 465
use_ssl: true
postgresql:
@@ -62,7 +42,44 @@
storageClass: zfs-iscsi
prometheus:
rules:
create: true
serviceMonitor:
create: true
+ valuesFrom:
+ - kind: Secret
+ name: authentik-secret
+ valuesKey: AUTHENTIK_SECRET_KEY
+ targetPath: authentik.secret_key
+ - kind: Secret
+ name: authentik-secret
+ valuesKey: AUTHENTIK_EMAIL__HOST
+ targetPath: authentik.email.host
+ - kind: Secret
+ name: authentik-secret
+ valuesKey: AUTHENTIK_EMAIL__USERNAME
+ targetPath: authentik.email.username
+ - kind: Secret
+ name: authentik-secret
+ valuesKey: AUTHENTIK_EMAIL__PASSWORD
+ targetPath: authentik.email.password
+ - kind: Secret
+ name: authentik-secret
+ valuesKey: AUTHENTIK_EMAIL__FROM
+ targetPath: authentik.email.from
+ - kind: Secret
+ name: authentik-postgres-authentik
+ valuesKey: HOST
+ targetPath: authentik.postgresql.host
+ - kind: Secret
+ name: authentik-postgres-authentik
+ valuesKey: LOGIN
+ targetPath: authentik.postgresql.user
+ - kind: Secret
+ name: authentik-postgres-authentik
+ valuesKey: PASSWORD
+ targetPath: authentik.postgresql.password
+ - kind: Secret
+ name: authentik-postgres-authentik
+ valuesKey: DATABASE_NAME
+ targetPath: authentik.postgresql.name
|
--- . HelmRelease: auth/authentik ClusterRoleBinding: auth/authentik-auth
+++ . HelmRelease: auth/authentik ClusterRoleBinding: auth/authentik-auth
@@ -1,13 +1,13 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: authentik-auth
labels:
- app.kubernetes.io/name: serviceAccount
+ app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: authentik-auth
--- . HelmRelease: auth/authentik Deployment: auth/authentik-worker
+++ . HelmRelease: auth/authentik Deployment: auth/authentik-worker
@@ -7,85 +7,38 @@
app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: worker
spec:
replicas: 1
+ strategy: {}
selector:
matchLabels:
app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/component: worker
template:
metadata:
labels:
app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/component: worker
+ annotations:
+ goauthentik.io/config-checksum: 4718aac012b639008b6cdca45251a21fa12f9dc096740549e4d469697aecb465
spec:
serviceAccountName: authentik
enableServiceLinks: true
- priorityClassName: null
securityContext: {}
containers:
- name: authentik
- image: ghcr.io/goauthentik/server:2023.5.1
+ image: ghcr.io/goauthentik/server:2023.10.6
imagePullPolicy: IfNotPresent
args:
- worker
- env:
- - name: AUTHENTIK_EMAIL__PORT
- value: '465'
- - name: AUTHENTIK_EMAIL__TIMEOUT
- value: '30'
- - name: AUTHENTIK_EMAIL__USE_SSL
- value: 'true'
- - name: AUTHENTIK_EMAIL__USE_TLS
- value: 'false'
- - name: AUTHENTIK_ERROR_REPORTING__ENABLED
- value: 'false'
- - name: AUTHENTIK_ERROR_REPORTING__ENVIRONMENT
- value: k8s
- - name: AUTHENTIK_ERROR_REPORTING__SEND_PII
- value: 'false'
- - name: AUTHENTIK_GEOIP
- value: /geoip/GeoLite2-City.mmdb
- - name: AUTHENTIK_LOG_LEVEL
- value: trace
- - name: AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE
- value: ghcr.io/goauthentik/%(type)s:%(version)s
- - name: AUTHENTIK_POSTGRESQL__HOST
- value: authentik-postgresql
- - name: AUTHENTIK_POSTGRESQL__NAME
- value: authentik
- - name: AUTHENTIK_POSTGRESQL__PORT
- value: '5432'
- - name: AUTHENTIK_POSTGRESQL__USER
- value: authentik
- - name: AUTHENTIK_REDIS__HOST
- value: authentik-redis-master
- - name: AUTHENTIK_POSTGRESQL__HOST
- valueFrom:
- secretKeyRef:
- key: HOST
- name: authentik-postgres-authentik
- - name: AUTHENTIK_POSTGRESQL__NAME
- valueFrom:
- secretKeyRef:
- key: DATABASE_NAME
- name: authentik-postgres-authentik
- - name: AUTHENTIK_POSTGRESQL__PASSWORD
- valueFrom:
- secretKeyRef:
- key: PASSWORD
- name: authentik-postgres-authentik
- - name: AUTHENTIK_POSTGRESQL__USER
- valueFrom:
- secretKeyRef:
- key: LOGIN
- name: authentik-postgres-authentik
+ env: null
envFrom:
- secretRef:
- name: authentik-secret
+ name: authentik
volumeMounts: null
+ securityContext: {}
volumes: null
--- . HelmRelease: auth/authentik Role: auth/authentik
+++ . HelmRelease: auth/authentik Role: auth/authentik
@@ -2,13 +2,13 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: authentik
