I am having issues with kratos and selfservice config with Helm. My Kratos helm values:

ingress:
    admin:
      enabled: true
      className: kong
      hosts:
        - host: kratos.admin.app.test
          paths:
            - path: /
              pathType: ImplementationSpecific
  
    public:
      enabled: true
      className: kong
      hosts:
        - host: kratos.public.app.test
          paths:
            - path: /
              pathType: ImplementationSpecific
  
  kratos:
    development: true
  
    automigration:
      enabled: true
  
    config:
      serve:
        public:
          base_url: <http://kratos.public.app.test>
  
      dsn: <postgres://root:example@host.docker.internal:5432/showcase?sslmode=disable&max_conns=20&max_idle_conns=4>
  
      identity:
        schemas:
          - id: expert
            url: <base64://removed__for__post>
        default_schema_id: removed__for__post
  
      selfservice:
        flows:
          registration:
            ui_url: <http://selfservice.app.test/registration>
  
          login:
            ui_url: <http://selfservice.app.test/login>
  
        default_browser_return_url: <http://selfservice.app.test>
  
      courier:
        smtp:
          connection_uri: <smtps://test:test@mailslurper:1025/?skip_ssl_verify=true>

My selfservice config:

ingress:
  className: kong
  enabled: true
  hosts:
    - host: selfservice.app.test
      paths:
        - path: /
          pathType: ImplementationSpecific

kratosAdminUrl: kratos-admin.default.svc.cluster.local
kratosBrowserUrl: <http://kratos.public.app.test>
kratosPublicUrl: <http://kratos.public.app.test>

baseUrl: <http://selfservice.app.test>

projectName: "app"

When I go ahead and attempt to click on sign up in selfservice node ui I get the following error:

{
  "message": "connect ECONNREFUSED 127.0.0.1:80",
  "name": "Error",
  "stack": "Error: connect ECONNREFUSED 127.0.0.1:80\n    at TCPConnectWrap.afterConnect [as oncomplete] (node:net:1133:16)",
  "config": {
    "url": "<http://kratos.public.app.test/self-service/login/flows?id=8d0658ef-965d-4758-85e6-a00eb6553ea9>",
    "method": "get",
    "headers": {
      "Accept": "application/json, text/plain, */*",
      "User-Agent": "axios/0.21.4"
    },
    "transformRequest": [
      null
    ],
    "transformResponse": [
      null
    ],
    "timeout": 0,
    "xsrfCookieName": "XSRF-TOKEN",
    "xsrfHeaderName": "X-XSRF-TOKEN",
    "maxContentLength": -1,
    "maxBodyLength": -1,
    "transitional": {
      "silentJSONParsing": true,
      "forcedJSONParsing": true,
      "clarifyTimeoutError": false
    }
  },
  "code": "ECONNREFUSED"
}

Any idea why I am getting this? Am I missing config?

Hi there, from a glance it looks like the UI app is looking at the wrong url for kratos. You need to pass the internal k8s service fqdn

@worried-kitchen-94392 Thanks, np 🙂 I have changed

kratosBrowserUrl: <http://kratos.public.app.test>

to:

kratosBrowserUrl: kratos-public.svc.cluster.local

But I just get a 404 now...

https://github.com/ory/kratos/blob/master/quickstart.yml#L22 i meant this 🙂 in this context the PUBLIC_URL is the internal fqdn of the service (internal docker network) and BROWSER is the url on which you access via browser, so the exposed via ingress url

@worried-kitchen-94392 I ended up trying this out:

kratosAdminUrl: kratos-admin.default.svc.cluster.local
kratosBrowserUrl: <http://kratos.public.egrist.test>
kratosPublicUrl: kratos-public.default.svc.cluster.local

However, I still get:

{
  "message": "connect ECONNREFUSED 127.0.0.1:80",
  "name": "Error",
  "stack": "Error: connect ECONNREFUSED 127.0.0.1:80\n    at TCPConnectWrap.afterConnect [as oncomplete] (node:net:1133:16)",
  "config": {
    "url": "kratos-public.default.svc.cluster.local/self-service/registration/flows?id=86962688-1ba6-4819-8827-73ad00cf55ee",
    "method": "get",
    "headers": {
      "Accept": "application/json, text/plain, */*",
      "User-Agent": "axios/0.21.4"
    },
    "transformRequest": [
      null
    ],
    "transformResponse": [
      null
    ],
    "timeout": 0,
    "xsrfCookieName": "XSRF-TOKEN",
    "xsrfHeaderName": "X-XSRF-TOKEN",
    "maxContentLength": -1,
    "maxBodyLength": -1,
    "transitional": {
      "silentJSONParsing": true,
      "forcedJSONParsing": true,
      "clarifyTimeoutError": false
    }
  },
  "code": "ECONNREFUSED"
}

It looks like the app is trying to connect to

127.0.0.1:80

is localhost set somewhere in the config? @high-optician-2097 @steep-lamp-91158 any ideas?

We use Kind and we use the following config: https://mjpitz.com/blog/2020/10/21/local-ingress-domains-kind/ We also use Kong. But I dont explicitly set 127.0.0.1:80 in any ORY config.