eliott/authentik
1
0
Fork 0
mirror of https://github.com/goauthentik/authentik synced 2026-04-27 18:07:15 +02:00
Code Issues Packages Projects Releases Wiki Activity
21,675 Commits 318 Branches 440 Tags
e7fcfb7e67d5df3e8a8a5da170f18fa4c6b98731
Commit Graph

57 Commits

Author SHA1 Message Date
Jens L.
1e0f18f63e lifecycle: disable gunicorn control socket (#21408) 
* lifecycle: disable gunicorn control socket

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* format

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2026-04-06 13:34:37 +02:00
Marc 'risson' Schmitt
0bc4739f54 lib/config: explicit some defaults (#21079) 2026-03-23 13:43:16 +00:00
Severin Schoepke
ea3c56ad80 lifecycle: make gunicorn --max-requests configurable (#20736) 2026-03-05 16:34:18 +01:00
Jens L.
fa7dd064b1 lifecycle: re-add quoted types for gunicorn config (#19500) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2026-01-16 01:32:49 +01:00
Jens L.
06ed43002f root: upgrade ruff lint for 3.14 (#19461) 
* root: upgrade ruff lint for 3.14

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* redo makefile

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* format

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2026-01-15 03:15:02 +01:00
Jens L.
3d8f4c5979 *: add ruff BLE rules (#16943) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2025-09-23 13:38:42 +02:00
Marc 'risson' Schmitt
c9a4eff3a8 lifecycle: set PROMETHEUS_MULTIPROC_DIR as early as possible (#16298) 2025-08-21 11:09:36 -03:00
Jens L.
a38239509b root: Better version bump (#14905) 
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2025-08-12 13:50:12 +00:00
Marc 'risson' Schmitt
29f20a4829 *: replace Celery with Dramatiq (#13492) 2025-07-28 17:00:09 +02:00
Marc 'risson' Schmitt
d043dacece root: extract custom setup code (#15150) 2025-06-19 15:56:35 +02:00
Jens L.
334e2c466f lifecycle: much improved debugging experience (#12804) 
* lifecycle: much improved debugging experience

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* format

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add start debug launch configs

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* only install dev deps in container

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add pathMappings

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use debugger variable to enable only debugger without debug mode enabled

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix path map

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2025-02-01 03:35:56 +01:00
Marc 'risson' Schmitt
ae86184511 root: add configuration option to enable fips (#10088) 2024-06-14 10:04:00 +00:00
Jens L
c3445374c2 core: FIPS (#9683) 
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2024-05-23 17:34:52 +00:00
dependabot[bot]
fbab822db1 core: bump ruff from 0.4.4 to 0.4.5 (#9819) 
* core: bump ruff from 0.4.4 to 0.4.5

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.4.4 to 0.4.5.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/v0.4.4...v0.4.5)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* format

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io>
 2024-05-23 13:12:52 +02:00
Marc 'risson' Schmitt
33fa159dad lifecycle: gunicorn: fix app preload (#9274) 
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2024-04-15 21:28:25 +02:00
Jens L
7ea721c487 root: move database calls from ready() to dedicated startup signal (#9081) 
* root: move database calls from ready() to dedicated startup signal

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* optimise gunicorn startup to only do DB code in one worker

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* always use 2 workers in compose

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* send startup signals for test runner

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove k8s import that isn't really needed

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* ci: bump nested actions

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix @reconcile_app not triggering reconcile due to changed functions

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* connect startup with uid

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* adjust some log levels

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove internal healthcheck

we didn't really use it to do anything, and we shouldn't have to since the live/ready probes are handled by django anyways and so the container runtime will restart the server if needed

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add setproctitle for gunicorn and celery process titles

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* configure structlog early to use it

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* Revert "configure structlog early to use it"

This reverts commit 16778fdbbca0f5c474d376c2f85c6f8032c06044.

* Revert "adjust some log levels"

This reverts commit a129f7ab6aecf27f1206aea1ad8384ce897b74ad.

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

# Conflicts:
#	authentik/root/settings.py

* optimize startup to not spawn a bunch of one-off processes

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* idk why this shows up

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2024-04-02 14:19:32 +02:00
Jens L
b225b0200e root: early spring clean for linting (#8498) 
* remove pyright

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove pylint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* replace pylint with ruff

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* ruff fix

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>

* fix UP038

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix DJ012

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix default arg

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix UP031

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* rename stage type to view

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix DJ008

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix remaining upgrade

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix PLR2004

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix B904

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix PLW2901

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix remaining issues

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* prevent ruff from breaking the code

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* stages/prompt: refactor field building

Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix lint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fully remove isort

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
 2024-02-24 18:13:35 +01:00
Jens L
8949464294 root: reformat with latest black version and fix tests (#8376) 
* format files

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix pyright

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* revert #8367

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* sigh

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2024-01-31 15:24:45 +01:00
Jens L
a0f607b5ac web/flows: bottom-align about text on flows page (#7051) 
* web/flows: bottom-align about text on flows page

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix a bunch of typos

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-10-03 14:10:10 +02:00
Jens L
fd561ac802 root: connect to backend via socket (#6720) 
* root: connect to gunicorn via socket

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* put socket in temp folder

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use non-socket connection for debug

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't hardcode local url

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix dev_server missing websocket

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* dedupe logging config between gunicorn and main app

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* slight refactor for proxy errors

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-09-02 17:58:37 +02:00
Jens L
561e6956fe root: add get_int to config loader instead of casting to int everywhere (#6436) 
* root: add get_int to config loader instead of casting to int everywhere

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve error handling, add test

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-07-31 19:34:59 +02:00
Jens L
2f469d2709 root: partial Live-updating config (#5959) 
* stages/email: directly use email credentials from config

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use custom database backend that supports dynamic credentials

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add crude config reloader

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* make method names for CONFIG clearer

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* replace config.set with environ

Not sure if this is the cleanest way, but it persists through a config reload

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* re-add set for @patch

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* even more crudeness

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* clean up some old stuff?

