Ory integration guide #20973

bsanchez-the-roach · 2025-11-04T18:56:35Z

I've restructured and partially edited Amine El Kouhen's Ory/CRDB Integration Guide.

I've put the information on two separate pages. There's the Ory Overview, which just has information about Ory for people who aren't familiar. This page should ultimately make no mention of CockroachDB. The other page is the Ory Integration Guide, which begins with an overview of what an integration could look like, and then walks you through how to do the integration and test it.

I haven't yet gone through the tutorial step by step myself, I wanted to get more eyes on this first to see if things were looking good. I've left a few comments on the PR. I mainly want thoughts on structure and general content - line-editing won't be as useful at this point, as there are sections that I already know I want to work on.

netlify · 2025-11-04T18:56:58Z

✅ Deploy Preview for cockroachdb-interactivetutorials-docs canceled.

Name	Link
🔨 Latest commit	`073f610`
🔍 Latest deploy log	https://app.netlify.com/projects/cockroachdb-interactivetutorials-docs/deploys/690e5d64182e770008760110

netlify · 2025-11-04T18:56:59Z

✅ Deploy Preview for cockroachdb-api-docs canceled.

Name	Link
🔨 Latest commit	`073f610`
🔍 Latest deploy log	https://app.netlify.com/projects/cockroachdb-api-docs/deploys/690e5d641c6829000808ccdc

github-actions · 2025-11-04T18:57:03Z

Files changed:

src/current/_includes/sidebar-data-v25.4.json
src/current/_includes/v25.4/sidebar-data/integrate.json
src/current/v25.4/ory-integration-guide.md
src/current/v25.4/ory-overview.md

src/current/v25.4/ory-overview.md

src/current/v25.4/ory-integration-guide.md

bsanchez-the-roach · 2025-11-04T19:06:28Z

src/current/v25.4/ory-integration-guide.md

+
+### Alternative: Terraform setup
+
+Provisioning a distributed identity stack can be time-consuming when done manually. The [Ory/CockroachDB sandbox](https://github.com/amineelkouhen/crdb-ory-sandbox) project encapsulates all necessary steps — from creating the CockroachDB cluster and its three Ory databases, to deploying Ory (Kratos, Hydra, and Keto) into an EKS cluster.


Docs question: All throughout this document there are links to amine's github. That's where the images are coming from, plus there are two hyperlinks that the reader can follow (both here and on line 923) that lead to projects on amine's github. Should all of this stuff instead be hosted on Cockroach corporate github accounts?

netlify · 2025-11-04T19:11:24Z

✅ Netlify Preview

Name	Link
🔨 Latest commit	`073f610`
🔍 Latest deploy log	https://app.netlify.com/projects/cockroachdb-docs/deploys/690e5d641c6829000808ccd8
😎 Deploy Preview	https://deploy-preview-20973--cockroachdb-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

bsanchez-the-roach · 2025-11-04T19:22:56Z

src/current/_includes/v25.4/sidebar-data/integrate.json

@@ -0,0 +1,23 @@
+{
+    "title": "Integrate",


Happy for any feedback on where to put these pages or what to call them.

bsanchez-the-roach · 2025-11-04T19:58:21Z

src/current/v25.4/ory-integration-guide.md

+
+    {% include_cached copy-clipboard.html %}
+    ~~~ shell
+      $ hydra_admin_hostname=$(kubectl get svc --namespace ory ory-hydra-admin --template "")


Note for Amine: I was getting errors when the trying to build with the original line here, which is why the --template flag is an empty string. The original line contained something like

"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}")

which the build was failing to deal with. There are six instances of this on the page, all of which I removed.

@bsanchez-the-roach I think that jekill considers { as a special character, so it fails.

I suggest to replace all code block :
{% include_cached copy-clipboard.html %}
~~~ shell
$ hydra_admin_hostname=$(kubectl get svc --namespace ory ory-hydra-admin --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}")
$ hydra_public_hostname=$(kubectl get svc --namespace ory ory-hydra-public --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}")
$ export HYDRA_ADMIN_URL=http://$hydra_admin_hostname:4445
$ export HYDRA_PUBLIC_URL=http://$hydra_public_hostname:4444
~~~

By the following html block:

<div class="highlight"> <pre> <code class="language-shell" data-lang="shell"> $ hydra_admin_hostname = $(kubectl get svc --namespace ory ory-hydra-admin --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}" ) $ hydra_public_hostname = $(kubectl get svc --namespace ory ory-hydra-public --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}" ) $ export HYDRA_ADMIN_URL =http:// $hydra_admin_hostname:4445 $ export HYDRA_PUBLIC_URL =http:// $hydra_public_hostname:4444 </code> </pre> </div>

amine-crl · 2025-11-05T12:41:41Z

src/current/v25.4/ory-integration-guide.md

