chore(deps): update helm release authentik to v2024

[renovate]

This PR contains the following updates:

Package	Update	Change
authentik (source)	major	2023.10.7 -> 2024.6.1

---

Release Notes

goauthentik/helm (authentik)

v2024.6.1

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• bump to 2024.6.1 by @​BeryJu in https://github.com/goauthentik/helm/pull/275

Full Changelog: goauthentik/helm@authentik-2024.6.0...authentik-2024.6.1

v2024.6.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• authentik: add option to set serviceaccount by @​wrenix in https://github.com/goauthentik/helm/pull/253
• bump to 2024.6.0 by @​rissson in https://github.com/goauthentik/helm/pull/273

Full Changelog: goauthentik/helm@authentik-2024.4.2...authentik-2024.6.0

v2024.4.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• bump CI install timeout by @​BeryJu in https://github.com/goauthentik/helm/pull/267
• fix(charts/authentik): increase initial delay of worker startup probe by @​channel-42 in https://github.com/goauthentik/helm/pull/266
• bump to 2024.4.2 by @​rissson in https://github.com/goauthentik/helm/pull/268

Full Changelog: goauthentik/helm@authentik-2024.4.1...authentik-2024.4.2

v2024.4.1

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• bump to 2024.4.1 by @​BeryJu in https://github.com/goauthentik/helm/pull/264

Full Changelog: goauthentik/helm@authentik-2024.4.0...authentik-2024.4.1

v2024.4.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• Fix secret key name by @​sherif-fanous in https://github.com/goauthentik/helm/pull/260
• Bump helm/kind-action from 1.9.0 to 1.10.0 by @​dependabot in https://github.com/goauthentik/helm/pull/261
• feat(charts/authentik): add probes to worker deployment by @​channel-42 in https://github.com/goauthentik/helm/pull/255
• bump to 2024.4 by @​BeryJu in https://github.com/goauthentik/helm/pull/262

New Contributors

• @​channel-42 made their first contribution in https://github.com/goauthentik/helm/pull/255

Full Changelog: goauthentik/helm@authentik-2024.2.3...authentik-2024.4.0

v2024.2.3

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• authentik: ci: rename values files to run with chart-testing correctly by @​wrenix in https://github.com/goauthentik/helm/pull/249
• authentik: ci: add extraContainers testing by @​wrenix in https://github.com/goauthentik/helm/pull/248
• authentik: worker deployment: fix volume type for secret blueprints by @​sherif-fanous in https://github.com/goauthentik/helm/pull/257
• bump to 2024.2.3 by @​BeryJu in https://github.com/goauthentik/helm/pull/259

New Contributors

• @​sherif-fanous made their first contribution in https://github.com/goauthentik/helm/pull/257

Full Changelog: goauthentik/helm@authentik-2024.2.2...authentik-2024.2.3

v2024.2.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• authentik: fix formating error in geoip sidecar by @​Schmoaaaaah in https://github.com/goauthentik/helm/pull/245
• Bump azure/setup-helm from 3 to 4 by @​dependabot in https://github.com/goauthentik/helm/pull/246
• authentik: fix extraContainers indentation by @​wrenix in https://github.com/goauthentik/helm/pull/250
• bump to 2024.2.2 by @​BeryJu in https://github.com/goauthentik/helm/pull/252

New Contributors

• @​Schmoaaaaah made their first contribution in https://github.com/goauthentik/helm/pull/245
• @​wrenix made their first contribution in https://github.com/goauthentik/helm/pull/250

Full Changelog: goauthentik/helm@authentik-2024.2.1...authentik-2024.2.2

v2024.2.1

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• authentik: fix additional objects templating by @​rissson in https://github.com/goauthentik/helm/pull/242
• bump to version 2024.2.1 by @​BeryJu in https://github.com/goauthentik/helm/pull/243

Full Changelog: goauthentik/helm@authentik-2024.2.0...authentik-2024.2.1

v2024.2.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

Breaking changes

The vendored Bitnami PostgreSQL and Redis Helm charts have been removed and now use upstream versions.

The PostgreSQL Helm chart has been updated from 10.16.2 to 12.12.10. The full diff is here but is quite large. We recommend checking out the upstream release notes for the 11.x.x and 12.x.x upgrades. Among the changes you may be required to do, the postgresql.persistence key has been renamed to postgresql.primary.persistence, postgresql.postgresqlPassword to postgresql.auth.password, postgresql.existingSecret to postgresql.auth.existingSecret. Note that this update does not change the major version of PostgreSQL, so no manual intervention is required on that side.

The Redis Helm chart has been updated from 15.7.6 to 18.6.1. The full diff is here but is quite large. We recommend checking out the upstream release notes for the 16.x.x, 17.x.x and 18.x.x upgrades. If you do not have any custom values, no action is required. Not that this upgrades the major Redis version from 6 to 7, and thus no rollback is possible.