namespace: auth
labels:
- app.kubernetes.io/name: serviceAccount
+ app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
- ''
resources:
@@ -42,12 +42,13 @@
- create
- delete
- list
- patch
- apiGroups:
- traefik.containo.us
+ - traefik.io
resources:
- middlewares
verbs:
- get
- create
- delete
--- . HelmRelease: auth/authentik RoleBinding: auth/authentik
+++ . HelmRelease: auth/authentik RoleBinding: auth/authentik
@@ -2,13 +2,13 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: authentik
namespace: auth
labels:
- app.kubernetes.io/name: serviceAccount
+ app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: authentik
--- . HelmRelease: auth/authentik ClusterRole: auth/authentik-auth
+++ . HelmRelease: auth/authentik ClusterRole: auth/authentik-auth
@@ -1,13 +1,13 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: authentik-auth
labels:
- app.kubernetes.io/name: serviceAccount
+ app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
- apiextensions.k8s.io
resources:
--- . HelmRelease: auth/authentik Deployment: auth/authentik-server
+++ . HelmRelease: auth/authentik Deployment: auth/authentik-server
@@ -7,88 +7,39 @@
app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: server
spec:
replicas: 1
+ strategy: {}
selector:
matchLabels:
app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/component: server
template:
metadata:
labels:
app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/component: server
+ annotations:
+ goauthentik.io/config-checksum: 4718aac012b639008b6cdca45251a21fa12f9dc096740549e4d469697aecb465
spec:
- serviceAccountName: authentik
enableServiceLinks: true
- priorityClassName: null
securityContext: {}
containers:
- name: authentik
- image: ghcr.io/goauthentik/server:2023.5.1
+ image: ghcr.io/goauthentik/server:2023.10.6
imagePullPolicy: IfNotPresent
args:
- server
- env:
- - name: AUTHENTIK_EMAIL__PORT
- value: '465'
- - name: AUTHENTIK_EMAIL__TIMEOUT
- value: '30'
- - name: AUTHENTIK_EMAIL__USE_SSL
- value: 'true'
- - name: AUTHENTIK_EMAIL__USE_TLS
- value: 'false'
- - name: AUTHENTIK_ERROR_REPORTING__ENABLED
- value: 'false'
- - name: AUTHENTIK_ERROR_REPORTING__ENVIRONMENT
- value: k8s
- - name: AUTHENTIK_ERROR_REPORTING__SEND_PII
- value: 'false'
- - name: AUTHENTIK_GEOIP
- value: /geoip/GeoLite2-City.mmdb
- - name: AUTHENTIK_LOG_LEVEL
- value: trace
- - name: AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE
- value: ghcr.io/goauthentik/%(type)s:%(version)s
- - name: AUTHENTIK_POSTGRESQL__HOST
- value: authentik-postgresql
- - name: AUTHENTIK_POSTGRESQL__NAME
- value: authentik
- - name: AUTHENTIK_POSTGRESQL__PORT
- value: '5432'
- - name: AUTHENTIK_POSTGRESQL__USER
- value: authentik
- - name: AUTHENTIK_REDIS__HOST
- value: authentik-redis-master
- - name: AUTHENTIK_POSTGRESQL__HOST
- valueFrom:
- secretKeyRef:
- key: HOST
- name: authentik-postgres-authentik
- - name: AUTHENTIK_POSTGRESQL__NAME
- valueFrom:
- secretKeyRef:
- key: DATABASE_NAME
- name: authentik-postgres-authentik
- - name: AUTHENTIK_POSTGRESQL__PASSWORD
- valueFrom:
- secretKeyRef:
- key: PASSWORD
- name: authentik-postgres-authentik
- - name: AUTHENTIK_POSTGRESQL__USER
- valueFrom:
- secretKeyRef:
- key: LOGIN
- name: authentik-postgres-authentik
+ env: null
envFrom:
- secretRef:
- name: authentik-secret
+ name: authentik
volumeMounts: null
ports:
- name: http
containerPort: 9000
protocol: TCP
- name: http-metrics
@@ -98,16 +49,22 @@
containerPort: 9443
protocol: TCP
livenessProbe:
httpGet:
path: /-/health/live/
port: http
- initialDelaySeconds: 50
+ initialDelaySeconds: 5
periodSeconds: 10
+ startupProbe:
+ failureThreshold: 60
+ httpGet:
+ path: /-/health/live/
+ port: http
+ periodSeconds: 5
readinessProbe:
httpGet:
path: /-/health/ready/
port: http
- initialDelaySeconds: 50
periodSeconds: 10
+ securityContext: {}
volumes: null
--- . HelmRelease: auth/authentik PrometheusRule: auth/authentik
+++ . HelmRelease: auth/authentik PrometheusRule: auth/authentik
@@ -139,14 +139,13 @@
annotations:
summary: Pending database migrations
message: authentik instance {{ $labels.instance }} has pending database migrations
