Skip to content

providers/rac: fix signals and Endpoint caching#13529

Merged
gergosimonyi merged 2 commits intomainfrom
providers/rac/fix-signals
Mar 14, 2025
Merged

providers/rac: fix signals and Endpoint caching#13529
gergosimonyi merged 2 commits intomainfrom
providers/rac/fix-signals

Conversation

@gergosimonyi
Copy link
Collaborator

This will result in more invalidations, but it will also fix some
invalid Endpoint instances from showing up in Endpoint lists.

Since an Endpoint can be tied to a Policy, some invalid results can
still show up if the result of the Policy changes (either because the
Policy itself changes or because data checked by that Policy changes).

Even with those potentially invalid results, I believe the caching
itself is advantageous as long as the API provides an option for
superuser_full_list.

Closes #13231
Closes #13237

And possibly other things by not using `ManagedAppConfig`. This was
broken by 2128e7f.
@gergosimonyi gergosimonyi requested a review from a team as a code owner March 14, 2025 13:16
@netlify
Copy link

netlify bot commented Mar 14, 2025

Deploy Preview for authentik-docs canceled.

Name Link
🔨 Latest commit d7767c1
🔍 Latest deploy log https://app.netlify.com/sites/authentik-docs/deploys/67d42cf76fa28300081a446d

@netlify
Copy link

netlify bot commented Mar 14, 2025

Deploy Preview for authentik-storybook canceled.

Name Link
🔨 Latest commit d7767c1
🔍 Latest deploy log https://app.netlify.com/sites/authentik-storybook/deploys/67d42cf780bfeb0008332865

@gergosimonyi
Copy link
Collaborator Author

/cherry-pick 2025.2

This will result in more invalidations, but it will also fix some
invalid Endpoint instances from showing up in Endpoint lists.

Since an Endpoint can be tied to a Policy, some invalid results can
still show up if the result of the Policy changes (either because the
Policy itself changes or because data checked by that Policy changes).

Even with those potentially invalid results, I believe the caching
itself is advantageous as long as the API provides an option for
`superuser_full_list`.
@gergosimonyi gergosimonyi force-pushed the providers/rac/fix-signals branch from ef87116 to d7767c1 Compare March 14, 2025 13:19
@codecov
Copy link

codecov bot commented Mar 14, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.74%. Comparing base (749e015) to head (d7767c1).
Report is 1 commits behind head on main.

✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #13529      +/-   ##
==========================================
+ Coverage   92.68%   92.74%   +0.05%     
==========================================
  Files         794      794              
  Lines       40419    40418       -1     
==========================================
+ Hits        37462    37485      +23     
+ Misses       2957     2933      -24     
Flag Coverage Δ
e2e 47.98% <100.00%> (+0.13%) ⬆️
integration 24.31% <100.00%> (+0.23%) ⬆️
unit 90.51% <100.00%> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions
Copy link
Contributor

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-d7767c1702ff1a6b457cd6cd36d3ce55a15abd39
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-d7767c1702ff1a6b457cd6cd36d3ce55a15abd39

Afterwards, run the upgrade commands from the latest release notes.

@gergosimonyi gergosimonyi merged commit 78a02ff into main Mar 14, 2025
90 checks passed
@gergosimonyi gergosimonyi deleted the providers/rac/fix-signals branch March 14, 2025 14:09
@gergosimonyi
Copy link
Collaborator Author

/cherry-pick version-2025.2

gcp-cherry-pick-bot bot pushed a commit that referenced this pull request Mar 14, 2025
* fix RAC signals

And possibly other things by not using `ManagedAppConfig`. This was
broken by 2128e7f.

* invalidate Endpoint cache on update or delete

This will result in more invalidations, but it will also fix some
invalid Endpoint instances from showing up in Endpoint lists.

Since an Endpoint can be tied to a Policy, some invalid results can
still show up if the result of the Policy changes (either because the
Policy itself changes or because data checked by that Policy changes).

Even with those potentially invalid results, I believe the caching
itself is advantageous as long as the API provides an option for
`superuser_full_list`.
rissson pushed a commit that referenced this pull request Mar 14, 2025
…13531)

providers/rac: fix signals and Endpoint caching (#13529)

* fix RAC signals

And possibly other things by not using `ManagedAppConfig`. This was
broken by 2128e7f.

* invalidate Endpoint cache on update or delete

This will result in more invalidations, but it will also fix some
invalid Endpoint instances from showing up in Endpoint lists.

Since an Endpoint can be tied to a Policy, some invalid results can
still show up if the result of the Policy changes (either because the
Policy itself changes or because data checked by that Policy changes).

Even with those potentially invalid results, I believe the caching
itself is advantageous as long as the API provides an option for
`superuser_full_list`.

Co-authored-by: Simonyi Gergő <28359278+gergosimonyi@users.noreply.github.com>
kensternberg-authentik added a commit that referenced this pull request Apr 25, 2025
* main: (44 commits)
  providers/rac: fix signals and Endpoint caching (#13529)
  web/flows: fix missing padding on authenticator_validate card (#13420)
  web/user: show admin interface button on mobile (#13421)
  website: Bump the build group in /website with 6 updates (#13501)
  core: Bump goauthentik.io/api/v3 from 3.2025021.3 to 3.2025021.4 (#13495)
  core: Bump importlib-metadata from 8.5.0 to 8.6.1 (#13499)
  core: Bump msgraph-sdk from 1.23.0 to 1.24.0 (#13500)
  core: Bump google-api-python-client from 2.163.0 to 2.164.0 (#13498)
  core: Bump aws-cdk-lib from 2.182.0 to 2.183.0 (#13496)
  core: Bump psycopg from 3.2.5 to 3.2.6 (#13497)
  translate: Updates for file web/xliff/en.xlf in fr (#13514)
  translate: Updates for file locale/en/LC_MESSAGES/django.po in fr (#13513)
  translate: Updates for file locale/en/LC_MESSAGES/django.po in zh-Hans (#13510)
  translate: Updates for file web/xliff/en.xlf in zh-Hans (#13511)
  translate: Updates for file web/xliff/en.xlf in zh_CN (#13509)
  translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN (#13508)
  core, web: update translations (#13494)
  website: remove the last updated option from footer (#13493)
  translate: Updates for file locale/en/LC_MESSAGES/django.po in fr (#13487)
  translate: Updates for file locale/en/LC_MESSAGES/django.po in zh_CN (#13488)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

User Interface RAC only shows 1 endpoint despite multiple being configured GET /api/v3/rac/endpoints/

2 participants