Application icons get into S3 with unnecessary suffixes and are not displayed

[EAnsy]

Bug description

After update from 2024.6.4 to 2024.8 application icons disappeared. Adding them again don't rise error, but don't help either. When reopen App UI settings shows no icon set! But I see strange icon objects in S3 having extra pseudorandom suffixes before image extensions, like Vault_BLRSRT7.png instead of normal Vault.png

To Reproduce Steps to reproduce the behavior:

1. Have working Authentik 2024.6.4 in k8s with S3 as media storage (Minio)
2. Update to 2024.8 version
3. See acronyms instead of application icons everywhere in web interface.
4. Try to add icons to Apps in settings with no errors, but no success.
5. Open S3 bucket and see new icon objects with strange names.

Expected behavior All applications icons are in their places displayed and adding/replacing normally even stored in S3 bucket.

Screenshots

Logs

{"action": "model_updated", "auth_via": "session", "client_ip": "10.2.20.111", "context": {"http_request": {"args": {}, "method": "PUT", "path": "/api/v3/core/applications/swagger-ui/", "request_id": "1cbcf0cd98534cfa9894c0b8ab383e98", "user_agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"}, "model": {"app": "authentik_core", "model_name": "application", "name": "Swagger UI", "pk": "efe3e60725c84694a12bf5e1a37e095f"}}, "domain_url": "sso.int.example.com", "event": "Created Event", "host": "sso.int.example.com", "level": "info", "logger": "authentik.events.models", "pid": 2825, "request_id": "1cbcf0cd98534cfa9894c0b8ab383e98", "schema_name": "public", "timestamp": "2024-09-03T15:36:04.564086", "user": {"email": "[email protected]", "pk": 7, "username": "admin"}}
{"auth_via": "session", "domain_url": "sso.int.example.com", "event": "Task published", "host": "sso.int.example.com", "level": "info", "logger": "authentik.root.celery", "pid": 2825, "request_id": "1cbcf0cd98534cfa9894c0b8ab383e98", "schema_name": "public", "task_id": "6bb02088169e402babc43bcecbaa0fe4", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2024-09-03T15:36:04.623225"}
{"auth_via": "session", "domain_url": "sso.int.example.com", "event": "/api/v3/core/applications/swagger-ui/", "host": "sso.int.example.com", "level": "info", "logger": "authentik.asgi", "method": "PUT", "pid": 2825, "remote": "10.2.20.111", "request_id": "1cbcf0cd98534cfa9894c0b8ab383e98", "runtime": 618, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-09-03T15:36:04.658072", "user": "admin", "user_agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"}
{"action": "model_updated", "auth_via": "session", "client_ip": "10.2.20.111", "context": {"http_request": {"args": {}, "method": "POST", "path": "/api/v3/core/applications/swagger-ui/set_icon/", "request_id": "9f0316f947c445188b18c1834941ad73", "user_agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"}, "model": {"app": "authentik_core", "model_name": "application", "name": "Swagger UI", "pk": "efe3e60725c84694a12bf5e1a37e095f"}}, "domain_url": "sso.int.example.com", "event": "Created Event", "host": "sso.int.example.com", "level": "info", "logger": "authentik.events.models", "pid": 2825, "request_id": "9f0316f947c445188b18c1834941ad73", "schema_name": "public", "timestamp": "2024-09-03T15:36:05.641173", "user": {"email": "[email protected]", "pk": 7, "username": "admin"}}
{"auth_via": "session", "domain_url": "sso.int.example.com", "event": "Task published", "host": "sso.int.example.com", "level": "info", "logger": "authentik.root.celery", "pid": 2825, "request_id": "9f0316f947c445188b18c1834941ad73", "schema_name": "public", "task_id": "bb2d636b1b824e32b0ebe662a0457e94", "task_name": "authentik.events.tasks.event_notification_handler", "timestamp": "2024-09-03T15:36:05.696954"}
{"auth_via": "session", "domain_url": "sso.int.example.com", "event": "/api/v3/core/applications/swagger-ui/set_icon/", "host": "sso.int.example.com", "level": "info", "logger": "authentik.asgi", "method": "POST", "pid": 2825, "remote": "10.2.20.111", "request_id": "9f0316f947c445188b18c1834941ad73", "runtime": 902, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-09-03T15:36:05.702622", "user": "admin", "user_agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"}
{"domain_url": null, "event": "/ws/client/", "level": "info", "logger": "authentik.asgi", "pid": 2952, "remote": "10.2.20.111", "schema_name": "public", "scheme": "ws", "timestamp": "2024-09-03T15:36:06.297309", "user_agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"}
{"auth_via": "session", "domain_url": "sso.int.example.com", "event": "/api/v3/core/applications/swagger-ui/", "host": "sso.int.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 2825, "remote": "10.2.20.111", "request_id": "0a9891f2d90b48f78997ae03d58a8cc5", "runtime": 504, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-09-03T15:36:06.357579", "user": "admin", "user_agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"}
{"auth_via": "session", "domain_url": "sso.int.example.com", "event": "/api/v3/core/applications/?ordering=name&page=1&page_size=20&search=&superuser_full_list=true", "host": "sso.int.example.com", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 2952, "remote": "10.2.20.111", "request_id": "9b5a402c7f384c5ab84b796a25bb4add", "runtime": 1189, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2024-09-03T15:36:07.050573", "user": "admin", "user_agent": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"}

Version and Deployment (please complete the following information):

• authentik version: 2024.8
• Deployment: k8s, helm, S3 storage for media

Additional context Other deployments (docker and no S3 media storage) upgraded well and works fine.