Use modern hydra cli migrate command and use kratos image that prevents

hydra migration collision

Signed-off-by: Dom Del Nano <ddelnano@gmail.com>

Author: ddelnano

k8s/cloud/base/ory_auth/hydra/hydra_deployment.yaml

@@ -26,10 +26,11 @@ spec:
       - name: migrate
         args:
         - migrate
-        - -c
-        - /etc/config/hydra/hydra.yml
         - sql
+        - up
         - -e
+        - -c
+        - /etc/config/hydra/hydra.yml
         - --yes
         envFrom:
         - configMapRef:

k8s/cloud/base/ory_auth/kratos/kratos_deployment.yaml

@@ -49,7 +49,7 @@ spec:
           # yamllint disable-line rule:line-length
           value: postgres://$(PL_POSTGRES_USERNAME):$(PL_POSTGRES_PASSWORD)@$(PL_POSTGRES_HOSTNAME):$(PL_POSTGRES_PORT)/$(PL_POSTGRES_DB)?sslmode=disable&max_conns=20&max_idle_conns=4
         imagePullPolicy: IfNotPresent
-        image: ghcr.io/pixie-io/kratos:1.3.1-scratch@sha256:8855cd72b9a5ffa25cc5588b4dc72b40c1b367c7fbe9fd3b1d1a477e731abfdd
+        image: ghcr.io/pixie-io/kratos:1.3.1-scratch@sha256:af0776882c10c3e9137006511c3d4a7aaab2598e75bd86f5692a4a9759da5054
         resources: {}
         securityContext:
           allowPrivilegeEscalation: false
@@ -135,7 +135,7 @@ spec:
         - name: SELFSERVICE_FLOWS_ERROR_UI_URL
           value: https://$(PL_WORK_DOMAIN)/auth/password/error
         imagePullPolicy: IfNotPresent
-        image: ghcr.io/pixie-io/kratos:1.3.1-scratch@sha256:8855cd72b9a5ffa25cc5588b4dc72b40c1b367c7fbe9fd3b1d1a477e731abfdd
+        image: ghcr.io/pixie-io/kratos:1.3.1-scratch@sha256:af0776882c10c3e9137006511c3d4a7aaab2598e75bd86f5692a4a9759da5054
         ports:
         - containerPort: 4433
         - containerPort: 4434

tools/docker/kratos_image/Dockerfile

@@ -15,6 +15,13 @@ RUN git clone --depth 1 https://github.com/ory/kratos.git
 WORKDIR /src/kratos
 RUN git fetch --tags && git checkout $KRATOS_VERSION
 
+# The hydra and kratos migrations attempt to create the same table.
+# Kratos's migration only creates the table while hydra's migration creates the table
+# and inserts a row. Therefore, we replace kratos's problematic version with empty placeholders
+# to avoid a conflict. Removing the problematic migration file prior to module initialization and
+# compilation did not work.
+RUN for file in persistence/sql/migrations/sql/20150100000001000000_networks.*.sql; do echo "-- Migration disabled to avoid conflict with hydra" > "$file"; done
+
 ENV GO111MODULE=on
 # kratos and hydra require CGO if sqlite is used, but we exclusively use postgres
 ENV CGO_ENABLED=0