Import the stranded artifactapi access binding #35

2026-09-07T23:50:19+10:00

unkin-agent commented

2026-09-07 23:50:19 +10:00

main is red: the apply that created the artifactapi access binding read it back off the Authentik Postgres read replica before the row had replicated, got a 404, and discarded it. The binding exists server-side but not in state, so no Authentik change can apply.

Import binding c9f22628-d48c-477b-b9ac-a952c7d081ce as authentik_policy_binding.app_access["akP-artifactapi-admin"].
Leave the block in place; it goes inert once state tracks the binding.

main is red: the apply that created the artifactapi access binding read it back off the Authentik Postgres read replica before the row had replicated, got a 404, and discarded it. The binding exists server-side but not in state, so no Authentik change can apply. - Import binding c9f22628-d48c-477b-b9ac-a952c7d081ce as authentik_policy_binding.app_access["akP-artifactapi-admin"]. - Leave the block in place; it goes inert once state tracks the binding.

unkin-agent added 1 commit 2026-09-07 23:50:20 +10:00

Import the artifactapi access binding stranded outside state

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/plan Pipeline was successful

Details

cd31cb6fa1

The apply that created authentik_policy_binding.app_access["akP-artifactapi-admin"]
read it back off the Authentik Postgres read replica before the row had
replicated, got a 404, and dropped it, leaving main red.

Import the existing binding c9f22628-d48c-477b-b9ac-a952c7d081ce into state.

benvin merged commit e5dbcb56a6 into main

2026-09-08 00:11:37 +10:00

benvin deleted branch benvin/fix-artifactapi-policy-binding

2026-09-08 00:11:37 +10:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/terraform-authentik#35