+    ~~~ shell
+    $ helm repo add ory https://k8s.ory.sh/helm/charts
+    ~~~
+


To @bsanchez-the-roach, add the following text here:
You should now get the following message, confirming the repository was added.

src/current/v25.4/ory-integration-guide.md

amine-crl · 2025-11-05T14:06:35Z

src/current/v25.4/ory-integration-guide.md

+      $ export KRATOS_ADMIN_URL=http://$kratos_admin_hostname:4433
+      $ export KRATOS_PUBLIC_URL=http://$kratos_public_hostname:4434
+    ~~~
+


@bsanchez-the-roach I think that jekill considers { as a special character, so it fails.

I suggest to replace all code block :
{% include_cached copy-clipboard.html %}

$ kratos_admin_hostname=$(kubectl get svc --namespace ory ory-kratos-admin --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}") $ kratos_public_hostname=$(kubectl get svc --namespace ory ory-kratos-public --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}") $ export KRATOS_ADMIN_URL=http://$kratos_admin_hostname:4433 $ export KRATOS_PUBLIC_URL=http://$kratos_public_hostname:4434

By the following html block:

<div class="highlight"> <pre> <code class="language-shell" data-lang="shell"> $ kratos_admin_hostname = $(kubectl get svc --namespace ory ory-kratos-admin --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}" ) $ kratos_public_hostname = $(kubectl get svc --namespace ory ory-kratos-public --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}" ) $ export KRATOS_ADMIN_URL =http:// $kratos_admin_hostname:4433 $ export KRATOS_PUBLIC_URL =http:// $kratos_public_hostname:4434 </code> </pre> </div>

