Authentik storage #3928
Draft
Authentik storage #3928
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
stavros-k
force-pushed
the
authentik-storage
branch
from
eb1cce9 to
79219f9
Compare
Contributor
There was a problem hiding this comment.
Pull request overview
This PR migrates Authentik's storage structure from separate "media" storage to a unified "data" storage, following an upstream change. The implementation includes a migration path for existing installations while preventing new installations from using the deprecated configuration.
Key changes:
- Upgrades Authentik from version 2025.10.3 to 2025.12.0
- Introduces new "data" storage that consolidates media and reports under a single path
- Adds migration script to automatically enable deprecated media flag for existing installations
- Implements validation to prevent new installs from using deprecated media storage
Reviewed changes
Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| app.yaml | Bumps app version from 1.0.58 to 1.1.0 and app_version from 2025.10.3 to 2025.12.0 |
| ix_values.yaml | Updates image tag to 2025.12.0 and adds data_base_path constant |
| questions.yaml | Adds "uses_deprecated_media" flag and new "data" storage configuration section |
| docker-compose.yaml | Refactors container setup to use unified data storage with conditional deprecated media mounting |
| test_values/basic-values.yaml | Updates test configuration to include new data storage while maintaining deprecated media for backwards compatibility testing |
| migrations/enable_deprecated_media | Adds migration script to set uses_deprecated_media flag for existing installations |
| deprecations.yaml | Defines deprecation notice for media storage with migration instructions |
| app_migrations.yaml | Registers the enable_deprecated_media migration for versions upgrading from ≤1.0.58 to ≥1.1.0 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Blocked until 2025.12.0 is released.
"Media" has been moved under a unified "Data" storage by upstream.
New Installs:
The "media" storage is "disabled" and will result in an exception if a user tries to use it. This avoids doing a fresh install with a soon-to-be-removed setup
Existing installs:
During upgrade the "Use Deprecated Media" flag will be set, which will do a "double" mount.
This will continue to "work" as it should.
"Data" under
/data"Media" under
/data/media.A deprecated notice will be shown in the Notes card and on the app wizard.
Migration steps:
/mnt/tank/apps/authentik/data)/mnt/tank/apps/authentik/media)/mnt/tank/apps/authentik/mediato/mnt/tank/apps/authentik/data/media(ie if there is a file like/mnt/tank/apps/authentik/media/my-file.pngit should end up being/mnt/tank/apps/authentik/data/media/my-file.png)/mnt/tank/apps/authentik/dataUse Deprecated Media Storagecheckbox. (Media storage should no longer show)