feat(helm): update chart authentik ( 2026.2.3 → 2026.5.2 )

[renovate]

This PR contains the following updates:

Package	Update	Change
authentik (source)	minor	2026.2.3 → 2026.5.2

---

Release Notes

goauthentik/helm (authentik)

v2026.5.2

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

What's Changed

• charts/authentik: bump to 2026.5.2 by @​authentik-automation[bot] in #​476

Full Changelog: goauthentik/helm@authentik-2026.5.0...authentik-2026.5.2

v2026.5.0

Compare Source

authentik is an open-source Identity Provider focused on flexibility and versatility

See https://docs.goauthentik.io/releases/2026.5/

What's Changed

• charts/authentik: bump postgresql subchart from 16.7.27 to 18.6.5 by @​renovate[bot] in #​410
• charts/authentik: remove hardcoded AUTHENTIK_LISTEN variables by @​rissson in #​468
• charts/authentik: update docker.io/library/postgres Docker tag to v17.10 by @​renovate[bot] in #​470
• charts/authentik: bump postgresql subchart to v18.6.7 by @​renovate[bot] in #​469
• charts/authentik: bump to 2026.5.0 by @​authentik-automation[bot] in #​471

Full Changelog: goauthentik/helm@authentik-2026.2.3...authentik-2026.5.0

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 08:00 AM and 08:59 PM, only on Wednesday (* 8-20 * * 3)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

kustomization changes in kubernetes/main

--- kubernetes/main/apps/identity/authentik/app Kustomization: identity/authentik HelmRelease: identity/authentik

+++ kubernetes/main/apps/identity/authentik/app Kustomization: identity/authentik HelmRelease: identity/authentik

@@ -13,13 +13,13 @@

     spec:
       chart: authentik
       sourceRef:
         kind: HelmRepository
         name: authentik
         namespace: flux-system
-      version: 2026.2.3
+      version: 2026.5.2
   interval: 2h
   values:
     authentik:
       email:
         from: Authentik <no-reply.identity.18b.haus@..PLACEHOLDER_SECRET_MAIL_DOMAIN..>
         host: smtp-relay.default.svc.cluster.local

[github-actions]

helmrelease changes in kubernetes/main

--- HelmRelease: identity/authentik Deployment: identity/authentik-server

+++ HelmRelease: identity/authentik Deployment: identity/authentik-server

@@ -24,34 +24,28 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: server
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: d70a7b9df88222b677b20680631a2dfd8b569ef51c2819c4bb336cc48a7998cd
+        checksum/secret: 666e79d15779f53a3d1e7ae1d43ffc4496f2aa7b9119fe794be4010ad3d47b31
     spec:
       terminationGracePeriodSeconds: 30
       initContainers:
       - envFrom:
         - secretRef:
             name: authentik-secret
         image: ghcr.io/home-operations/postgres-init:18.4@sha256:5086f94abc783f1147d7c2a32c01db00ab594820026e4f6a82ac2af3dbde7fc7
         name: init-db
       containers:
       - name: server
-        image: ghcr.io/goauthentik/server:2026.2.3
+        image: ghcr.io/goauthentik/server:2026.5.2
         imagePullPolicy: IfNotPresent
         args:
         - server
-        env:
-        - name: AUTHENTIK_LISTEN__HTTP
-          value: 0.0.0.0:9000
-        - name: AUTHENTIK_LISTEN__HTTPS
-          value: 0.0.0.0:9443
-        - name: AUTHENTIK_LISTEN__METRICS
-          value: 0.0.0.0:9300
+        env: null
         envFrom:
         - secretRef:
             name: authentik
         ports:
         - name: http
           containerPort: 9000
--- HelmRelease: identity/authentik Deployment: identity/authentik-worker

+++ HelmRelease: identity/authentik Deployment: identity/authentik-worker

@@ -24,27 +24,23 @@

         app.kubernetes.io/name: authentik
         app.kubernetes.io/instance: authentik
         app.kubernetes.io/component: worker
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: authentik
       annotations:
-        checksum/secret: d70a7b9df88222b677b20680631a2dfd8b569ef51c2819c4bb336cc48a7998cd
+        checksum/secret: 666e79d15779f53a3d1e7ae1d43ffc4496f2aa7b9119fe794be4010ad3d47b31
     spec:
       serviceAccountName: authentik
       terminationGracePeriodSeconds: 30
       containers:
       - name: worker
-        image: ghcr.io/goauthentik/server:2026.2.3
+        image: ghcr.io/goauthentik/server:2026.5.2
         imagePullPolicy: IfNotPresent
         args:
         - worker
-        env:
-        - name: AUTHENTIK_LISTEN__HTTP
-          value: 0.0.0.0:9000
-        - name: AUTHENTIK_LISTEN__METRICS
-          value: 0.0.0.0:9300
+        env: null
         envFrom:
         - secretRef:
             name: authentik
         ports:
         - name: http
           containerPort: 9000