rac: prevent SSH connections from connecting to wrong endpoint

[dominic-r]

When using multiple SSH RAC endpoints, connections would sometimes connect to previously used endpoints instead of the newly selected one.

Closes #13609
Closes #13583

Details

REPLACE ME

---

Checklist

• Local tests pass (ak test authentik/)
• The code has been formatted (make lint-fix)

If an API change has been made

• The API schema has been updated (make gen-build)

If changes to the frontend have been made

• The code has been formatted (make web)

If applicable

• The documentation has been updated
• The documentation has been formatted (make website)

[netlify]

✅ Deploy Preview for authentik-docs canceled.

Name	Link
🔨 Latest commit	462a04f
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-docs/deploys/680e634b24f04700073e8a9c

[netlify]

✅ Deploy Preview for authentik-storybook canceled.

Name	Link
🔨 Latest commit	462a04f
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-storybook/deploys/680e634bf60d550008f100ce

[codecov]

Codecov Report

Attention: Patch coverage is 22.22222% with 7 lines in your changes missing coverage. Please review.

Project coverage is 92.70%. Comparing base (3c6b8b1) to head (462a04f).
Report is 152 commits behind head on main.

Files with missing lines	Patch %	Lines
authentik/providers/rac/views.py	28.57%	5 Missing ⚠️
authentik/providers/rac/consumer_client.py	0.00%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #13589      +/-   ##
==========================================
- Coverage   92.71%   92.70%   -0.02%     
==========================================
  Files         809      809              
  Lines       41533    41538       +5     
==========================================
  Hits        38506    38506              
- Misses       3027     3032       +5     

Flag	Coverage Δ
e2e	47.77% <0.00%> (-0.01%)	⬇️
integration	24.39% <0.00%> (-0.01%)	⬇️
unit	90.56% <22.22%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[crazy-kol]

So this will fix that issue?

[dominic-r]

So this will fix that issue?

yes

[crazy-kol]

So this will fix that issue?

yes

How do I download this update and deploy it on my server?

[dominic-r]

I wouldn't suggest doing this for now as this is still in the development phase and may contain bugs.

[dominic-r]

It should be included in hopefully 2025.4

[crazy-kol]

It should be included in hopefully 2025.4

And how long till that?

[crazy-kol]

Is there a way to use this before the actual release?

[dominic-r]

It should be included in hopefully 2025.4

And how long till that?

Probably mid to end april

[crazy-kol]

It should be included in hopefully 2025.4

And how long till that?

Probably mid to end april

Is there a way to use this before the actual release?

[dominic-r]

Is there a way to use this before the actual release?

You can follow a rebase process similar to #13463 (comment) and build a custom docker container to then deploy on your k8s cluster for example. Do note that since this is still a draft and has not been reviewed by the other members of the team, you may encounter issues. If you do, please LMK and I'll do my best to resolve them

[crazy-kol]

Is there a way to use this before the actual release?

You can follow a rebase process similar to #13463 (comment) and build a custom docker container to then deploy on your k8s cluster for example. Do note that since this is still a draft and has not been reviewed by the other members of the team, you may encounter issues. If you do, please LMK and I'll do my best to resolve them

Is there any way that we could talk on discord and you could help me do this?

[dominic-r]

Sure, my user is 4d62. I'm on the authentik Discord

[lightumcc]

Any updates on this PR? Can’t wait to apply this fix