7ea721c487
* root: move database calls from ready() to dedicated startup signal Signed-off-by: Jens Langhammer <jens@goauthentik.io> * optimise gunicorn startup to only do DB code in one worker Signed-off-by: Jens Langhammer <jens@goauthentik.io> * always use 2 workers in compose Signed-off-by: Jens Langhammer <jens@goauthentik.io> * send startup signals for test runner Signed-off-by: Jens Langhammer <jens@goauthentik.io> * remove k8s import that isn't really needed Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ci: bump nested actions Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix @reconcile_app not triggering reconcile due to changed functions Signed-off-by: Jens Langhammer <jens@goauthentik.io> * connect startup with uid Signed-off-by: Jens Langhammer <jens@goauthentik.io> * adjust some log levels Signed-off-by: Jens Langhammer <jens@goauthentik.io> * remove internal healthcheck we didn't really use it to do anything, and we shouldn't have to since the live/ready probes are handled by django anyways and so the container runtime will restart the server if needed Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add setproctitle for gunicorn and celery process titles Signed-off-by: Jens Langhammer <jens@goauthentik.io> * configure structlog early to use it Signed-off-by: Jens Langhammer <jens@goauthentik.io> * Revert "configure structlog early to use it" This reverts commit 16778fdbbca0f5c474d376c2f85c6f8032c06044. * Revert "adjust some log levels" This reverts commit a129f7ab6aecf27f1206aea1ad8384ce897b74ad. Signed-off-by: Jens Langhammer <jens@goauthentik.io> # Conflicts: # authentik/root/settings.py * optimize startup to not spawn a bunch of one-off processes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * idk why this shows up Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>
72 lines
2.6 KiB
Python
Executable File
72 lines
2.6 KiB
Python
Executable File
#!/usr/bin/env python
|
|
"""This file needs to be run from the root of the project to correctly
|
|
import authentik. This is done by the dockerfile."""
|
|
from sys import exit as sysexit
|
|
from time import sleep
|
|
from urllib.parse import quote_plus
|
|
|
|
from psycopg import OperationalError, connect
|
|
from redis import Redis
|
|
from redis.exceptions import RedisError
|
|
|
|
from authentik.lib.config import CONFIG
|
|
|
|
|
|
def check_postgres():
|
|
while True:
|
|
try:
|
|
conn = connect(
|
|
dbname=CONFIG.get("postgresql.name"),
|
|
user=CONFIG.get("postgresql.user"),
|
|
password=CONFIG.get("postgresql.password"),
|
|
host=CONFIG.get("postgresql.host"),
|
|
port=CONFIG.get_int("postgresql.port"),
|
|
sslmode=CONFIG.get("postgresql.sslmode"),
|
|
sslrootcert=CONFIG.get("postgresql.sslrootcert"),
|
|
sslcert=CONFIG.get("postgresql.sslcert"),
|
|
sslkey=CONFIG.get("postgresql.sslkey"),
|
|
)
|
|
conn.cursor()
|
|
break
|
|
except OperationalError as exc:
|
|
sleep(1)
|
|
CONFIG.log("info", f"PostgreSQL connection failed, retrying... ({exc})")
|
|
CONFIG.log("info", "PostgreSQL connection successful")
|
|
|
|
|
|
def check_redis():
|
|
REDIS_PROTOCOL_PREFIX = "redis://"
|
|
if CONFIG.get_bool("redis.tls", False):
|
|
REDIS_PROTOCOL_PREFIX = "rediss://"
|
|
REDIS_URL = (
|
|
f"{REDIS_PROTOCOL_PREFIX}:"
|
|
f"{quote_plus(CONFIG.get('redis.password'))}@{quote_plus(CONFIG.get('redis.host'))}:"
|
|
f"{CONFIG.get_int('redis.port')}/{CONFIG.get('redis.db')}"
|
|
)
|
|
while True:
|
|
try:
|
|
redis = Redis.from_url(REDIS_URL)
|
|
redis.ping()
|
|
break
|
|
except RedisError as exc:
|
|
sleep(1)
|
|
CONFIG.log("info", f"Redis Connection failed, retrying... ({exc})", redis_url=REDIS_URL)
|
|
CONFIG.log("info", "Redis Connection successful")
|
|
|
|
|
|
def wait_for_db():
|
|
CONFIG.log("info", "Starting authentik bootstrap")
|
|
# Sanity check, ensure SECRET_KEY is set before we even check for database connectivity
|
|
if CONFIG.get("secret_key") is None or len(CONFIG.get("secret_key")) == 0:
|
|
CONFIG.log("info", "----------------------------------------------------------------------")
|
|
CONFIG.log("info", "Secret key missing, check https://goauthentik.io/docs/installation/.")
|
|
CONFIG.log("info", "----------------------------------------------------------------------")
|
|
sysexit(1)
|
|
check_postgres()
|
|
check_redis()
|
|
CONFIG.log("info", "Finished authentik bootstrap")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
wait_for_db()
|