rbac: generate blueprint schema permissions from defined models not DB

[BeryJu]

Details

This fixes the issue that when working on new features and running make gen the Blueprint schema will inherit new permissions that might not even exist in the current working dir anymore but still exist in the database.

---

Checklist

• Local tests pass (ak test authentik/)
• The code has been formatted (make lint-fix)

If an API change has been made

• The API schema has been updated (make gen-build)

If changes to the frontend have been made

• The code has been formatted (make web)

If applicable

• The documentation has been updated
• The documentation has been formatted (make website)

[netlify]

✅ Deploy Preview for authentik-storybook canceled.

Name	Link
🔨 Latest commit	6c81a88
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-storybook/deploys/66c27350017fe900085ba176

[netlify]

✅ Deploy Preview for authentik-docs canceled.

Name	Link
🔨 Latest commit	6c81a88
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-docs/deploys/66c27350ea5cc00008d94bbd

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.69%. Comparing base (341fc65) to head (6c81a88).
Report is 7 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #10962      +/-   ##
==========================================
- Coverage   92.71%   92.69%   -0.02%     
==========================================
  Files         736      736              
  Lines       36356    36360       +4     
==========================================
- Hits        33706    33705       -1     
- Misses       2650     2655       +5     

Flag	Coverage Δ
e2e	49.18% <33.33%> (-0.01%)	⬇️
integration	25.05% <33.33%> (-0.01%)	⬇️
unit	90.24% <100.00%> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-6c81a88914e884e066243833f36e718fcd71c0e6
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

For arm64, use these values:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-6c81a88914e884e066243833f36e718fcd71c0e6-arm64
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-6c81a88914e884e066243833f36e718fcd71c0e6

For arm64, use these values:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-6c81a88914e884e066243833f36e718fcd71c0e6-arm64

Afterwards, run the upgrade commands from the latest release notes.