Hi all :wave: Testing out Kratos w/the Helm Charts...
# ory-selfhosting
b
Hi all πŸ‘‹ Testing out Kratos w/the Helm Charts. Creating a flow via
GET /self-service/login/browser
redirects me to
/self-service/login/flows?flow={id}
which gives me 404 although the flow ID is present in the database. If I try changing the URL to
flows?id={id}
I get what I want (in JSON). The documentation (link) indicates that it should be
flows?id={id}
as well (see the "Play-by-play" section under the screenshot).
βœ… 1
e
hi there, maybe something on the ingress level config?
are you using ingress pathing or calling it directly?
b
Hi πŸ‘‹ I'm just using the Helm chart as-is, with 1 yaml file with the configurations such as secret, DSN for Postgres and redirect urls etc.
When testing I'm just spinning up the helm chart and doing a
kubectl port-forward
toward the Kratos pod (
kratos-6d8575f4d5-f7h2r
in my case) and testing against it.
e
interesting, can’t say if that is a result of some wrong mapping by the chart, or maybe just a typo in the docs?
b
Isn't the query params for the URI's defined in the application level e.g. the source code? I would expect the Helm charts to define stuff at a higher level than that, e.g. where to map requests. And the first part of the url to be defined by me with the configuration πŸ€” I'm not really able to solve it in any way since I can't control what query params get set on the 303 redirect to
login/flows
. Could perhaps do some conditional routing with k8s but that's the wrong way to attack it.
p
b
Copy code
login:
          ui_url: <http://127.0.0.1:4433/self-service/login/flows>
p
ah, this should be your UI, not kratos.
GET /self-service/login/browser
will redirect to your UI (login page) so you would need to se
login.ui_url: <https://my-app.com/login>
or relative to the host
/login
which will add the ID of the flow as a query parameter to the URL so your UI can read it and get the flow data.
your config is redirecting you back to kratos and kratos doesn't have such a route so it 404s
b
Ah, then it makes perfect sense! I'll try to see where I got the config value I pasted above here from, I have a feeling I got it from one or your Github repos/docs. If so, I'll create a PR for it right away πŸ‘
Thank you so much both of you, appreciate it πŸ™
e
You probably got it from the docker-compose examples πŸ™‚ The problem there is that both urls probably use localhost, and in a k8s scenario you have to use internal/external addresses πŸ˜„