lifecycle: build binary dependencies which link against SSL directly by BeryJu · Pull Request #12724 · goauthentik/authentik

BeryJu · 2025-01-17T13:35:47Z

Details

closes #12639

Checklist

Local tests pass (ak test authentik/)
The code has been formatted (make lint-fix)

If an API change has been made

The API schema has been updated (make gen-build)

If changes to the frontend have been made

The code has been formatted (make web)

If applicable

The documentation has been updated
The documentation has been formatted (make website)

netlify · 2025-01-17T13:36:07Z

✅ Deploy Preview for authentik-docs ready!

Name	Link
🔨 Latest commit	`a2e1229`
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-docs/deploys/678fa7a6de84550008c64de7
😎 Deploy Preview	https://deploy-preview-12724--authentik-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

netlify · 2025-01-17T13:36:07Z

✅ Deploy Preview for authentik-storybook canceled.

Name	Link
🔨 Latest commit	`a2e1229`
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-storybook/deploys/678fa7a6dac35a00088a2b84

codecov · 2025-01-17T13:46:16Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.77%. Comparing base (236455f) to head (a2e1229).
Report is 5 commits behind head on main.

✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #12724      +/-   ##
==========================================
+ Coverage   92.76%   92.77%   +0.01%     
==========================================
  Files         769      769              
  Lines       38898    38898              
==========================================
+ Hits        36083    36088       +5     
+ Misses       2815     2810       -5

Flag	Coverage Δ
e2e	`48.63% <ø> (+0.05%)`	⬆️
integration	`24.62% <ø> (ø)`
unit	`90.40% <ø> (-0.01%)`	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

github-actions · 2025-01-20T20:55:52Z

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-a2e12298dfbe4495fb527cf82064562ed85d653b
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-a2e12298dfbe4495fb527cf82064562ed85d653b

Afterwards, run the upgrade commands from the latest release notes.

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

tanberry

So @BeryJu one no longer needs to add-arm64 to the tag name (no spaces)? Will it break anything if the tag remains? If so, we need to add this to Rel Notes or somewhere, correct?

BeryJu · 2025-01-21T14:36:10Z

/cherry-pick version-2024.12

gcp-cherry-pick-bot · 2025-01-21T14:36:32Z

Cherry-pick failed with Merge error faab1824047167f70e2ee4b8386b1a2e32a3b801 into temp-cherry-pick-6810c9-version-2024.12

…12724) * lifecycle: install binary dependencies in dockerfile directly Signed-off-by: Jens Langhammer <jens@goauthentik.io> * install ua-parser-builtins manually as its only distributed as binary Signed-off-by: Jens Langhammer <jens@goauthentik.io> * build duo_client from scratch, sigh Signed-off-by: Jens Langhammer <jens@goauthentik.io> * deps for kadmin Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ok fine Signed-off-by: Jens Langhammer <jens@goauthentik.io> * run on arm runner? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix yaml format Signed-off-by: Jens Langhammer <jens@goauthentik.io> * rewrite release pipeline to use re-usable workflows Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix typo Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-usable multi-arch build? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * also add suffix for amd64 Signed-off-by: Jens Langhammer <jens@goauthentik.io> * parameterise image name Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-use workflow for CI images...? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix missing checkout Signed-off-by: Jens Langhammer <jens@goauthentik.io> * inherit secrets Signed-off-by: Jens Langhammer <jens@goauthentik.io> * temp build directly Signed-off-by: Jens Langhammer <jens@goauthentik.io> * get cache-to from python script Signed-off-by: Jens Langhammer <jens@goauthentik.io> * better name? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * matrix for merging images? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * re-add build dep Signed-off-by: Jens Langhammer <jens@goauthentik.io> * use multi-image tag Signed-off-by: Jens Langhammer <jens@goauthentik.io> * include arch in buildcache Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io> # Conflicts: # .github/workflows/ci-main.yml # .github/workflows/release-publish.yml