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* somewhat rewrite config loader to keep track of a source of an attribute so we can refresh it

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* cleanup old things

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix flow e2e

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-07-19 23:13:22 +02:00
Jens L
a987846c76 root: celery refactor (#6095) 
* root: celery refactor

cleanup deprecation messages by configuring celery with a single object

run celery as django management command

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* improve debug experience

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix lint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add debugpy to dev dependencies

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix task_always_eager

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-06-28 16:44:50 +02:00
Jens L
5b0cc3672b root: add method to get install_id without django being loaded (#5755) 
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-25 18:52:21 +02:00
Jens L
0d0bb1a559 root: add install ID (#5717) 
* root: add install ID

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix tests

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* add fallback when no migrations table exists

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix lint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-05-22 17:24:12 +02:00
Jens L
dfa80543b5 root: add ruff linter (#5240) 
* root: add ruff linter

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* actually add ruff

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix lint

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-04-18 13:28:19 +02:00
Jens L
9568f4dbd6 root: improve code style (#4436) 
* cleanup pylint comments

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* remove more

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix url name

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* *: use ExtractHour instead of ExtractDay

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
 2023-01-15 17:02:31 +01:00
Jens Langhammer
6ca1654129 lifecycle: don't set user/group in gunicorn 
closes #4098 closes #3236

the user and group are inherited from the parent process so this isnt required

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-12-02 12:42:55 +02:00
Jens L
b16a3d5697 internal: use config system for workers/threads, document the settings (#3626) 
use config system for workers/threads, document the settings

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-09-21 09:59:03 +02:00
Jens L
3eb466ff4b lifecycle: cleanup prometheus (#2972) 
* remove high cardinality labels

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* retry worker number for prometheus multiprocess id

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* revert to pid, use subdirectories

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* cleanup more

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* use worker id based off of https://github.com/benoitc/gunicorn/issues/1352

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix missing app label

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* tests/e2e: remove static names

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* fix

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-05-29 21:45:25 +02:00
Jens Langhammer
15d8988569 Revert "lifecycle: use worker nr instead of process id to keep number of prometheus database files low" 
This reverts commit 254249e38b.

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-04-29 18:14:04 +02:00
Jens Langhammer
254249e38b lifecycle: use worker nr instead of process id to keep number of prometheus database files low 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

#2784
 2022-04-28 23:09:39 +02:00
Jens Langhammer
0232c4e162 lifecycle: send analytics in gunicorn config to decrease outgoing requests when workers get restarted 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-02-01 15:01:43 +01:00
Jens Langhammer
f679250edd lifecycle: remove gunicorn reload option 
should help with #2159
 2022-01-31 12:06:08 +00:00
Jens Langhammer
0d47654651 root: add max-requests for gunicorn and max tasks for celery 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-01-26 10:04:58 +01:00
Jens Langhammer
111fbf119b *: refactor prometheus gauges to directly updating metrics view 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2022-01-16 13:57:07 +01:00
Jens Langhammer
552ddda909 lifecycle: use custom worker class 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-12-11 19:55:09 +01:00
Jens Langhammer
39acb044fb lifecycle: allow custom worker count in k8s 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-29 14:27:55 +01:00
Jens Langhammer
cf5e70c759 lifecycle: revert to non-h11 worker 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-11-04 13:16:10 +01:00
Jens Langhammer
98907ec889 root: remove structlog.processors.format_exc_info for new structlog version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-13 09:42:49 +02:00
Jens Langhammer
9778050dda lifecycle: switch to h11 uvicorn worker for now 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-10-04 18:03:08 +02:00
Jens Langhammer
8e59b06611 lifecycle: migrate to gunicorn instead of runserver 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-09-13 17:54:23 +02:00
Jens Langhammer
229468175a lifecycle: fix error in gunicorn config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-09 01:07:50 +02:00
Jens Langhammer
4cd3466e56 root: ignore known warnings 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-09 00:27:29 +02:00
Jens Langhammer
919946609d web/elements: add separate flag for chips when checkboxes are enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 10:16:13 +02:00
Jens Langhammer
13a8ad3126 lifecycle: decrease default worker count on compose 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-08-05 09:37:14 +02:00
Jens Langhammer
8a666535a8 website/docs: update container explanation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 17:49:21 +02:00
Jens Langhammer
5627848fad lifecycle: allow adjustment of worker cores 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 13:20:27 +02:00
Jens Langhammer
4054e6da8c helm: don't automount Service token when integration is not enabled, improve k8s detection 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-07 16:16:17 +02:00
Jens Langhammer
bfe8bb5e61 lifecycle: fix typo causing single process in docker-compose 2021-01-27 10:13:23 +01:00