1cfe1aff13
* root: initial rename * web: rename custom element prefix * root: rename external functions with pb_ prefix * root: fix formatting * root: replace domain with goauthentik.io * proxy: update path * root: rename remaining prefixes * flows: rename file extension * root: pbadmin -> akadmin * docs: fix image filenames * lifecycle: ignore migration files * ci: copy default config from current source before loading last tagged * *: new sentry dsn * tests: fix missing python3.9-dev package * root: add additional migrations for service accounts created by outposts * core: mark system-created service accounts with attribute * policies/expression: fix pb_ replacement not working * web: fix last linting errors, add lit-analyse * policies/expressions: fix lint errors * web: fix sidebar display on screens where not all items fit * proxy: attempt to fix proxy pipeline * proxy: use go env GOPATH to get gopath * lib: fix user_default naming inconsistency * docs: add upgrade docs * docs: update screenshots to use authentik * admin: fix create button on empty-state of outpost * web: fix modal submit not refreshing SiteShell and Table * web: fix height of app-card and height of generic icon * web: fix rendering of subtext * admin: fix version check error not being caught * web: fix worker count not being shown * docs: update screenshots * root: new icon * web: fix lint error * admin: fix linting error * root: migrate coverage config to pyproject
66 lines
2.2 KiB
Markdown
66 lines
2.2 KiB
Markdown
---
|
|
title: Upgrading to 0.12
|
|
---
|
|
|
|
This update brings these headline features:
|
|
|
|
- Rewrite Outpost state Logic, which now supports multiple concurrent Outpost instances.
|
|
- Add Kubernetes Integration for Outposts, which deploys and maintains Outposts with High Availability in a Kubernetes Cluster
|
|
- Add System Task Overview to see all background tasks, their status, the log output, and retry them
|
|
- Alerts now disappear automatically
|
|
- Audit Logs are now searchable
|
|
- Users can now create their own Tokens to access the API
|
|
- docker-compose deployment now uses traefik 2.3
|
|
|
|
Fixes:
|
|
|
|
- Fix high CPU Usage of the proxy when Websocket connections fail
|
|
|
|
## Upgrading
|
|
|
|
### docker-compose
|
|
|
|
Docker-compose users should download the latest docker-compose file from [here](https://raw.githubusercontent.com/BeryJu/authentik/master/docker-compose.yml). This includes the new traefik 2.3.
|
|
|
|
Afterwards, you can simply run `docker-compose up -d` and then the normal upgrade command of `docker-compose run --rm server migrate`.
|
|
|
|
### Kubernetes
|
|
|
|
For Kubernetes users, there are some changes to the helm values.
|
|
|
|
The values change from
|
|
|
|
```yaml
|
|
config:
|
|
# Optionally specify fixed secret_key, otherwise generated automatically
|
|
# secret_key: _k*@6h2u2@q-dku57hhgzb7tnx*ba9wodcb^s9g0j59@=y(@_o
|
|
# Enable error reporting
|
|
error_reporting:
|
|
enabled: false
|
|
environment: customer
|
|
send_pii: false
|
|
# Log level used by web and worker
|
|
# Can be either debug, info, warning, error
|
|
log_level: warning
|
|
```
|
|
|
|
to
|
|
|
|
```yaml
|
|
config:
|
|
# Optionally specify fixed secret_key, otherwise generated automatically
|
|
# secretKey: _k*@6h2u2@q-dku57hhgzb7tnx*ba9wodcb^s9g0j59@=y(@_o
|
|
# Enable error reporting
|
|
errorReporting:
|
|
enabled: false
|
|
environment: customer
|
|
sendPii: false
|
|
# Log level used by web and worker
|
|
# Can be either debug, info, warning, error
|
|
logLevel: warning
|
|
```
|
|
|
|
in order to be consistent with the rest of the settings.
|
|
|
|
There is also a new setting called `kubernetesIntegration`, which controls the Kubernetes integration for authentik. When enabled (the default), a Service Account is created, which allows authentik to deploy and update Outposts.
|