amine-crl · 2025-11-05T14:11:20Z

src/current/v25.4/ory-integration-guide.md

+      $ export KETO_WRITE_REMOTE=http://$keto_write_hostname:4467
+      $ export KETO_READ_REMOTE=http://$keto_read_hostname:4466
+    ~~~
+


@bsanchez-the-roach I think that jekill considers '{' as a special character, so it fails.

I suggest to replace all code block :
{% include_cached copy-clipboard.html %}

$ keto_read_hostname=$(kubectl get svc --namespace ory ory-keto-read --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}") $ keto_write_hostname=$(kubectl get svc --namespace ory ory-keto-write --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}") $ export KETO_WRITE_REMOTE=http://$keto_write_hostname:4467 $ export KETO_READ_REMOTE=http://$keto_read_hostname:4466

By the following html block:

<div class="highlight"> <pre> <code class="language-shell" data-lang="shell"> $ keto_read_hostname = $(kubectl get svc --namespace ory ory-keto-read --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}" ) $ keto_write_hostname = $(kubectl get svc --namespace ory ory-keto-write --template "{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}" ) $ export KETO_WRITE_REMOTE =http:// $keto_write_hostname:4467 $ export KETO_READ_REMOTE =http:// $keto_read_hostname:4466 </code> </pre> </div>

… intro section

bsanchez-the-roach · 2025-11-07T21:01:19Z

src/current/v25.4/ory-integration-guide.md

+{% include_cached copy-clipboard.html %}
+~~~ shell
+$ cockroach sql \
+--url "cockroach://root@CRDB_FQDN:26257/defaultdb?sslmode=disable"


I think this is maybe supposed to be postgresql://root@CRDB_FQDN:26257/defaultdb?sslmode=disable

bsanchez-the-roach · 2025-11-07T21:02:55Z

src/current/v25.4/ory-integration-guide.md

+
+{% include_cached copy-clipboard.html %}
+~~~ sql
+CREATE USER ory WITH PASSWORD 'securepass';


I'm having trouble with this "CREATE USER" command. I get the following:

ERROR: setting or updating a password is not supported in insecure mode

but it looks like we're explicitly asking them to use that with the "sslmode=disable" part of the "cockroach sql command above" so I'm a bit confused.

Ory integration guide

d8a13c1

bsanchez-the-roach commented Nov 4, 2025

View reviewed changes

src/current/v25.4/ory-overview.md Show resolved Hide resolved

bsanchez-the-roach commented Nov 4, 2025

View reviewed changes

src/current/v25.4/ory-integration-guide.md Show resolved Hide resolved

bsanchez-the-roach commented Nov 4, 2025

View reviewed changes

lengthened the Ory Overview summary

ff153fb

bsanchez-the-roach commented Nov 4, 2025

View reviewed changes

changed colon in summary to dash

2babfcb

bsanchez-the-roach commented Nov 4, 2025

View reviewed changes

.

6ac3fce

amine-crl reviewed Nov 5, 2025

View reviewed changes

src/current/v25.4/ory-integration-guide.md Show resolved Hide resolved

amine-crl reviewed Nov 5, 2025

View reviewed changes

src/current/v25.4/ory-integration-guide.md Show resolved Hide resolved

amine-crl reviewed Nov 5, 2025

View reviewed changes

src/current/v25.4/ory-integration-guide.md Show resolved Hide resolved

amine-crl reviewed Nov 5, 2025

View reviewed changes

src/current/v25.4/ory-integration-guide.md Show resolved Hide resolved

amine-crl reviewed Nov 5, 2025

View reviewed changes

bsanchez-the-roach added 2 commits November 7, 2025 11:13

Add more detail to Test Ory Hydra section

fd08091

organized testing section, added more instructions and links, trimmed…

073f610

… intro section

bsanchez-the-roach commented Nov 7, 2025

View reviewed changes


		### Alternative: Terraform setup

		Provisioning a distributed identity stack can be time-consuming when done manually. The [Ory/CockroachDB sandbox](https://github.com/amineelkouhen/crdb-ory-sandbox) project encapsulates all necessary steps — from creating the CockroachDB cluster and its three Ory databases, to deploying Ory (Kratos, Hydra, and Keto) into an EKS cluster.

Ory integration guide #20973

Are you sure you want to change the base?

Ory integration guide #20973

Uh oh!

Conversation

bsanchez-the-roach commented Nov 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

netlify bot commented Nov 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for cockroachdb-interactivetutorials-docs canceled.

Uh oh!

netlify bot commented Nov 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for cockroachdb-api-docs canceled.

Uh oh!

github-actions bot commented Nov 4, 2025

Files changed:

Uh oh!

Uh oh!

Uh oh!

bsanchez-the-roach Nov 4, 2025

Choose a reason for hiding this comment

Uh oh!

netlify bot commented Nov 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Netlify Preview

Uh oh!

bsanchez-the-roach Nov 4, 2025

Choose a reason for hiding this comment

Uh oh!

bsanchez-the-roach Nov 4, 2025

Choose a reason for hiding this comment

Uh oh!

amine-crl Nov 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

amine-crl Nov 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

amine-crl Nov 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

amine-crl Nov 5, 2025

Choose a reason for hiding this comment

Uh oh!

bsanchez-the-roach Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

bsanchez-the-roach Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

bsanchez-the-roach commented Nov 4, 2025 •

edited

Loading

netlify bot commented Nov 4, 2025 •

edited

Loading

netlify bot commented Nov 4, 2025 •

edited

Loading

netlify bot commented Nov 4, 2025 •

edited

Loading

amine-crl Nov 5, 2025 •

edited

Loading

amine-crl Nov 5, 2025 •

edited

Loading

amine-crl Nov 5, 2025 •

edited

Loading