Skip to content

feat(authentik): bump to 2026.2.2 and Postgres 18 #818

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Nico-Pergande wants to merge 1 commit into
base: canary
Choose a base branch
from
Open

feat(authentik): bump to 2026.2.2 and Postgres 18 #818

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions blueprints/authentik/docker-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
version: "3.8"
services:
postgresql:
Copy link

Copilot AI Apr 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Postgres major version bump (16 → 18) will prevent existing deployments from starting with the current database volume. Since most users consume blueprints without reading the PR description, add an inline note (in this compose file and/or template.toml) pointing out the required dump/restore migration steps before upgrading.

Suggested change
postgresql:
postgresql:
# WARNING: Upgrading an existing deployment from PostgreSQL 16 to 18 is not
# compatible with the current `database` volume. Before deploying this update,
# perform a PostgreSQL dump/restore migration into a fresh PG 18 data directory.

Copilot uses AI. Check for mistakes.
image: docker.io/library/postgres:16-alpine
image: docker.io/library/postgres:18-alpine
Copy link

Copilot AI Apr 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

postgres:18-alpine is a floating tag (patch/alpine base can change under the same tag), which can lead to non-reproducible deploys and unexpected upgrades. Prefer pinning to a specific patch + distro tag (similar to other blueprints that use e.g. postgres:16.10-alpine3.22).

Suggested change
image: docker.io/library/postgres:18-alpine
image: docker.io/library/postgres:18.0-alpine3.22

Copilot uses AI. Check for mistakes.
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
Expand Down Expand Up @@ -34,7 +34,7 @@ services:
- 6379

server:
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.3}
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.2}
restart: unless-stopped
command: server
environment:
Expand All @@ -57,7 +57,7 @@ services:
condition: service_healthy

worker:
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.6.3}
image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2026.2.2}
restart: unless-stopped
command: worker
environment:
Expand Down
2 changes: 1 addition & 1 deletion blueprints/authentik/template.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,4 +23,4 @@ PG_DB = "${pg_db}"
PG_PASS = "${password:32}" # Password for PostgreSQL authentication
AUTHENTIK_SECRET_KEY = "${password:64}" # Secret key for Authentik authentication
AUTHENTIK_IMAGE = "ghcr.io/goauthentik/server"
AUTHENTIK_TAG = "2025.6.3"
AUTHENTIK_TAG = "2026.2.2"
2 changes: 1 addition & 1 deletion meta.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -472,7 +472,7 @@
{
"id": "authentik",
"name": "Authentik",
"version": "2025.6.3",
"version": "2026.2.2",
"description": "Authentik is an open-source Identity Provider for authentication and authorization. It provides a comprehensive solution for managing user authentication, authorization, and identity federation with support for SAML, OAuth2, OIDC, and more.",
"links": {
"github": "https://github.com/goauthentik/authentik",
Expand Down
Loading