feat: update helm chart authentik to 2022.8.2

[bloopy-boi]

This PR contains the following updates:

Package	Update	Change
authentik (source)	minor	2022.7.3 -> 2022.8.2

---

Release Notes

goauthentik/helm

v2022.8.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Renovate Bot.

[bloopy-boi]

External Release Notes
Object: Authentik
URL: https://goauthentik.io/docs/releases/.

[bloopy-boi]

Path: cluster/apps/auth/authentik/helm-release.yaml
Version: 2022.7.3 -> 2022.8.2

@@ -18,6 +18,48 @@
 name: authentik
 namespace: default
 ---
+# Source: authentik/templates/secret.yml
+apiVersion: v1
+kind: Secret
+metadata:
+ name: authentik-secrets
+ labels:
+ app.kubernetes.io/name: authentik
+ app.kubernetes.io/instance: authentik
+ app.kubernetes.io/managed-by: Helm
+type: Opaque
+data:
+ AUTHENTIK_AVATARS: "Z3JhdmF0YXI="
+ AUTHENTIK_EMAIL__FROM: "bm8tcmVwbHlAJHtYWVpfRE9NQUlOfQ=="
+ AUTHENTIK_EMAIL__HOST: "c210cC5zZW5kZ3JpZC5uZXQ="
+ AUTHENTIK_EMAIL__PASSWORD: "JHtTRUNSRVRfU0VOREdSSURfQVBJX0tFWX0="
+ AUTHENTIK_EMAIL__PORT: "NTg3"
+ AUTHENTIK_EMAIL__TIMEOUT: "MzA="
+ AUTHENTIK_EMAIL__USE_SSL: "ZmFsc2U="
+ AUTHENTIK_EMAIL__USE_TLS: "dHJ1ZQ=="
+ AUTHENTIK_EMAIL__USERNAME: "YXBpa2V5"
+ AUTHENTIK_ERROR_REPORTING__ENABLED: "ZmFsc2U="
+ AUTHENTIK_ERROR_REPORTING__ENVIRONMENT: "azhz"
+ AUTHENTIK_ERROR_REPORTING__SEND_PII: "ZmFsc2U="
+ AUTHENTIK_GEOIP: "L2dlb2lwL0dlb0xpdGUyLUNpdHkubW1kYg=="
+ AUTHENTIK_LOG_LEVEL: "aW5mbw=="
+ AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE: "Z2hjci5pby9nb2F1dGhlbnRpay8lKHR5cGUpczolKHZlcnNpb24pcw=="
+ AUTHENTIK_OUTPOSTS__DOCKER_IMAGE_BASE: "Z2hjci5pby9nb2F1dGhlbnRpay8lKHR5cGUpczolKHZlcnNpb24pcw=="
+ AUTHENTIK_POSTGRESQL__HOST: "YXV0aGVudGlrLXBvc3RncmVz"
+ AUTHENTIK_POSTGRESQL__NAME: "YXV0aGVudGlr"
+ AUTHENTIK_POSTGRESQL__PASSWORD: "JHtTRUNSRVRfQVVUSEVOVElLX1BPU1RHUkVTX1BBU1NXT1JEfQ=="
+ AUTHENTIK_POSTGRESQL__PORT: "NTQzMg=="
+ AUTHENTIK_POSTGRESQL__S3_BACKUP__ACCESS_KEY: "JHtBVVRIRU5USUtfUzNfQUNDRVNTX0tFWX0="
+ AUTHENTIK_POSTGRESQL__S3_BACKUP__BUCKET: "YXV0aGVudGlrLXBvc3RncmVzcWwtYmFja3Vw"
+ AUTHENTIK_POSTGRESQL__S3_BACKUP__HOST: "aHR0cDovL3MzLm1pbmlvLnN0b3JhZ2U="
+ AUTHENTIK_POSTGRESQL__S3_BACKUP__INSECURE_SKIP_VERIFY: "ZmFsc2U="
+ AUTHENTIK_POSTGRESQL__S3_BACKUP__SECRET_KEY: "JHtBVVRIRU5USUtfUzNfU0VDUkVUfQ=="
+ AUTHENTIK_POSTGRESQL__USER: "YXV0aGVudGlr"
+ AUTHENTIK_REDIS__HOST: "YXV0aGVudGlrLXJlZGlzLW1hc3Rlcg=="
+ AUTHENTIK_SECRET_KEY: "JHtTRUNSRVRfQVVUSEVOVElLX1NFQ1JFVF9LRVl9"
+ GEOIPUPDATE_ACCOUNT_ID: "JHtNQVhNSU5EX0FDQ09VTlRfSUR9"
+ GEOIPUPDATE_LICENSE_KEY: "JHtNQVhNSU5EX0xJQ0VOU0VfS0VZfQ=="
+---
 # Source: authentik/charts/redis/templates/configmap.yaml
 apiVersion: v1
 kind: ConfigMap
@@ -361,63 +403,9 @@
 image: "ghcr.io/goauthentik/server:2022.8.1"
 imagePullPolicy: "IfNotPresent"
 args: ["server"]
- env:
- - name: AUTHENTIK_AVATARS
- value: "gravatar"
- - name: AUTHENTIK_EMAIL__FROM
- value: "no-reply@${XYZ_DOMAIN}"
- - name: AUTHENTIK_EMAIL__HOST
- value: "smtp.sendgrid.net"
- - name: AUTHENTIK_EMAIL__PASSWORD
- value: "${SECRET_SENDGRID_API_KEY}"
- - name: AUTHENTIK_EMAIL__PORT
- value: "587"
- - name: AUTHENTIK_EMAIL__TIMEOUT
- value: "30"
- - name: AUTHENTIK_EMAIL__USE_SSL
- value: "false"
- - name: AUTHENTIK_EMAIL__USE_TLS
- value: "true"
- - name: AUTHENTIK_EMAIL__USERNAME
- value: "apikey"
- - name: AUTHENTIK_ERROR_REPORTING__ENABLED
- value: "false"
- - name: AUTHENTIK_ERROR_REPORTING__ENVIRONMENT
- value: "k8s"
- - name: AUTHENTIK_ERROR_REPORTING__SEND_PII
- value: "false"
- - name: AUTHENTIK_GEOIP
- value: "/geoip/GeoLite2-City.mmdb"
- - name: AUTHENTIK_LOG_LEVEL
- value: "info"
- - name: AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE
- value: "ghcr.io/goauthentik/%(type)s:%(version)s"
- - name: AUTHENTIK_OUTPOSTS__DOCKER_IMAGE_BASE
- value: "ghcr.io/goauthentik/%(type)s:%(version)s"
- - name: AUTHENTIK_POSTGRESQL__HOST
- value: "authentik-postgres"
- - name: AUTHENTIK_POSTGRESQL__NAME
- value: "authentik"
- - name: AUTHENTIK_POSTGRESQL__PASSWORD
- value: "${SECRET_AUTHENTIK_POSTGRES_PASSWORD}"
- - name: AUTHENTIK_POSTGRESQL__PORT
- value: "5432"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__ACCESS_KEY
- value: "${AUTHENTIK_S3_ACCESS_KEY}"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__BUCKET
- value: "authentik-postgresql-backup"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__HOST
- value: "http://s3.minio.storage"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__INSECURE_SKIP_VERIFY
- value: "false"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__SECRET_KEY
- value: "${AUTHENTIK_S3_SECRET}"
- - name: AUTHENTIK_POSTGRESQL__USER
- value: "authentik"
- - name: AUTHENTIK_REDIS__HOST
- value: "authentik-redis-master"
- - name: AUTHENTIK_SECRET_KEY
- value: "${SECRET_AUTHENTIK_SECRET_KEY}"
+ envFrom:
+ - secretRef:
+ name: authentik-secrets
 volumeMounts:
 - name: geoip-db
 mountPath: /geoip
@@ -453,12 +441,18 @@
 value: "8"
 - name: GEOIPUPDATE_PRESERVE_FILE_TIMES
 value: "1"
- - name: GEOIPUPDATE_ACCOUNT_ID
- value: "${MAXMIND_ACCOUNT_ID}"
- - name: GEOIPUPDATE_LICENSE_KEY
- value: "${MAXMIND_LICENSE_KEY}"
 - name: GEOIPUPDATE_EDITION_IDS
 value: "GeoLite2-City"
+ - name: GEOIPUPDATE_ACCOUNT_ID
+ valueFrom:
+ secretKeyRef:
+ name: authentik-secrets
+ key: GEOIPUPDATE_ACCOUNT_ID
+ - name: GEOIPUPDATE_LICENSE_KEY
+ valueFrom:
+ secretKeyRef:
+ name: authentik-secrets
+ key: GEOIPUPDATE_LICENSE_KEY
 volumeMounts:
 - name: geoip-db
 mountPath: /usr/share/GeoIP
@@ -521,63 +515,9 @@
 image: "ghcr.io/goauthentik/server:2022.8.1"
 imagePullPolicy: "IfNotPresent"
 args: ["worker"]
- env:
- - name: AUTHENTIK_AVATARS
- value: "gravatar"
- - name: AUTHENTIK_EMAIL__FROM
- value: "no-reply@${XYZ_DOMAIN}"
- - name: AUTHENTIK_EMAIL__HOST
- value: "smtp.sendgrid.net"
- - name: AUTHENTIK_EMAIL__PASSWORD
- value: "${SECRET_SENDGRID_API_KEY}"
- - name: AUTHENTIK_EMAIL__PORT
