From 0708e7504f8e343ebc30bac0aaafb46583377a7d Mon Sep 17 00:00:00 2001 From: Claude Bot Date: Wed, 28 Oct 2026 08:16:09 +0100 Subject: [PATCH] fix(authentik): LDAP outpost image back to a literal in the blueprint #1510 set the k8s-outposts blueprint's container_image through `!Env SAMBA_BRIDGE_LDAP_OUTPOST_IMAGE`. It did not resolve to the patched image: at 07:07:39Z the outpost controller recreated ak-outpost-ldap-outpost with Authentik's default ghcr.io/goauthentik/ldap:2026.8.4, although every worker carries the env var. The upstream outpost lacks the sambaSamAccount/sambaDomain object classes DSM's smbd queries for. container_image is a literal again, on the samba-bridge outpost build that exists now (2026-10-28-0655). Co-Authored-By: Claude Opus 5.5 --- kubernetes/apps/authentik/blueprints-configmap.yaml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/kubernetes/apps/authentik/blueprints-configmap.yaml b/kubernetes/apps/authentik/blueprints-configmap.yaml index 52c89d45..5d60a4d2 100644 --- a/kubernetes/apps/authentik/blueprints-configmap.yaml +++ b/kubernetes/apps/authentik/blueprints-configmap.yaml @@ -705,9 +705,8 @@ data: # AND (&(sambaDomainName=...)(objectClass=sambaDomain)) # return entries instead of short-circuiting. Built from # the samba-bridge repo at - # gitea.renner.uno/konairius/authentik-samba-bridge ; the tag is - # tracked by Flux in helmrelease.yaml global.env. - container_image: !Env SAMBA_BRIDGE_LDAP_OUTPOST_IMAGE + # gitea.renner.uno/konairius/authentik-samba-bridge . + container_image: gitea.renner.uno/konairius/authentik-samba-bridge-ldap-outpost:2026-10-28-0655 object_naming_template: "ak-outpost-%(name)s" kubernetes_namespace: authentik kubernetes_replicas: 1 -- 2.54.0