Osric Wilkinson

Best I can grab (helm is eager to delete the migration job pod) ``` $ kubectl -n hydra logs -l job-name=hydra-automigrate --follow 20190400000010000000 oauth2 Applied 20190400000011000000 oauth2 Applied 20200521071434000000 consent...

I'll add that removing the `--atomic` option from helm control seems to have fixed it. :shrug:

Not obviously (no useful hits for 'atomic' searching in this repo and ory/k8s). I'd still call failing under 'atomic' a bug - running `helm uninstall -n hydra hydra` isn't a...

I think that's probably a little too simple, I'd want to be able to at least choose the signal (eg, postgres will reload config on a SIGHUP, haproxy wants a...

I'm new to this whole k8s thing so I don't know the culture/style, but I'd just add another attribute for signal name/number, unless there's some cost I'm missing? (Although I'm...

I had a look at `--pid-file` and `--signal`, and I can't see a way of using them that doesn't use both shared process and a shared volume.

I'm experiancing a similar problem using [Ory Hydra](https://www.ory.sh/docs/hydra/concepts/logout) as my OAuth/OIDC backend. OpenIdConnectOptions: ```csharp options.ClientId = "Random UUID" options.ClientSecret = "Random string" options.Authority = "http://localhost:4444/" CookieBuilder standardCookie = new() {...

Oops: ``` return SignOut(props, CookieAuthenticationDefaults.AuthenticationScheme, OpenIdConnectDefaults.AuthenticationScheme ); ``` [OpenIdConnectHandler](https://github.com/dotnet/aspnetcore/blob/main/src/Security/Authentication/OpenIdConnect/src/OpenIdConnectHandler.cs#L231), through an extension, calls something like: ``` IAuthenticationService auth = context.HttpContext.RequestServices.GetRequiredService(); AuthenticateResult result = await auth.AuthenticateAsync(context.HttpContext, context.Options.SignOutScheme); context.ProtocolMessage.IdTokenHint = result?.Properties?.GetTokenValue(OpenIdConnectParameterNames.IdToken); ```...

@NikolaMilosavljevic I guess you haven't got any more info yet?