Skip to content
authentik-ci-main

core: add additional RBAC permission to restrict setting the superuser status on groups #27795

Sign in to view logs

core: add additional RBAC permission to restrict setting the superuser status on groups

core: add additional RBAC permission to restrict setting the superuser status on groups #27795

Triggered via pull request January 31, 2025 00:00
@BeryJuBeryJu
opened #12900
core/group-superuser-rbac-perm
Status Success
Total duration 34m 10s
Artifacts 2

ci-main.yml

on: pull_request
Matrix: lint
Matrix: test-e2e
Matrix: test-migrations-from-stable
Matrix: test-unittest
test-migrations
2m 16s
test-migrations
test-integration
5m 17s
test-integration
ci-core-mark
2s
ci-core-mark
build  /  ...  /  Build amd64
9m 3s
build / build-server-amd64 / Build amd64
build  /  ...  /  Build arm64
8m 9s
build / build-server-arm64 / Build arm64
build  /  get-tags
6s
build / get-tags
Matrix: build / merge-server
pr-comment
5s
pr-comment
Fit to window
Zoom out
Zoom in

Annotations

60 warnings
test-e2e (scim): home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-e2e (radius): home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-e2e (flows): home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kubernetes/client/rest.py#L44
HTTPResponse.getheaders() is deprecated and will be removed in urllib3 v2.1.0. Instead access HTTPResponse.headers directly.
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kubernetes/client/rest.py#L44
HTTPResponse.getheaders() is deprecated and will be removed in urllib3 v2.1.0. Instead access HTTPResponse.headers directly.
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kubernetes/client/rest.py#L44
HTTPResponse.getheaders() is deprecated and will be removed in urllib3 v2.1.0. Instead access HTTPResponse.headers directly.
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kubernetes/client/rest.py#L44
HTTPResponse.getheaders() is deprecated and will be removed in urllib3 v2.1.0. Instead access HTTPResponse.headers directly.
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kubernetes/client/rest.py#L44
HTTPResponse.getheaders() is deprecated and will be removed in urllib3 v2.1.0. Instead access HTTPResponse.headers directly.
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kubernetes/client/rest.py#L44
HTTPResponse.getheaders() is deprecated and will be removed in urllib3 v2.1.0. Instead access HTTPResponse.headers directly.
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kubernetes/client/rest.py#L44
HTTPResponse.getheaders() is deprecated and will be removed in urllib3 v2.1.0. Instead access HTTPResponse.headers directly.
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kubernetes/client/rest.py#L44
HTTPResponse.getheaders() is deprecated and will be removed in urllib3 v2.1.0. Instead access HTTPResponse.headers directly.
test-integration: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kubernetes/client/rest.py#L44
HTTPResponse.getheaders() is deprecated and will be removed in urllib3 v2.1.0. Instead access HTTPResponse.headers directly.
test-e2e (oauth-oidc): home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-e2e (saml): home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-e2e (proxy): home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-e2e (oauth): home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-e2e (ldap): home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/drf_jsonschema_serializer/fields.py#L3
jsonschema.RefResolver is deprecated as of v4.18.0, in favor of the https://github.com/python-jsonschema/referencing library, which provides more compliant referencing behavior as well as more flexible APIs for customization. A future release will remove RefResolver. Please file a feature request (on referencing) if you are missing an API for the kind of customization you need.
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/drf_jsonschema_serializer/fields.py#L3
jsonschema.RefResolver is deprecated as of v4.18.0, in favor of the https://github.com/python-jsonschema/referencing library, which provides more compliant referencing behavior as well as more flexible APIs for customization. A future release will remove RefResolver. Please file a feature request (on referencing) if you are missing an API for the kind of customization you need.
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kiota_abstractions/default_query_parameters.py#L23
GetQueryParameters is deprecated. Use QueryParameters instead.
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/groups/groups_request_builder.py#L241
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/groups/groups_request_builder.py#L248
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/users/users_request_builder.py#L236
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/users/users_request_builder.py#L243
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/k5test/_utils.py#L99
invalid escape sequence '\('
test-unittest - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/fido2/utils.py#L129
Calling websafe_decode on a byte value is deprecated, and will no longer be allowed starting in python-fido2 2.0
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/drf_jsonschema_serializer/fields.py#L3
jsonschema.RefResolver is deprecated as of v4.18.0, in favor of the https://github.com/python-jsonschema/referencing library, which provides more compliant referencing behavior as well as more flexible APIs for customization. A future release will remove RefResolver. Please file a feature request (on referencing) if you are missing an API for the kind of customization you need.