Ingress versions before networking.k8s.io/v1 are not supported anymore.

blueprints has been renamed to blueprints.configMaps and blueprints.secrets has been added to import blueprints from secrets.

image has been renamed to global.image, and can now be overridden for the server and worker with server.image and worker.image.

image.pullSecrets has been renamed to global.imagePullSecrets, and can now be overridden for the server and worker with server.imagePullSecrets and worker.imagePullSecrets.

annotations has been renamed global.deploymentAnnotations, and additional annotations can now be configured for only the server or worker with server.deploymentAnnotations and worker.deploymentAnnotations.

podAnnotations has been renamed global.podAnnotations, and additional annotations can now be configured for only the server or worker with server.podAnnotations and worker.podAnnotations.

nodeSelector has been renamed to global.nodeSelector, and can now be overridden for the server and worker with server.nodeSelector and worker.nodeSelector.

tolerations has been renamed to global.tolerations, and can now be overridden for the server and worker with server.tolerations and worker.tolerations.

affinity has been removed and replaced by the reworked global.affinity which pre-sets affinity rules. It is possible override those rules for the server and worker with server.affinity and worker.affinity.

env, envValueFrom and envFrom have been removed and replaced by global.env and global.envFrom. global.env now puts the configured list directly into the deployment, without modifications as the previous setting used to do. It is now also possible to pass environment variables to only the server or worker with server.env, worker.env, server.envFrom and worker.envFrom.

additionalContainers has been removed and replaced by server.extraContainers and worker.extraContainers. The previous dictionary must now be a list and name is a required property.

initContainers has been removed and replaced by server.initContainers and worker.initContainers. The previous dictionary must now be a list and name is a required property.

volumes and volumeMounts have been renamed to global.volumes and global.volumeMounts. Additionally, server.volumes, worker.volumes, server.volumeMounts and worker.volumeMounts have been added.

replicas has been renamed to server.replicas.

strategy has been renamed to server.deploymentStrategy. worker.strategy has been renamed to worker.deploymentStrategy. global.deploymentStrategy has been added to configure deployment strategy for all authentik deployments.

priorityClassName has been renamed to server.priorityClassName. Also, server.priorityClassName and worker.priorityClassName can be used with global.priorityClassName.

containerSecurityContext has been renamed to server.containerSecurityContext.

livenessProbe, readinessProbe and startupProbe have been renamed to server.livenessProbe, server.readinessProbe and server.startupProbe. Additionally, the enabled option of those has been removed. If you need to disable those, you can do server.readinessProbe: ~ in your values. Also, some defaults have been reworked.

autoscaling.server has been renamed to server.autoscaling and autoscaling.worker has been renamed to worker.autoscaling.

pdb.server has been renamed to server.pdb and pdb.worker has been renamed to worker.pdb.

resources.server has been renamed to server.resources and resources.worker has been renamed to worker.resources.

service has been renamed server.service. Inside the service definition, port has been renamed servicePortHttp, nodePort has been renamed nodePortHttp, name has been renamed to servicePortHttpName, protocol has been removed. A lot of options have been added to customize it.

prometheus.serviceMonitor has been renamed to server.metrics.serviceMonitor. Inside the service monitor definition, create has been renamed to enabled.

prometheus.rules.create has been renamed to prometheus.rules.enabled. Additional options have also been added for more configurability.

ingress has been renamed to server.ingress. Additionally, the hosts key has been replaced by a list of hosts and paths, instead of a stand-in for an ingress definition. Additional keys are now also available for more configurability.

The geoip.image has been broken up into a dictionary following the other images definitions.

The GeoIP image repository has been changed from docker.io/maxmindinc/geoipupdate to ghcr.io/maxmind/geoipupdate. The image version has been ugpraded from 4.8 to 6.0.0

New features

global.additionalLabels has been added for labels to be applied to all resources.

Add global.revisionHistoryLimit for the number of deployment ReplicaSets to retain.

global.podLabels, server.podLabels and worker.podLabels have been added to configure extra labels to add the the deployed pods.

global.addPrometheusAnnotations allows for Prometheus annotations to be added to metrics services. This can be used as an alternative to the ServiceMonitors.

global.securityContext has been added to define pod-level security context for all deployed pods.

global.topologySpreadConstraints has been added to define topology spread constraints rules for all components.

The autoscaling configuration has gained some more configurability. Check out the values.yaml for more information.

server.terminationGracePeriodSeconds has been added and is set to a value of 30 by default.

Add the ability to use an existing secret for GeoIP credentials with geoip.existingSecret.

additionalObjects has been added to allow deploying other Kubernetes objects.

What's Changed

• authentik chart rework by @​rissson in https://github.com/goauthentik/helm/pull/230

Full Changelog: goauthentik/helm@authentik-2024.2.0-rc2...authentik-2024.2.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

--- . Kustomization: flux-system/flux-system HelmRelease: auth/authentik

+++ . Kustomization: flux-system/flux-system HelmRelease: auth/authentik

@@ -6,13 +6,13 @@

   namespace: auth
 spec:
   interval: 1h
   chart:
     spec:
       chart: authentik
-      version: 2023.10.7
+      version: 2024.6.1
       sourceRef:
         kind: HelmRepository
         name: authentik
         namespace: auth
   values:
     ingress: