7b8e5c4272
root: auto-migrate on startup, lock database using pg_advisory_lock
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-18 14:47:50 +02:00
2fed739be7
helm: make storage class, size and mode configurable
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-16 12:31:55 +02:00
4054e6da8c
helm: don't automount Service token when integration is not enabled, improve k8s detection
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-07 16:16:17 +02:00
12b1f53948
root: monitor redis in readiness check, relax monitoring period
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-07 15:51:19 +02:00
a2a35e49a9
improved out-of-box experience ( #704 )
2021-04-06 20:25:22 +02:00
fe7f23238c
Static SPA ( #648 )
...
* core: initial migration to /if
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: move jsi18n to api
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* tests: fix static URLs in tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: add new html files to rollup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: fix rollup config and nginx config
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: add Impersonation support to user API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: add banner for impersonation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* tests: fix test_user function for new User API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* flows: add background to API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: set background from flow API
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* core: make root view login_required for redirect
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* flows: redirect to root-redirect instead of if-admin direct
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* api: add header to prevent Authorization Basic prompt in browser
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: redirect to root when user/me request fails
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-22 13:44:17 +01:00
00235e039b
helm: add initial geoip
2021-03-11 17:43:03 +01:00
2e2840c71e
helm: add service monitors
2021-03-08 13:02:02 +01:00
c0c235bead
helm: fix initialDelaySeconds
2021-02-24 19:39:35 +01:00
42feb54d80
helm: add initial wait for healthcheck
2021-02-12 11:53:49 +01:00
7af883d80c
root: add dedicated live and readiness views
2021-02-06 21:07:05 +01:00
920736fc77
helm: fix s3 secret key and email password not being base64 encoded
2021-01-17 23:32:55 +01:00
ee8e42728e
helm: fix old reference to static secret_key
2021-01-17 23:32:55 +01:00
d728163eea
helm: fix typos
2021-01-17 18:56:51 +01:00
33f208657c
helm: bump memory hard limit
2021-01-16 14:15:50 +01:00
82bb179bc2
root: global email settings ( #448 )
...
* root: make global email settings configurable
* stages/email: add use_global_settings
* stages/email: add test_email command to test email sending
* stages/email: update email template
* stages/email: simplify email template path
* stages/email: add support for user-supplied email templates
* stages/email: add tests for sending and templates
* stages/email: only add custom template if permissions are correct
* docs: add custom email template docs
* root: add /templates volume in docker-compose by default
* stages/email: fix form not allowing custom templates
* stages/email: use relative path for custom templates
* stages/email: check if all templates exist on startup, reset
* docs: add global email docs for docker-compose
* helm: add email config to helm chart
* helm: load all secrets with env prefix
* helm: move s3 and smtp secret to secret
* stages/email: fix test for relative name
* stages/email: add argument to send email from existing stage
* stages/email: set uid using slug of message id
* stages/email: ensure template validation ignores migration runs
* docs: add email troubleshooting docs
* stages/email: fix long task_name breaking task list
2021-01-05 00:41:10 +01:00
99ca0d1f9f
helm: fix missing /media/ route
2020-12-14 00:11:49 +01:00
bf1dae2dbe
helm: make imagePullPolicy configurable
2020-12-12 23:13:58 +01:00
1cfe1aff13
wip: rename to authentik ( #361 )
...
* root: initial rename
* web: rename custom element prefix
* root: rename external functions with pb_ prefix
* root: fix formatting
* root: replace domain with goauthentik.io
* proxy: update path
* root: rename remaining prefixes
* flows: rename file extension
* root: pbadmin -> akadmin
* docs: fix image filenames
* lifecycle: ignore migration files
* ci: copy default config from current source before loading last tagged
* *: new sentry dsn
* tests: fix missing python3.9-dev package
* root: add additional migrations for service accounts created by outposts
* core: mark system-created service accounts with attribute
* policies/expression: fix pb_ replacement not working
* web: fix last linting errors, add lit-analyse
* policies/expressions: fix lint errors
* web: fix sidebar display on screens where not all items fit
* proxy: attempt to fix proxy pipeline
* proxy: use go env GOPATH to get gopath
* lib: fix user_default naming inconsistency
* docs: add upgrade docs
* docs: update screenshots to use authentik
* admin: fix create button on empty-state of outpost
* web: fix modal submit not refreshing SiteShell and Table
* web: fix height of app-card and height of generic icon
* web: fix rendering of subtext
* admin: fix version check error not being caught
* web: fix worker count not being shown
* docs: update screenshots
* root: new icon
* web: fix lint error
* admin: fix linting error
* root: migrate coverage config to pyproject
2020-12-05 22:08:42 +01:00
665839133f
Application Icon upload ( #341 )
...