* main: (65 commits) stages/redirect: fix query parameter when redirecting to flow (#12750) website/integrations: cloudflare-access: refactor (#12663) sources/kerberos: handle principal expire time (#12748) lifecycle: build binary dependencies which link against SSL directly (#12724) website/docs: style guide: document styling preferences for URLs (#12715) website/integrations: nextcloud: fix broken link (#12744) core: bump selenium from 4.27.1 to 4.28.0 (#12745) lifecycle: move AWS CFN generation to lifecycle and fix CI (#12743) core: search users' attributes (#12740) web/components: ak-number-input: add support for min (#12703) website/integrations: nextcloud: fix url for "disable username changes" (#12725) core: bump pytest-github-actions-annotate-failures from 0.2.0 to 0.3.0 (#12735) website: bump katex from 0.16.11 to 0.16.21 in /website (#12731) web: bump katex from 0.16.11 to 0.16.21 in /web (#12730) website/integrations: Fix URL for authentik installation instead of mobilizon installation (#12729) core: bump debugpy from 1.8.11 to 1.8.12 (#12718) core: bump ruff from 0.9.1 to 0.9.2 (#12717) core: bump webauthn from 2.4.0 to 2.5.0 (#12719) core: bump structlog from 24.4.0 to 25.1.0 (#12720) website/integrations: all: install -> installation (#12676) ...

BeryJu requested review from a team as code owners January 17, 2025 13:35

rissson approved these changes Jan 17, 2025

View reviewed changes

BeryJu force-pushed the lifecycle/install-no-binary-deps-directly branch from c8aa116 to fa76fd3 Compare January 20, 2025 20:18

BeryJu force-pushed the lifecycle/install-no-binary-deps-directly branch 2 times, most recently from a52b705 to c5541da Compare January 20, 2025 23:20

BeryJu added 20 commits January 21, 2025 14:52

lifecycle: install binary dependencies in dockerfile directly

f537de9

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

install ua-parser-builtins manually as its only distributed as binary

86e828c

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

build duo_client from scratch, sigh

e29e7a9

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

deps for kadmin

c7a7909

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

ok fine

7e7e35e

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

run on arm runner?

8a65835

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

fix yaml format

63c4ee8

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

rewrite release pipeline to use re-usable workflows

af63878

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

fix typo

5e229f8

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

re-usable multi-arch build?

c0463d4

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

also add suffix for amd64

0626976

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

parameterise image name

084bb95

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

re-use workflow for CI images...?

7563e8d

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

fix missing checkout

bbd2979

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

inherit secrets

66a9ff4

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

temp build directly

b5723f4

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

get cache-to from python script

5596c63

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

better name?

3eec49b

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

matrix for merging images?

997383a

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

re-add build dep

9f5f00f

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

BeryJu added 2 commits January 21, 2025 14:53

use multi-image tag

9cc30de

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

include arch in buildcache

a2e1229

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

BeryJu force-pushed the lifecycle/install-no-binary-deps-directly branch from 824ab1e to a2e1229 Compare January 21, 2025 13:56

BeryJu requested a review from a team as a code owner January 21, 2025 13:56

rissson approved these changes Jan 21, 2025

View reviewed changes

tanberry approved these changes Jan 21, 2025

View reviewed changes

BeryJu merged commit faab182 into main Jan 21, 2025

BeryJu deleted the lifecycle/install-no-binary-deps-directly branch January 21, 2025 14:36

This was referenced Jan 25, 2025

lifecycle: fix cryptography's OpenSSL path #12753

Merged

ci: fix container build always attempting to push #12810

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

lifecycle: build binary dependencies which link against SSL directly#12724

lifecycle: build binary dependencies which link against SSL directly#12724
BeryJu merged 22 commits intomainfrom
lifecycle/install-no-binary-deps-directly

BeryJu commented Jan 17, 2025

Uh oh!

netlify bot commented Jan 17, 2025 •

edited

Loading

Uh oh!

netlify bot commented Jan 17, 2025 •

edited

Loading

Uh oh!

codecov bot commented Jan 17, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Jan 20, 2025 •

edited

Loading

Uh oh!

tanberry left a comment

Uh oh!

BeryJu commented Jan 21, 2025

Uh oh!

gcp-cherry-pick-bot bot commented Jan 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

BeryJu commented Jan 17, 2025

Details

Checklist

Uh oh!

netlify bot commented Jan 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for authentik-docs ready!

Uh oh!

netlify bot commented Jan 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for authentik-storybook canceled.

Uh oh!

codecov bot commented Jan 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions bot commented Jan 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

tanberry left a comment

Choose a reason for hiding this comment

Uh oh!

BeryJu commented Jan 21, 2025

Uh oh!

gcp-cherry-pick-bot bot commented Jan 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

netlify bot commented Jan 17, 2025 •

edited

Loading

netlify bot commented Jan 17, 2025 •

edited

Loading

codecov bot commented Jan 17, 2025 •

edited

Loading

github-actions bot commented Jan 20, 2025 •

edited

Loading