Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

When integrating an external OpenID provider in kratos, we have a strange error message during the redirect at the end of the auth process `Get "<https://editor.domain.localhost>": dial tcp: lookup editor.axatechlab.localhost on 10.96.0.10:53: no such host` It seems that kratos try to resolve the domain before the redirect ... but this is a development domain and this domain is not accessible from the kubernetes pod. Why Kratos did this resolution before the redirect ?

Based on kratos log, it looks like the auth process works correctly and the session is created, just have this error message in the browser window

As I can see you have the issue with DNS resolution. It is nothing to do with the kratos. You need to find the way to let k8s know how to resolve your local domain.

<https://kubernetes.io/docs/concepts/services-networking/service/#externalname>

it could be that `externalName` can help you