Hi Team, We tried to use Pixie Cloud self-hosted ...
# talk-hydra
c
Hi Team, We tried to use Pixie Cloud self-hosted installation on EKS when users are redeeming the invitation I'm seeing the below error message in the logs
Copy code
A valid Ory Session Cookie or Ory Session Token is missing. stack_trace: status:Unauthorized status_code:401] http_request=map[headers:map[accept:application/json, text/plain, */* accept-encoding:gzip, deflate, br accept-language:en-US,en;q=0.5 connection:close cookie:[some cokkioe] referer:https://<<our self hosted url>> sec-fetch-dest:empty sec-fetch-mode:cors sec-fetch-site:same-origin user-agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/114.0 x-forwarded-for:98.47.140.68 x-forwarded-host:<<host>> x-forwarded-port:443 x-forwarded-proto:https x-forwarded-scheme:https x-real-ip:<<ip address>> x-request-id:<<request id>> x-scheme:https] host:kratos.plc.svc.cluster.local:4433 method:GET path:/self-service/settings/flows query:id=<<id>> remote:<<ip address>>:51800 scheme:https] http_response=map[status_code:401] service_name=Ory Kratos service_version=v0.10.1
Below is our
kratos-config
config map
Copy code
apiVersion: v1
      data:
        identity.schema.json: |
          {
            "$id": "<https://schemas.ory.sh/presets/kratos/quickstart/email-password/identity.schema.json>",
            "$schema": "<http://json-schema.org/draft-07/schema#>",
            "title": "User",
            "type": "object",
            "properties": {
              "traits":{
                "type": "object",
                "properties": {
                  "email": {
                    "type": "string",
                    "format": "email",
                    "title": "E-Mail",
                    "minLength": 3,
                    "<http://ory.sh/kratos|ory.sh/kratos>": {
                      "credentials": {
                        "password": {
                          "identifier": true
                        }
                      },
                      "recovery": {
                        "via": "email"
                      }
                    }
                  }
                },
                "required": [
                  "email"
                ]
              }
            },
            "additionalProperties": false
          }
        kratos.yml: |
          # All URLS must be set in the environment variables instead of config.
          session:
            cookie:
              domain: <<url>>
          selfservice:
            methods:
              password:
                enabled: true
                config:
                  haveibeenpwned_enabled: false
              link:
                enabled: true
            flows:
              verification:
                enabled: true
      
              recovery:
                enabled: true
      
              settings:
                privileged_session_max_age: 15m
      
              registration:
                after:
                  password:
                    hooks:
                      -
                        hook: session
          serve:
            public:
              cors:
                enabled: true
                allowed_origins:
                  - <<url>>
                  - <<url>>
                  - <<url>>
                allowed_methods:
                  - POST
                  - GET
                  - PUT
                  - PATCH
                  - DELETE
                allowed_headers:
                  - Authorization
                  - Cookie
                  - Content-Type
                exposed_headers:
                  - Content-Type
                  - Set-Cookie
          log:
            level: debug
            leak_sensitive_values: true
          hashers:
            argon2:
              parallelism: 1
              memory: 128MB
              iterations: 2
              salt_length: 16
              key_length: 16
      
          identity:
            default_schema_id: default
            schemas:
              - id: default
                url: file:///etc/config/kratos/identity.schema.json
      
          courier:
            smtp:
              connection_uri: <smtps://test:test@mailslurper:1025/?skip_ssl_verify=true>
      kind: ConfigMap
      metadata:
        labels:
          app: pl-cloud
        name: kratos-config
        namespace: plc
Please help me to fix this issue. Thanks in advance
m
Have you tried contacting Pixie Support? I dont really know anything about Pixie…
c
@magnificent-energy-493 yes, I did but no response from them. Pixie by default uses Hydra and Kratos for authentication
Hi Team, Any updates or suggestions here?? Thanks!
m
My suggestion would be to reach out to Pixie Support. Alternatively you can also contact Ory for professional support: https://www.ory.sh/support/ I am not able to help you with this issue sorry.
c
Thanks for letting me know @magnificent-energy-493 I will check for any alternate solution🙏🙏