fix: deploy the available AuthentikServer image default #68

Merged

morten-olsen merged 1 commit from fix/47b21c6c-authentik-default into main 2026-10-24 22:49:48 +02:00

Conversation 0 Commits 1 Files changed 2 +2 -2

morten-olsen commented 2026-10-24 21:35:18 +02:00

Owner

• Copy link
• Copy Markdown

Summary

Deploy the available AuthentikServer image default after operator 0.1.3 publication:

- authentik-operator: 0.1.2
+ authentik-operator: 0.1.3

Publish homelab-core 0.1.8. Household Authentik remains explicitly pinned to 2026.8.3. Operator #2 merged and its artifacts were verified before this rollout; Morten approved both publications.

Evidence

• Approved patch 6a169ac rebased to c3a21b8 over the concurrent monitoring fix; range-diff reports identical patch. Full canonical chart/render/rule checks and API server dry-run pass.
• Woodpecker rebased PR #145/push #144 and main #146 pass. Chart publication 40131539597 succeeds; downloaded core 0.1.8 values match merged source exactly.
• Live core c3a21b8 and Authentik chart 0.1.3 are Synced/Healthy. Operator rollout succeeded at its published digest, 1 Ready replica and 0 restarts. Live CRD and omitted-image admission dry-run default to 2026.8.5.
• Existing Authentik server/worker retain their 2026.8.3 image, Deployment generations, pod IDs and restart counts; shared PVC IDs unchanged/Bound. Authentik readiness and NetBird discovery HTTP 200.
• Main operator Kind E2E passes all 4 specs, including an omitted-image CR becoming Ready and client readiness against it.

Merge danger

Door: one-way for chart publication; two-way for operator pin.
Main published the approved core 0.1.8 chart; automatic Argo reconciliation deployed the pin.

Blast radius: app
Only operator and CRD default changed; no household data/credential migration, exposure, RBAC or resource changes.

Rollback and verification

• Roll back: restore operator 0.1.2 pin through Forgejo. Published artifacts and new persisted CR defaults remain.
• Verify after rollout: completed as above; HOMEIT-429 retains exact digests, mirror/pipeline evidence and before/after snapshots. Base #58 records deployed pointers.
• Reviewers: owner self-review. Existing CI promtool Falco recurrence evidence retained in HOMEIT-274 without suppression/waiver.

## Summary Deploy the available AuthentikServer image default after operator 0.1.3 publication: ```diff - authentik-operator: 0.1.2 + authentik-operator: 0.1.3 ``` Publish homelab-core 0.1.8. Household Authentik remains explicitly pinned to 2026.8.3. Operator #2 merged and its artifacts were verified before this rollout; Morten approved both publications. ## Evidence - Approved patch 6a169ac rebased to c3a21b8 over the concurrent monitoring fix; range-diff reports identical patch. Full canonical chart/render/rule checks and API server dry-run pass. - Woodpecker rebased PR #145/push #144 and [main #146](https://woodpecker.olsen.cloud/repos/6/pipeline/146) pass. [Chart publication 40131539597](https://github.com/morten-olsen/homelab-core/actions/runs/40131539597) succeeds; downloaded core 0.1.8 values match merged source exactly. - Live core c3a21b8 and Authentik chart 0.1.3 are Synced/Healthy. Operator rollout succeeded at its published digest, 1 Ready replica and 0 restarts. Live CRD and omitted-image admission dry-run default to 2026.8.5. - Existing Authentik server/worker retain their 2026.8.3 image, Deployment generations, pod IDs and restart counts; shared PVC IDs unchanged/Bound. Authentik readiness and NetBird discovery HTTP 200. - Main operator Kind E2E passes all 4 specs, including an omitted-image CR becoming Ready and client readiness against it. ## Merge danger **Door:** one-way for chart publication; two-way for operator pin. Main published the approved core 0.1.8 chart; automatic Argo reconciliation deployed the pin. **Blast radius:** app Only operator and CRD default changed; no household data/credential migration, exposure, RBAC or resource changes. ## Rollback and verification - **Roll back:** restore operator 0.1.2 pin through Forgejo. Published artifacts and new persisted CR defaults remain. - **Verify after rollout:** completed as above; HOMEIT-429 retains exact digests, mirror/pipeline evidence and before/after snapshots. Base #58 records deployed pointers. - **Reviewers:** owner self-review. Existing CI promtool Falco recurrence evidence retained in HOMEIT-274 without suppression/waiver.

morten-olsen added 1 commit 2026-10-24 21:35:18 +02:00

fix: deploy the available AuthentikServer image default 6a169acd7c

morten-olsen force-pushed fix/47b21c6c-authentik-default from 6a169acd7c to c3a21b80dc 2026-10-24 22:31:58 +02:00 Compare

morten-olsen changed title from WIP: fix: deploy the available AuthentikServer image default to fix: deploy the available AuthentikServer image default 2026-10-24 22:49:47 +02:00

morten-olsen merged commit c3a21b80dc into main 2026-10-24 22:49:48 +02:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

bug

Something isn't working

  

documentation

Improvements or additions to documentation

  

duplicate

This issue or pull request already exists

  

enhancement

New feature or request

  

good first issue

Good for newcomers

  

help wanted

Extra attention is needed

  

invalid

This doesn't seem right

  

question

Further information is requested

  

wontfix

This will not be worked on

No labels

bug

documentation

duplicate

enhancement

good first issue

help wanted

invalid

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

homelab/core!68

No description provided.