root: support running authentik in subpath

[BeryJu]

Details

closes #4509

---

Checklist

• [ ] Local tests pass (ak test authentik/)
• [ ] The code has been formatted (make lint-fix)

If an API change has been made

• [ ] The API schema has been updated (make gen-build)

If changes to the frontend have been made

• [ ] The code has been formatted (make web)

If applicable

• [ ] The documentation has been updated
• [ ] The documentation has been formatted (make website)

[netlify[bot]]

✅ Deploy Preview for authentik-storybook ready!

Name	Link
🔨 Latest commit	65fae59bfd1c62a6d6dd7379359d9cf8708df89e
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-storybook/deploys/66951c866fd28a00089c390a
😎 Deploy Preview	https://deploy-preview-8675--authentik-storybook.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[netlify[bot]]

✅ Deploy Preview for authentik-docs canceled.

Name	Link
🔨 Latest commit	65fae59bfd1c62a6d6dd7379359d9cf8708df89e
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-docs/deploys/66951c86273cba0008bb391c

[github-actions[bot]]

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-ghcr.io/goauthentik/dev-server:gh-65fae59bfd1c62a6d6dd7379359d9cf8708df89e
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

For arm64, use these values:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-ghcr.io/goauthentik/dev-server:gh-65fae59bfd1c62a6d6dd7379359d9cf8708df89e-arm64
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-ghcr.io/goauthentik/dev-server:gh-65fae59bfd1c62a6d6dd7379359d9cf8708df89e

For arm64, use these values:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-ghcr.io/goauthentik/dev-server:gh-65fae59bfd1c62a6d6dd7379359d9cf8708df89e-arm64

Afterwards, run the upgrade commands from the latest release notes.

[rissson]

There probably are security implications with this, like other apps being able to access authentik's cookies. We should probably mention them in the documentation.

[BeryJu]

There probably are security implications with this, like other apps being able to access authentik's cookies. We should probably mention them in the documentation.

Oh yeah, I had this set when initially testing but it must've gotten removed at some point: https://github.com/goauthentik/authentik/pull/8675/commits/06723cb621376acaf146ccfe8df5f322caee2508

[notion-workspace[bot]]

Subpath support

[cfradewavecom]

I would like to test this but got image NotFound when using ghcr.io/goauthentik/dev-server:gh-3a176a0024e688cd6b126923b221b3e207314def

Can someone retry pipeline or event better rebase this PR with latest release? Thanks

[codecov[bot]]

Codecov Report

Attention: Patch coverage is 92.85714% with 2 lines in your changes missing coverage. Please review.

Project coverage is 92.61%. Comparing base (5c8a9ab) to head (a78dca5). Report is 1 commits behind head on main.

Files	Patch %	Lines
authentik/brands/models.py	77.77%	2 Missing :warning:

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #8675   +/-   ##
=======================================
  Coverage   92.61%   92.61%           
=======================================
  Files         714      714           
  Lines       35012    35031   +19     
=======================================
+ Hits        32425    32444   +19     
  Misses       2587     2587           

Flag	Coverage Δ
e2e	49.60% <71.42%> (+0.01%)	:arrow_up:
integration	25.37% <25.00%> (+<0.01%)	:arrow_up:
unit	90.12% <92.85%> (-0.01%)	:arrow_down:

Flags with carried forward coverage won't be shown. Click here to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

[xhb]

Do you have any updates on this PR? I'm really looking forward to this feature, please merge it as soon as possible.