- alert: FailedSystemTasks
labels:
severity: critical
- expr: sum(increase(authentik_system_tasks{status="TaskResultStatus.ERROR"}[2h]))
- > 0
+ expr: sum(increase(authentik_system_tasks{status="error"}[2h])) > 0
for: 2h
annotations:
summary: Failed system tasks
message: System task {{ $labels.task_name }} has failed
- alert: DisconnectedOutposts
labels:
--- . HelmRelease: auth/authentik ServiceAccount: auth/authentik
+++ . HelmRelease: auth/authentik ServiceAccount: auth/authentik
@@ -2,10 +2,10 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: authentik
namespace: auth
labels:
- app.kubernetes.io/name: serviceAccount
+ app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/managed-by: Helm
--- . HelmRelease: auth/authentik Service: auth/authentik
+++ . HelmRelease: auth/authentik Service: auth/authentik
@@ -7,13 +7,13 @@
app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik
app.kubernetes.io/managed-by: Helm
spec:
type: ClusterIP
ports:
- - port: 9100
+ - port: 9300
name: http-metrics
protocol: TCP
targetPort: http-metrics
- port: 80
targetPort: http
protocol: TCP |
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
7 times, most recently
from
57052b7
to
04de89c
Compare
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
04de89c
to
edcf534
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
edcf534
to
3237310
Compare
renovate
bot
force-pushed
the
renovate/authentik-2023.x
branch
from
3237310
to
af0588b
Compare
renovate
bot
changed the title
bo0tzz
approved these changes
Jan 10, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2023.5.1->2023.10.6Release Notes
goauthentik/helm (authentik)
v2023.10.6Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.10.5...authentik-2023.10.6
v2023.10.5Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.10.4...authentik-2023.10.5
v2023.10.4Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.10.3...authentik-2023.10.4
v2023.10.3Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.10.2...authentik-2023.10.3
v2023.10.2Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.10.1...authentik-2023.10.2
v2023.10.1Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
Note about upcoming breaking change
The first 2024.x version of this chart will see a rework that will include breaking changes. Please plan accordingly for that update.
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.10.0...authentik-2023.10.1
v2023.10.0Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
Note about upcoming breaking change
The first 2024.x version of this chart will see a rework that will include breaking changes. Please plan accordingly for that update.
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.8.3...authentik-2023.10.0
v2023.8.3Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.8.2...authentik-2023.8.3
v2023.8.2Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.8.1...authentik-2023.8.2
v2023.8.1Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.8.0...authentik-2023.8.1
v2023.8.0Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@postgresql-12.8.2...authentik-2023.8.0
v2023.6.3Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-remote-cluster-1.2.2...authentik-2023.6.3
v2023.6.2Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.6.1...authentik-2023.6.2
v2023.6.1Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.6.0...authentik-2023.6.1
v2023.6.0Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.5.5...authentik-2023.6.0
v2023.5.5Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-remote-cluster-1.2.1...authentik-2023.5.5
v2023.5.4Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.5.3...authentik-2023.5.4
v2023.5.3Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
Full Changelog: goauthentik/helm@authentik-2023.5.2...authentik-2023.5.3
v2023.5.2Compare Source
authentik is an open-source Identity Provider focused on flexibility and versatility
What's Changed
New Contributors
Full Changelog: goauthentik/helm@authentik-2023.5.1...authentik-2023.5.2
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.