Open Jeppedy opened 3 months ago
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
I am reproducing with fresh install of 2024.6.0, k8s deployment spec:
spec:
containers:
- name: authentik
image: ghcr.io/goauthentik/server:2024.6.0
args: ["server"]
readinessProbe:
httpGet:
path: /-/health/ready/
port: 9000
initialDelaySeconds: 5
periodSeconds: 10
livenessProbe:
httpGet:
path: /-/health/live/
port: 9000
initialDelaySeconds: 5
periodSeconds: 10
env:
- name: AUTHENTIK_REDIS__HOST
value: "redis.redis"
- name: AUTHENTIK_REDIS__PORT
value: "6379"
- name: AUTHENTIK_REDIS__DB
value: "0"
- name: AUTHENTIK_POSTGRESQL__HOST
value: "psqlcluster.postgres-operator-system.svc.cluster.local"
- name: AUTHENTIK_POSTGRESQL__USER
valueFrom:
secretKeyRef:
name: authentik.authentik.psqlcluster.credentials.postgresql.acid.zalan.do
key: username
- name: AUTHENTIK_POSTGRESQL__NAME
value: authentik
- name: AUTHENTIK_POSTGRESQL__PASSWORD
valueFrom:
secretKeyRef:
name: authentik.authentik.psqlcluster.credentials.postgresql.acid.zalan.do
key: password
- name: AUTHENTIK_POSTGRESQL__SSLMODE
value: require
- name: AUTHENTIK_POSTGRESQL__USE_PGBOUNCER
value: 'true'
# On fresh init, comment READ_REPLICAS settings (fixed after 2024.6.0)
# - name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__HOST
# value: "psqlcluster-repl.postgres-operator-system.svc.cluster.local"
# - name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__NAME
# value: authentik
# - name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__USER
# valueFrom:
# secretKeyRef:
# name: authentik.authentik.psqlcluster.credentials.postgresql.acid.zalan.do
# key: username
# - name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__PORT
# value: "5432"
# - name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__PASSWORD
# valueFrom:
# secretKeyRef:
# name: authentik.authentik.psqlcluster.credentials.postgresql.acid.zalan.do
# key: password
# - name: AUTHENTIK_POSTGRESQL__READ_REPLICAS__0__SSLMODE
# value: "require"
- name: AUTHENTIK_EMAIL__HOST
value: "mail.xxx.com"
- name: AUTHENTIK_EMAIL__PORT
value: "587"
- name: AUTHENTIK_EMAIL__USERNAME
valueFrom:
secretKeyRef:
name: smtp
key: username
- name: AUTHENTIK_EMAIL__PASSWORD
valueFrom:
secretKeyRef:
name: smtp
key: password
- name: AUTHENTIK_EMAIL__USE_TLS
value: "true"
- name: AUTHENTIK_EMAIL__USE_SSL
value: "false"
- name: AUTHENTIK_EMAIL__TIMEOUT
value: "10"
- name: AUTHENTIK_EMAIL__FROM
valueFrom:
secretKeyRef:
name: smtp
key: username
- name: AUTHENTIK_SECRET_KEY
valueFrom:
secretKeyRef:
name: authentik-secret-key
key: secret
volumeMounts:
- mountPath: /media
name: media
ports:
- containerPort: 9000
- containerPort: 9443
- containerPort: 3389
- containerPort: 6636
securityContext:
allowPrivilegeEscalation: false
runAsUser: 0
volumes:
- name: media
persistentVolumeClaim:
claimName: media2-pvc
This can happen when either the "Embedded outpost" object in authentik was deleted or modified incorrectly (I think there was also a bug that caused this at some point since the field responsible for this is not exposed).
In the authentik-server container you can run ak shell
and the paste Outpost.objects.filter(name="authentik Embedded Outpost").update(managed="goauthentik.io/outposts/embedded")
into that shell, that should fix the issue (assuming the embedded outpost object exists)
Describe the bug Logs are being spammed with the following: INF auth_via=unauthenticated domain_url=0.0.0.0 event=/api/v3/outposts/instances/ host=0.0.0.0:9000 logger=authentik.asgi method=GET pid=42 remote=127.0.0.1 request_id=2f6cf7e717654ec1aff612ebc595bc70 runtime=11 schema_name=public scheme=http status=403 timestamp=2024-05-10T02:01:07.595703 user= user_agent=goauthentik.io/outpost/2024.2.2 ERR error=403 Forbidden event=Failed to fetch outpost configuration, retrying in 3 seconds logger=authentik.outpost.ak-api-controller timestamp=2024-05-10T02:01:07Z
To Reproduce I simply installed, it's been running for weeks. Supporting 5+ applications. I happened to check my logs and these messages are coming every three seconds, constantly.
Expected behavior No log entries
Screenshots n/a
Logs INF auth_via=unauthenticated domain_url=0.0.0.0 event=/api/v3/outposts/instances/ host=0.0.0.0:9000 logger=authentik.asgi method=GET pid=42 remote=127.0.0.1 request_id=2f6cf7e717654ec1aff612ebc595bc70 runtime=11 schema_name=public scheme=http status=403 timestamp=2024-05-10T02:01:07.595703 user= user_agent=goauthentik.io/outpost/2024.2.2 ERR error=403 Forbidden event=Failed to fetch outpost configuration, retrying in 3 seconds logger=authentik.outpost.ak-api-controller timestamp=2024-05-10T02:01:07Z
Version and Deployment (please complete the following information):
Additional context Docker Compose file: