how to auth using ory-cli in headless mode, using env variables or config file? Documentation states that we can use API keys (

ORY_PROJECT_API_KEY

), but it does not work using v1.1.0

It depends on the operation you want to do. For working with project configs, you need a workspace key, for working with project data you need a project key.

I’m trying to create a tunnel. So far, I managed to get the tunnel working from k8s by launching the pod, copying the login URL shown in the logs and access it, then in a shell session from the pod call (wget) the returned URL from the login form. It’s not ideal in case my pod restarts!

Did you see https://www.ory.sh/docs/cli/ory-tunnel#connecting-in-automated-environments?

oh my god, I was missing the

-q

option. So when not quiet, ORY forces the login via browser, even when the API key is set. if quiet, it will use the API key.

Yeah I'm not sure why it was the case, I'd have to check. But there was some reason.