From 2ccdf4aebf8a9db5e240368bcc5c7f970e157cbb Mon Sep 17 00:00:00 2001
From: Pieter <pieter@kolabnow.com>
Date: Wed, 14 Jan 2026 08:54:47 +0100
Subject: [PATCH] Add Authentik API readiness check before running flow
 configuration

Wait for Authentik API to be available before attempting to configure flows.
This prevents 404 errors when the API is not yet ready.
---
 ansible/roles/authentik/tasks/flows.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/ansible/roles/authentik/tasks/flows.yml b/ansible/roles/authentik/tasks/flows.yml
index 3aa1c46..3c7f7de 100644
--- a/ansible/roles/authentik/tasks/flows.yml
+++ b/ansible/roles/authentik/tasks/flows.yml
@@ -5,6 +5,20 @@
   set_fact:
     authentik_api_token: "{{ client_secrets.authentik_bootstrap_token }}"
 
+- name: Wait for Authentik API to be ready
+  shell: |
+    for i in {1..30}; do
+      if docker exec authentik-server curl -sf -H "Authorization: Bearer {{ authentik_api_token }}" http://localhost:9000/api/v3/core/tenants/ > /dev/null 2>&1; then
+        echo "Authentik API is ready"
+        exit 0
+      fi
+      echo "Waiting for Authentik API... attempt $i/30"
+      sleep 5
+    done
+    exit 1
+  register: api_wait
+  changed_when: false
+
 - name: Copy invitation flow configuration script to server
   copy:
     src: configure_invitation_flow.py