* core: add initial implementation for File Upload
* root: add volumes to docker-compose for file upload
* helm: add pvc for uploads
* core: allow meta_icon to be overwritten with static files
2020-11-23 20:50:19 +01:00
d21f187673
outposts: make docker image prefix configurable
2020-11-16 00:36:42 +01:00
74da44a6a9
helm: add readme, general cleanup
2020-10-22 17:25:30 +02:00
4316ee4330
root: implement db backups with monitored task, update docs
2020-10-19 22:17:47 +02:00
6596bc6034
helm: fix permissions for ingresses in networking
2020-10-19 14:55:14 +02:00
5d7220ca70
helm: fix keys for s3 backup
2020-10-19 14:30:44 +02:00
8b09cf55a2
root: upgrade to traefik 2.3
2020-10-18 18:48:19 +02:00
7861e2e0bd
provider/proxy: add K8s ingress support
2020-10-18 17:13:44 +02:00
b2c571bf1b
helm: add service account for controller, add option to enable it
2020-10-16 21:55:24 +02:00
9fb1ac98ec
Backup/Restore ( #256 )
...
* lifecycle: move s3 backup settings to s3 name
* providers/oauth2: fix for alerting for missing certificatekeypair
* lifecycle: add backup commands
see #252
* lifecycle: install postgres-client for 11 and 12
* root: migrate to DBBACKUP_STORAGE_OPTIONS, add region setting
* lifecycle: auto-clean last backups
* helm: add s3 region parameter, add cronjob for backups
* docs: add backup docs
* root: remove backup scheduled task for now
2020-10-03 20:36:36 +02:00
9b62a6403b
helm: fix affinity rules and resources
2020-09-15 11:41:11 +02:00
69eecd6b60
helm: add soft-affinity rules for worker and web
2020-09-14 00:12:40 +02:00
1c57128f11
providers/oauth2: fix token to code_token
2020-09-13 23:42:45 +02:00
4edfad869f
helm: fix missing .Values prefix for replicas
2020-09-10 15:07:56 +02:00
455e39a8bd
helm: make replicas configurable
2020-09-09 18:21:27 +02:00
80e8a3d63c
helm: fix arguments not being arrys
2020-09-06 15:52:22 +02:00
268de20872
Proxy v2 ( #189 )
2020-09-03 00:04:12 +02:00
7d321e8aa8
helm: make image name configurable, make postgres and redis charts optional
2020-08-25 18:02:51 +02:00
0996775ebf
helm: cleanup
2020-08-25 17:51:33 +02:00
4147e8d1a7
helm: remove unmaintained monitoring
2020-08-25 17:45:56 +02:00
983bbb622d
helm: fix invalid domain
2020-08-25 17:45:03 +02:00
885f8bae9f
helm: remove mount of configmap, read entirely from env
2020-08-25 17:43:37 +02:00
f7c629ec9b
root: when error_reporting is enabled, don't sent pii data by default
2020-08-20 22:19:49 +02:00
ff810c689f
Replace Elastic APM with Sentry APM ( #183 )
2020-08-20 20:39:21 +02:00
ed72a2c959
helm: fix APM secret_token not being applied correctly
2020-08-03 20:55:44 +02:00
9feea155fe
root: fix /favicon being routed to application server
2020-07-08 13:18:08 +02:00
d95c5aa739
root: allow changing of APM verify_server_cert setting
2020-07-07 19:59:32 +02:00
b3b8cd807d
root: expose APM settings in helm chart
2020-07-07 17:54:07 +02:00
e08c5ff875
helm: fully remove domain, add log_level
2020-05-20 12:16:56 +02:00
4d45dc31a9
helm: limit deployments to their respective components
2020-05-19 21:25:56 +02:00
b23afcfc3b
helm: expose backup settings through helm chart
2020-05-16 14:17:43 +02:00
Jens Langhammer
Jens L