authentik 2025.10 upgrade: Redis removal
Upgrading to authentik 2025.10, which drops Redis: removing Redis settings, sizing PostgreSQL for about 50 percent more connections, TLS requirements for Postgres, and the email_verified claim change.
authentik upgrades
Planning authentik version upgrades: the sequential upgrade rule, breaking changes per release, outposts and PostgreSQL major versions.
authentik 2025.12 upgrade: RBAC and storage changes
Upgrading to authentik 2025.12: renaming duplicate groups before the migration, permissions that now come only from roles, multiple group parents, and moving /media to /data with reverse proxy path changes.
authentik 2026.2 upgrade: SCIM sync and group access changes
Upgrading to authentik 2026.2: SCIM providers that filter users by application policies and deactivate old group filters, the ak_groups deprecation in custom code, and the move to a three-month release cycle.
authentik 2026.5 upgrade: listen addresses, SAML issuer and redirect URIs
Upgrading to authentik 2026.5: the default listen address change to [::], the deprecated PostgreSQL connection options, automatic SAML issuer values and typed redirect URIs that affect existing integrations.
authentik 2026.8 upgrade: trusted proxy headers and WebAuthn changes
Upgrading to authentik 2026.8: forwarded headers accepted only from trusted proxies, the hash_password command change, the removed WebAuthn duplicate-device option and the Rust server entrypoint.
authentik upgrade path when you are several versions behind
Catching up an outdated authentik safely: why versions cannot be skipped, the latest patch of each release in turn, backups and restores instead of downgrades, and spotting migration inconsistency errors.
Upgrading authentik outposts
Keeping LDAP, RADIUS, proxy and RAC outposts on the same version as the core: automatic upgrades through integrations, manual image tag updates, and reading outpost health and version in the admin interface.
Upgrading PostgreSQL major versions under authentik
Moving authentik's PostgreSQL to a new major version on Docker Compose or Kubernetes: logical dumps, stopping the stack, backing up the data directory, restoring and verifying before restart.
