crypto: test credential upgrades and structured secrets by dominic-r · Pull Request #26106 · goauthentik/authentik

dominic-r · 2026-09-14T00:46:45Z

No description provided.

netlify · 2026-09-14T00:59:18Z

✅ Deploy Preview for authentik-docs ready!

Name	Link
🔨 Latest commit	`c451978`
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-docs/deploys/6ac3e98957386a00081f447e
😎 Deploy Preview	https://deploy-preview-26106--authentik-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

codecov · 2026-09-14T02:17:17Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.06%. Comparing base (f44f43b) to head (8275dcf).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@                          Coverage Diff                          @@
##           dominic/rotation-endpoint-connectors   #26106   +/-   ##
=====================================================================
  Coverage                                 92.06%   92.06%           
=====================================================================
  Files                                      1196     1196           
  Lines                                     79746    79746           
  Branches                                   4121     4121           
=====================================================================
  Hits                                      73421    73421           
  Misses                                     6259     6259           
  Partials                                     66       66

Flag	Coverage Δ
conformance	`32.50% <0.00%> (+<0.01%)`	⬆️
integration	`29.33% <0.00%> (ø)`
rust	`46.54% <0.00%> (ø)`
unit	`93.99% <0.00%> (ø)`
unit-migrate	`93.99% <0.00%> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

github-actions · 2026-09-14T03:30:58Z

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-06b74bb66965a09b4b02e9693fe07ebc509ecbcb
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-06b74bb66965a09b4b02e9693fe07ebc509ecbcb

Afterwards, run the upgrade commands from the latest release notes.

…tion-migration-tests

github-actions · 2026-09-17T00:03:50Z

Playwright e2e — ❌ Failed

Result	Count
✅ Passed	46
❌ Failed	1
⚠️ Flaky	0
⏭️ Skipped	13

Failures

102-passkeys.test.ts:44 › Passkeys › Enroll a passkey and sign in with it

Download the HTML report · Workflow run

gh run download 35163656793 -n playwright-report -D playwright-report
npx playwright show-report playwright-report

netlify · 2026-09-20T19:56:13Z

✅ Deploy Preview for authentik-integrations ready!

Name	Link
🔨 Latest commit	`8275dcf`
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-integrations/deploys/6acaaaf3d2d2e7000806e97a
😎 Deploy Preview	https://deploy-preview-26106--authentik-integrations.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

netlify · 2026-09-20T19:56:34Z

✅ Deploy Preview for authentik-storybook ready!

Name	Link
🔨 Latest commit	`8275dcf`
🔍 Latest deploy log	https://app.netlify.com/projects/authentik-storybook/deploys/6acaaaf36231860008378dd4
😎 Deploy Preview	https://deploy-preview-26106--authentik-storybook.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

github-actions · 2026-09-20T20:03:32Z

Playwright e2e

Download this run's HTML report and traces, then open the report:

gh run download 37354742063 -D playwright-artifacts
npx playwright show-report playwright-artifacts/playwright-report

Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-c45197832a3b9e1794d1fd207f3d0e1880d4a4bf
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-c45197832a3b9e1794d1fd207f3d0e1880d4a4bf

Afterwards, run the upgrade commands from the latest release notes.

…tion-migration-tests

…tion-migration-tests # Conflicts: # authentik/crypto/secrets/tests/test_credential_upgrades.py

The upgrade round trip moved to the layer that adds the migration helpers, and the kubeconfig and Google credential checks either moved next to their consumers or became redundant once JSON secrets are validated when they're saved.

…tion-migration-tests

dominic-r · 2026-10-10T21:16:43Z

Closing: this layer no longer has changes of its own. Its tests moved into the layers whose code they test, and its UI moved into #26107, so the stack goes from #26105 straight to #26107.

dominic-r requested a review from a team as a code owner September 14, 2026 00:46

dominic-r added this to the Release 2026.11.0: Required milestone Sep 14, 2026

dominic-r added the area:backend label Sep 14, 2026

dominic-r self-assigned this Sep 14, 2026

dominic-r added this to authentik Core Sep 14, 2026

github-project-automation Bot moved this to Todo in authentik Core Sep 14, 2026

dominic-r added this pull request to stack #26110 September 14, 2026 00:49

dominic-r force-pushed the dominic/rotation-endpoint-connectors branch from 5152422 to 542605b Compare September 14, 2026 02:02

dominic-r requested a review from a team as a code owner September 14, 2026 02:02

dominic-r force-pushed the dominic/rotation-migration-tests branch from c8ae300 to 863f472 Compare September 14, 2026 02:04

dominic-r force-pushed the dominic/rotation-migration-tests branch from 863f472 to 941e10e Compare September 14, 2026 02:18

dominic-r force-pushed the dominic/rotation-endpoint-connectors branch 2 times, most recently from 093794f to 4690c58 Compare September 14, 2026 02:28

dominic-r force-pushed the dominic/rotation-migration-tests branch from 941e10e to a5816ab Compare September 14, 2026 02:28

