sources/kerberos: authenticate with the user's username instead of the first username in authentik (cherry-pick #12497)

[gcp-cherry-pick-bot]

Cherry-picked sources/kerberos: authenticate with the user's username instead of the first username in authentik (#12497)

Co-authored-by: Marc 'risson' Schmitt marc.schmitt@risson.space

[netlify]

✅ Deploy Preview for authentik-docs ready!

Name	Link
🔨 Latest commit	bfb8165
🔍 Latest deploy log	https://app.netlify.com/sites/authentik-docs/deploys/677bd68aeebd170008b0b71d
😎 Deploy Preview	https://deploy-preview-12579--authentik-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.79%. Comparing base (96b5bee) to head (bfb8165).
Report is 1 commits behind head on version-2024.12.

✅ All tests successful. No failed tests found.

Additional details and impacted files

@@                 Coverage Diff                 @@
##           version-2024.12   #12579      +/-   ##
===================================================
+ Coverage            92.73%   92.79%   +0.05%     
===================================================
  Files                  770      770              
  Lines                38772    38772              
===================================================
+ Hits                 35954    35977      +23     
+ Misses                2818     2795      -23     

Flag	Coverage Δ
e2e	48.71% <50.00%> (+0.04%)	⬆️
integration	24.62% <0.00%> (ø)
unit	90.38% <100.00%> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-bfb81658c95dc9bcf94c7ec44ad18f52f5454d4f
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

For arm64, use these values:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-bfb81658c95dc9bcf94c7ec44ad18f52f5454d4f-arm64
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-bfb81658c95dc9bcf94c7ec44ad18f52f5454d4f

For arm64, use these values:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-bfb81658c95dc9bcf94c7ec44ad18f52f5454d4f-arm64

Afterwards, run the upgrade commands from the latest release notes.