base/ory/kratos-selfservice-urls.yaml

# Kratos selfservice UI URLs — patch over the Helm-rendered kratos-config ConfigMap.
# DOMAIN_SUFFIX is substituted by sunbeam apply.
apiVersion: v1
kind: ConfigMap
metadata:
  name: kratos-config
  namespace: ory
data:
  selfservice.default_browser_return_url: "https://auth.DOMAIN_SUFFIX/"
  selfservice.flows.login.ui_url: "https://auth.DOMAIN_SUFFIX/login"
  selfservice.flows.registration.ui_url: "https://auth.DOMAIN_SUFFIX/registration"
  selfservice.flows.recovery.ui_url: "https://auth.DOMAIN_SUFFIX/recovery"
  selfservice.flows.settings.ui_url: "https://auth.DOMAIN_SUFFIX/settings"
  selfservice.allowed_return_urls: |
    - https://auth.DOMAIN_SUFFIX/
    - https://docs.DOMAIN_SUFFIX/
    - https://meet.DOMAIN_SUFFIX/
    - https://drive.DOMAIN_SUFFIX/
    - https://mail.DOMAIN_SUFFIX/
    - https://messages.DOMAIN_SUFFIX/
    - https://people.DOMAIN_SUFFIX/
    - https://src.DOMAIN_SUFFIX/
    - https://admin.DOMAIN_SUFFIX/
feat(infra): data, storage, devtools, and ory layer updates - data: CNPG cluster tuning, OpenBao values, OpenSearch deployment fixes, OpenSearch PVC, barman vault secret for S3 backup credentials - storage: SeaweedFS filer updates (s3.json via secret subPath), PVC for filer persistent storage - devtools: Gitea values (SSH service, custom theme), gitea-theme-cm ConfigMap - ory: add kratos-selfservice-urls.yaml for self-service flow URLs - media: LiveKit values updated (TURN config, STUN, resource limits) - vso: kustomization cleanup 2026-03-06 12:07:28 +00:00			`# Kratos selfservice UI URLs — patch over the Helm-rendered kratos-config ConfigMap.`
			`# DOMAIN_SUFFIX is substituted by sunbeam apply.`
			`apiVersion: v1`
			`kind: ConfigMap`
			`metadata:`
			`name: kratos-config`
			`namespace: ory`
			`data:`
			`selfservice.default_browser_return_url: "https://auth.DOMAIN_SUFFIX/"`
			`selfservice.flows.login.ui_url: "https://auth.DOMAIN_SUFFIX/login"`
			`selfservice.flows.registration.ui_url: "https://auth.DOMAIN_SUFFIX/registration"`
			`selfservice.flows.recovery.ui_url: "https://auth.DOMAIN_SUFFIX/recovery"`
			`selfservice.flows.settings.ui_url: "https://auth.DOMAIN_SUFFIX/settings"`
			`selfservice.allowed_return_urls: \|`
			`- https://auth.DOMAIN_SUFFIX/`
			`- https://docs.DOMAIN_SUFFIX/`
			`- https://meet.DOMAIN_SUFFIX/`
			`- https://drive.DOMAIN_SUFFIX/`
			`- https://mail.DOMAIN_SUFFIX/`
feat: integrate tuwunel with Ory SSO, rename chat to messages subdomain - Add matrix to hydra-maester enabledNamespaces for OAuth2Client CRD - Update allowed_return_urls and selfservice URLs: chat→messages - Add Kratos verification flow, employee/external identity schemas - Extend session lifespan to 30 days with persistent cookies - Route messages.* to tuwunel via Pingora with WebSocket support - Replace login-ui with kratos-admin-ui as unified auth frontend - Update TLS certificate SANs: chat→messages, add monitoring subdomains - Add tuwunel + La Suite images to production overlay - Switch DDoS/scanner detection to compiled-in ensemble models (observe_only) 2026-03-10 18:52:47 +00:00			`- https://messages.DOMAIN_SUFFIX/`
feat(infra): data, storage, devtools, and ory layer updates - data: CNPG cluster tuning, OpenBao values, OpenSearch deployment fixes, OpenSearch PVC, barman vault secret for S3 backup credentials - storage: SeaweedFS filer updates (s3.json via secret subPath), PVC for filer persistent storage - devtools: Gitea values (SSH service, custom theme), gitea-theme-cm ConfigMap - ory: add kratos-selfservice-urls.yaml for self-service flow URLs - media: LiveKit values updated (TURN config, STUN, resource limits) - vso: kustomization cleanup 2026-03-06 12:07:28 +00:00			`- https://people.DOMAIN_SUFFIX/`
			`- https://src.DOMAIN_SUFFIX/`
			`- https://admin.DOMAIN_SUFFIX/`