- value: "587"
- - name: AUTHENTIK_EMAIL__TIMEOUT
- value: "30"
- - name: AUTHENTIK_EMAIL__USE_SSL
- value: "false"
- - name: AUTHENTIK_EMAIL__USE_TLS
- value: "true"
- - name: AUTHENTIK_EMAIL__USERNAME
- value: "apikey"
- - name: AUTHENTIK_ERROR_REPORTING__ENABLED
- value: "false"
- - name: AUTHENTIK_ERROR_REPORTING__ENVIRONMENT
- value: "k8s"
- - name: AUTHENTIK_ERROR_REPORTING__SEND_PII
- value: "false"
- - name: AUTHENTIK_GEOIP
- value: "/geoip/GeoLite2-City.mmdb"
- - name: AUTHENTIK_LOG_LEVEL
- value: "info"
- - name: AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE
- value: "ghcr.io/goauthentik/%(type)s:%(version)s"
- - name: AUTHENTIK_OUTPOSTS__DOCKER_IMAGE_BASE
- value: "ghcr.io/goauthentik/%(type)s:%(version)s"
- - name: AUTHENTIK_POSTGRESQL__HOST
- value: "authentik-postgres"
- - name: AUTHENTIK_POSTGRESQL__NAME
- value: "authentik"
- - name: AUTHENTIK_POSTGRESQL__PASSWORD
- value: "${SECRET_AUTHENTIK_POSTGRES_PASSWORD}"
- - name: AUTHENTIK_POSTGRESQL__PORT
- value: "5432"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__ACCESS_KEY
- value: "${AUTHENTIK_S3_ACCESS_KEY}"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__BUCKET
- value: "authentik-postgresql-backup"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__HOST
- value: "http://s3.minio.storage"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__INSECURE_SKIP_VERIFY
- value: "false"
- - name: AUTHENTIK_POSTGRESQL__S3_BACKUP__SECRET_KEY
- value: "${AUTHENTIK_S3_SECRET}"
- - name: AUTHENTIK_POSTGRESQL__USER
- value: "authentik"
- - name: AUTHENTIK_REDIS__HOST
- value: "authentik-redis-master"
- - name: AUTHENTIK_SECRET_KEY
- value: "${SECRET_AUTHENTIK_SECRET_KEY}"
+ envFrom:
+ - secretRef:
+ name: authentik-secrets
 volumeMounts:
 - name: geoip-db
 mountPath: /geoip
@@ -591,12 +531,18 @@
 value: "8"
 - name: GEOIPUPDATE_PRESERVE_FILE_TIMES
 value: "1"
- - name: GEOIPUPDATE_ACCOUNT_ID
- value: "${MAXMIND_ACCOUNT_ID}"
- - name: GEOIPUPDATE_LICENSE_KEY
- value: "${MAXMIND_LICENSE_KEY}"
 - name: GEOIPUPDATE_EDITION_IDS
 value: "GeoLite2-City"
+ - name: GEOIPUPDATE_ACCOUNT_ID
+ valueFrom:
+ secretKeyRef:
+ name: authentik-secrets
+ key: GEOIPUPDATE_ACCOUNT_ID
+ - name: GEOIPUPDATE_LICENSE_KEY
+ valueFrom:
+ secretKeyRef:
+ name: authentik-secrets
+ key: GEOIPUPDATE_LICENSE_KEY
 volumeMounts:
 - name: geoip-db
 mountPath: /usr/share/GeoIP
@@ -975,8 +921,8 @@
 interval: 30s
 selector:
 matchLabels:
- helm.sh/chart: authentik-2022.7.3
+ helm.sh/chart: authentik-2022.8.2
 app.kubernetes.io/name: authentik
 app.kubernetes.io/instance: authentik
- app.kubernetes.io/version: "2022.7.2"
+ app.kubernetes.io/version: "2022.8.2"
 app.kubernetes.io/managed-by: Helm

[bloopy-boi]

MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ COPYPASTE	jscpd	yes		no	1.05s
✅ KUBERNETES	kubeval	1		0	0.25s
✅ YAML	prettier	1	0	0	0.5s
✅ YAML	yamllint	1		0	0.12s

See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff