mainline stability, as a display of project performance/seriousness

[nnWhisperer]

Hi! This is a very nice project and for a topic as that serious as authentication/security, I wonder why isn't the CI pipeline forced to be green in the main(master) branch? It shows 'failing' and when you click the failing CI button in the readme, it shows most of them were broken. Do you need a hand to add a github workflow file, to keep the main branch automated (only passing commit sequences from a 'development' branch is moved to the mainline) or else?

Current CI status is of the mainline (master) branch (probably red again when you see this post):

[vinckr]

Hey @nnWhisperer
thanks for reaching out.
Ory internally recently migrated to a monorepo, so I think the CI is either superfluous now (because it runs in our internal repos) or not yet migrated fully. If you have ideas for improvement, contributions are welcome. You can maybe discuss with @nipsufn or @Demonsthere if you have ideas.

[aeneasr]

Hi, it seems during the migration to our new infra, the e2e test script had a small bug in the open source repo ( https://github.com/ory/kratos/actions/runs/15448424072/job/43484302574#step:18:474 )

We'll get that sorted, thank you!

[vinckr]

Hey @nnWhisperer was the reason to pick Keycloak just the CI flag or other considerations?

Ory is powering ChatGPT login with billions of users so I think that is plenty of battle testing :D - but maybe there are considerations that I missed and you didn't share with us so far.

[nnWhisperer]

yes, it isn't simple to set up an identity aware proxy. Ory has nice naming for its tools; kratos strength like a body guard waiting at the door for the identity service, keto like keto-diet ie cutting and segregating responsibilities with policies etc, but Ory has to be a managed service to overcome this complexity or a human resource that openai has. I'm a single person trying to build things. Besides, Zitadel became AGPL and you could too.

[vinckr]

Hey @nnWhisperer

thanks a ton for the feedback!
If self-hosting is too much work Ory does offer a fully managed service that is based on the open source projects, you can check it out here: https://console.ory.sh/. Let me know if you have any questions regarding the managed service.

Do you perceive AGPL as "better" than Apache2? How would you feel if Ory changes the license? I figured most users would not be on board with a "not real OSS" license.

[nnWhisperer]

Keycloak is also Apache licensed and no you misunderstood me: Apache license that most CNCF apps use is better than the AGPL conditions of Zitadel.