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/drf_jsonschema_serializer/fields.py#L3
jsonschema.RefResolver is deprecated as of v4.18.0, in favor of the https://github.com/python-jsonschema/referencing library, which provides more compliant referencing behavior as well as more flexible APIs for customization. A future release will remove RefResolver. Please file a feature request (on referencing) if you are missing an API for the kind of customization you need.
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kiota_abstractions/default_query_parameters.py#L23
GetQueryParameters is deprecated. Use QueryParameters instead.
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/groups/groups_request_builder.py#L241
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/groups/groups_request_builder.py#L248
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/users/users_request_builder.py#L236
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/users/users_request_builder.py#L243
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/k5test/_utils.py#L99
invalid escape sequence '\('
test-unittest - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/fido2/utils.py#L129
Calling websafe_decode on a byte value is deprecated, and will no longer be allowed starting in python-fido2 2.0
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/drf_jsonschema_serializer/fields.py#L3
jsonschema.RefResolver is deprecated as of v4.18.0, in favor of the https://github.com/python-jsonschema/referencing library, which provides more compliant referencing behavior as well as more flexible APIs for customization. A future release will remove RefResolver. Please file a feature request (on referencing) if you are missing an API for the kind of customization you need.
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/drf_jsonschema_serializer/fields.py#L3
jsonschema.RefResolver is deprecated as of v4.18.0, in favor of the https://github.com/python-jsonschema/referencing library, which provides more compliant referencing behavior as well as more flexible APIs for customization. A future release will remove RefResolver. Please file a feature request (on referencing) if you are missing an API for the kind of customization you need.
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kiota_abstractions/default_query_parameters.py#L23
GetQueryParameters is deprecated. Use QueryParameters instead.
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/groups/groups_request_builder.py#L241
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/groups/groups_request_builder.py#L248
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/users/users_request_builder.py#L236
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/users/users_request_builder.py#L243
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/k5test/_utils.py#L99
invalid escape sequence '\('
test-migrations-from-stable - PostgreSQL 15-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/organization/organization_request_builder.py#L240
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/_pytest/config/__init__.py#L1277
Module already imported so cannot be rewritten: anyio
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/drf_jsonschema_serializer/fields.py#L3
jsonschema.RefResolver is deprecated as of v4.18.0, in favor of the https://github.com/python-jsonschema/referencing library, which provides more compliant referencing behavior as well as more flexible APIs for customization. A future release will remove RefResolver. Please file a feature request (on referencing) if you are missing an API for the kind of customization you need.
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/drf_jsonschema_serializer/fields.py#L3
jsonschema.RefResolver is deprecated as of v4.18.0, in favor of the https://github.com/python-jsonschema/referencing library, which provides more compliant referencing behavior as well as more flexible APIs for customization. A future release will remove RefResolver. Please file a feature request (on referencing) if you are missing an API for the kind of customization you need.
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/kiota_abstractions/default_query_parameters.py#L23
GetQueryParameters is deprecated. Use QueryParameters instead.
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/groups/groups_request_builder.py#L241
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/groups/groups_request_builder.py#L248
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/users/users_request_builder.py#L236
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/users/users_request_builder.py#L243
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/k5test/_utils.py#L99
invalid escape sequence '\('
test-migrations-from-stable - PostgreSQL 16-alpine: home/runner/.cache/pypoetry/virtualenvs/authentik-xvtLQ9eE-py3.12/lib/python3.12/site-packages/msgraph/generated/organization/organization_request_builder.py#L240
This class is deprecated. Please use the generic RequestConfiguration class generated by the generator.
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L88
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "GEOIPUPDATE_LICENSE_KEY_FILE") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L88
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "GEOIPUPDATE_LICENSE_KEY_FILE") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/

Artifacts

Produced during runtime
Name Size
goauthentik~authentik~XR4XRQ.dockerbuild
195 KB
goauthentik~authentik~Y8IAGB.dockerbuild
199 KB