ory
Config override in Kratos like Oathkeeper
Preflight checklist
- [x] I could not find a solution in the existing issues, docs, nor discussions.
- [x] I agree to follow this project's Code of Conduct.
- [x] I have read and am following this repository's Contribution Guidelines.
- [ ] I have joined the Ory Community Slack.
- [ ] I am signed up to the Ory Security Patch Newsletter.
Ory Network Project
No response
Describe your problem
We use Kustomize to prepare all our deployments, and I am having a real hard time configuring Kratos using the Helm charts, as there is a lot of magic happening to pull the config apart, create secrets, hash values, etc. Our setup utilises envsubst to replace specific values, as it is used for both local and cloud deployments, which prevents us from doing this correctly.
Describe your ideal solution
What I'd really like is the ability to completely override all configuration and secrets, including how they are mounted to the containers. Oathkeeper has the option to configFileOverride, which would be perfect to have in Kratos.
Workarounds or alternatives
My current solution involves manually using helm template to generate the files and saving them to our own repository, and then applying patches and replacements using kustomize. This isn't sustainable and makes keeping up with updates a manual and time-consuming process.
Version
latest
Additional Context
No response
