From 7ecd10702ebd3b804a7343699e550d6b3c90aa07 Mon Sep 17 00:00:00 2001 From: Claude Bot Date: Sat, 7 Nov 2026 22:38:11 +0100 Subject: [PATCH] fix(authentik): turn off error reporting error_reporting.enabled has been true since the first deploy. The server hands the Sentry DSN (authentik.error-reporting.a7k.io) to every outpost through /api/v3/root/config/, and the RADIUS and LDAP outposts then try to send reports there; egress policy drops all of it. Reporting to a third party was never intended to work here. S28-43 Co-Authored-By: Claude Opus 5.5 --- kubernetes/apps/authentik/helmrelease.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/kubernetes/apps/authentik/helmrelease.yaml b/kubernetes/apps/authentik/helmrelease.yaml index 5bc30466..6e100c7c 100644 --- a/kubernetes/apps/authentik/helmrelease.yaml +++ b/kubernetes/apps/authentik/helmrelease.yaml @@ -113,8 +113,10 @@ spec: value: "10.244.0.0/16,fd10:244::/48,127.0.0.0/8,::1/128" authentik: log_level: info + # Off: reports would go to authentik.error-reporting.a7k.io (Sentry), + # which egress policy denies. The outposts take this from the server. error_reporting: - enabled: true + enabled: false postgresql: host: "ak-pg-rw.authentik.svc.cluster.local" name: "authentik" -- 2.54.0