dominic-r force-pushed the dominic/rotation-endpoint-connectors branch from 4690c58 to a9342ca Compare September 14, 2026 02:48

dominic-r force-pushed the dominic/rotation-migration-tests branch from a5816ab to 03a4431 Compare September 14, 2026 02:48

dominic-r force-pushed the dominic/rotation-endpoint-connectors branch from a9342ca to d982492 Compare September 14, 2026 03:32

dominic-r force-pushed the dominic/rotation-migration-tests branch from 03a4431 to e9ccb36 Compare September 14, 2026 03:32

crypto: test credential upgrades and structured secrets

d1d6af2

dominic-r force-pushed the dominic/rotation-endpoint-connectors branch from d982492 to b8736b7 Compare September 14, 2026 04:00

dominic-r force-pushed the dominic/rotation-migration-tests branch from e9ccb36 to d1d6af2 Compare September 14, 2026 04:00

dominic-r added 6 commits September 15, 2026 12:06

crypto: update migration tests for the secrets app label and LDAP merge

f451b65

Merge branch 'dominic/rotation-endpoint-connectors' into dominic/rota…

7b3f6fa

…tion-migration-tests

Merge branch 'dominic/rotation-endpoint-connectors' into dominic/rota…

66d27e2

…tion-migration-tests

crypto: assert migrated secret types

eb9bd7e

crypto: simplify secret migration fixtures

bec94a7

Merge commit 'dfdcee1d38' into dominic/rotation-migration-tests

51565b4

crypto: share migration state setup

06b74bb

dominic-r added 2 commits September 20, 2026 15:38

crypto: verify explicit secret references and read-only migrated grants

0d26a84

sources/oauth: propagate the WeChat request fix

5f92486

web/admin: keep credential forms aligned with this stack layer

b0512db

dominic-r force-pushed the dominic/rotation-endpoint-connectors branch from 161e853 to 636efab Compare September 23, 2026 21:24

dominic-r requested review from a team as code owners September 23, 2026 21:25

dominic-r force-pushed the dominic/rotation-migration-tests branch from 1a4fbdf to 32fd4f6 Compare September 23, 2026 21:25

dominic-r added 4 commits October 5, 2026 13:12

secrets: merge updated rotation-endpoint-connectors

05abc38

crypto/tests: remove the cross-app migration harness

92861d8

crypto/tests: verify credential upgrades and downgrades

fb1f3a3

Merge branch 'dominic/rotation-endpoint-connectors' into dominic/rota…

979f633

…tion-migration-tests

dominic-r force-pushed the dominic/rotation-endpoint-connectors branch from 636efab to 07f4e77 Compare October 5, 2026 17:57

dominic-r force-pushed the dominic/rotation-migration-tests branch from 32fd4f6 to 979f633 Compare October 5, 2026 17:57

dominic-r added 6 commits October 5, 2026 14:16

Merge branch 'dominic/rotation-endpoint-connectors' into dominic/rota…

c451978

…tion-migration-tests

Merge branch 'dominic/rotation-endpoint-connectors' into dominic/rota…

bb81cb6

…tion-migration-tests # Conflicts: # authentik/crypto/secrets/tests/test_credential_upgrades.py

Merge branch 'dominic/rotation-endpoint-connectors' into dominic/rota…

22cc384

…tion-migration-tests

Merge branch 'dominic/rotation-endpoint-connectors' into dominic/rota…

28658c4

…tion-migration-tests

Merge branch 'dominic/rotation-endpoint-connectors' into dominic/rota…

8275dcf

…tion-migration-tests

dominic-r closed this Oct 10, 2026

dominic-r removed this pull request from stack #26110 October 10, 2026 21:17

Navigation Menu

Repository navigation

crypto: test credential upgrades and structured secrets - #26106

crypto: test credential upgrades and structured secrets#26106
dominic-r wants to merge 21 commits into
dominic/rotation-endpoint-connectorsfrom
dominic/rotation-migration-tests

dominic-r commented Sep 14, 2026

Uh oh!

netlify Bot commented Sep 14, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Sep 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 17, 2026

Uh oh!

netlify Bot commented Sep 20, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Sep 20, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 20, 2026 •

edited

Loading

Uh oh!

dominic-r commented Oct 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dominic-r commented Sep 14, 2026

Uh oh!

netlify Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for authentik-docs ready!

Uh oh!

codecov Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 17, 2026

Playwright e2e — ❌ Failed

Failures

Uh oh!

netlify Bot commented Sep 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for authentik-integrations ready!

Uh oh!

netlify Bot commented Sep 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for authentik-storybook ready!

Uh oh!

github-actions Bot commented Sep 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Playwright e2e

Installation instructions

Uh oh!

dominic-r commented Oct 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

netlify Bot commented Sep 14, 2026 •

edited

Loading

codecov Bot commented Sep 14, 2026 •

edited

Loading

github-actions Bot commented Sep 14, 2026 •

edited

Loading

netlify Bot commented Sep 20, 2026 •

edited

Loading

netlify Bot commented Sep 20, 2026 •

edited

Loading

github-actions Bot commented Sep 20, 2026 •

edited

Loading