diff --git a/clusters/cl01tl/manifests/authentik/Deployment-authentik-server.yaml b/clusters/cl01tl/manifests/authentik/Deployment-authentik-server.yaml
index 4fd914b72..d215c70be 100644
--- a/clusters/cl01tl/manifests/authentik/Deployment-authentik-server.yaml
+++ b/clusters/cl01tl/manifests/authentik/Deployment-authentik-server.yaml
@@ -4,13 +4,13 @@ metadata:
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 spec:
   replicas: 2
   revisionHistoryLimit: 3
@@ -22,20 +22,20 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: "authentik-2026.2.1"
+        helm.sh/chart: "authentik-2026.2.2"
         app.kubernetes.io/name: "authentik"
         app.kubernetes.io/instance: "authentik"
         app.kubernetes.io/component: "server"
         app.kubernetes.io/managed-by: "Helm"
         app.kubernetes.io/part-of: "authentik"
-        app.kubernetes.io/version: "2026.2.1"
+        app.kubernetes.io/version: "2026.2.2"
       annotations:
-        checksum/secret: e52441637b77f4baccf56d0c193e99c35c2eeef6b6c753a17e45254ca6b20e18
+        checksum/secret: f303486cc2928eeea469d3f55375d960febe7ee89216ba222438bd93c4c748e5
     spec:
       terminationGracePeriodSeconds: 30
       containers:
         - name: server
-          image: ghcr.io/goauthentik/server:2026.2.1
+          image: ghcr.io/goauthentik/server:2026.2.2
           imagePullPolicy: IfNotPresent
           args:
             - server
diff --git a/clusters/cl01tl/manifests/authentik/Deployment-authentik-worker.yaml b/clusters/cl01tl/manifests/authentik/Deployment-authentik-worker.yaml
index ece5a768b..5f7e2a5e9 100644
--- a/clusters/cl01tl/manifests/authentik/Deployment-authentik-worker.yaml
+++ b/clusters/cl01tl/manifests/authentik/Deployment-authentik-worker.yaml
@@ -4,13 +4,13 @@ metadata:
   name: authentik-worker
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "worker"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 spec:
   replicas: 2
   revisionHistoryLimit: 3
@@ -22,21 +22,21 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: "authentik-2026.2.1"
+        helm.sh/chart: "authentik-2026.2.2"
         app.kubernetes.io/name: "authentik"
         app.kubernetes.io/instance: "authentik"
         app.kubernetes.io/component: "worker"
         app.kubernetes.io/managed-by: "Helm"
         app.kubernetes.io/part-of: "authentik"
-        app.kubernetes.io/version: "2026.2.1"
+        app.kubernetes.io/version: "2026.2.2"
       annotations:
-        checksum/secret: e52441637b77f4baccf56d0c193e99c35c2eeef6b6c753a17e45254ca6b20e18
+        checksum/secret: f303486cc2928eeea469d3f55375d960febe7ee89216ba222438bd93c4c748e5
     spec:
       serviceAccountName: authentik
       terminationGracePeriodSeconds: 30
       containers:
         - name: worker
-          image: ghcr.io/goauthentik/server:2026.2.1
+          image: ghcr.io/goauthentik/server:2026.2.2
           imagePullPolicy: IfNotPresent
           args:
             - worker
diff --git a/clusters/cl01tl/manifests/authentik/HTTPRoute-authentik-server.yaml b/clusters/cl01tl/manifests/authentik/HTTPRoute-authentik-server.yaml
index 0c17cffaf..6f7700cda 100644
--- a/clusters/cl01tl/manifests/authentik/HTTPRoute-authentik-server.yaml
+++ b/clusters/cl01tl/manifests/authentik/HTTPRoute-authentik-server.yaml
@@ -4,13 +4,13 @@ metadata:
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io
diff --git a/clusters/cl01tl/manifests/authentik/PrometheusRule-authentik.yaml b/clusters/cl01tl/manifests/authentik/PrometheusRule-authentik.yaml
index a183342e5..b5602afc4 100644
--- a/clusters/cl01tl/manifests/authentik/PrometheusRule-authentik.yaml
+++ b/clusters/cl01tl/manifests/authentik/PrometheusRule-authentik.yaml
@@ -4,12 +4,12 @@ metadata:
   name: authentik
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 spec:
   groups:
     - name: authentik Aggregate request counters
diff --git a/clusters/cl01tl/manifests/authentik/Secret-authentik.yaml b/clusters/cl01tl/manifests/authentik/Secret-authentik.yaml
index 53ceb671e..c82dd7bd8 100644
--- a/clusters/cl01tl/manifests/authentik/Secret-authentik.yaml
+++ b/clusters/cl01tl/manifests/authentik/Secret-authentik.yaml
@@ -4,12 +4,12 @@ metadata:
   name: authentik
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 data:
   AUTHENTIK_EMAIL__PORT: "NTg3"
   AUTHENTIK_EMAIL__TIMEOUT: "MzA="
diff --git a/clusters/cl01tl/manifests/authentik/Service-authentik-server-metrics.yaml b/clusters/cl01tl/manifests/authentik/Service-authentik-server-metrics.yaml
index 88184503a..5db4ccb0a 100644
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-server-metrics.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-server-metrics.yaml
@@ -4,13 +4,13 @@ metadata:
   name: authentik-server-metrics
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server-metrics"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 spec:
   type: ClusterIP
   ports:
diff --git a/clusters/cl01tl/manifests/authentik/Service-authentik-server.yaml b/clusters/cl01tl/manifests/authentik/Service-authentik-server.yaml
index 2738cef1a..4420001de 100644
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-server.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-server.yaml
@@ -4,13 +4,13 @@ metadata:
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 spec:
   type: ClusterIP
   ports:
diff --git a/clusters/cl01tl/manifests/authentik/Service-authentik-worker-metrics.yaml b/clusters/cl01tl/manifests/authentik/Service-authentik-worker-metrics.yaml
index 46c1bcd9a..8731bbbc4 100644
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-worker-metrics.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-worker-metrics.yaml
@@ -4,13 +4,13 @@ metadata:
   name: authentik-worker-metrics
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "worker-metrics"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 spec:
   type: ClusterIP
   ports:
diff --git a/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-server.yaml b/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-server.yaml
index b422178a6..1298e618a 100644
--- a/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-server.yaml
+++ b/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-server.yaml
@@ -4,13 +4,13 @@ metadata:
   name: authentik-server
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "server-metrics"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 spec:
   endpoints:
     - port: metrics
diff --git a/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-worker.yaml b/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-worker.yaml
index 6c8643bef..a854c0bf4 100644
--- a/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-worker.yaml
+++ b/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-worker.yaml
@@ -4,13 +4,13 @@ metadata:
   name: authentik-worker
   namespace: "authentik"
   labels:
-    helm.sh/chart: "authentik-2026.2.1"
+    helm.sh/chart: "authentik-2026.2.2"
     app.kubernetes.io/name: "authentik"
     app.kubernetes.io/instance: "authentik"
     app.kubernetes.io/component: "worker-metrics"
     app.kubernetes.io/managed-by: "Helm"
     app.kubernetes.io/part-of: "authentik"
-    app.kubernetes.io/version: "2026.2.1"
+    app.kubernetes.io/version: "2026.2.2"
 spec:
   endpoints:
     - port: metrics