docker run -d --name kratos \
  -p 4433:4433 -p 4434:4434 \
  -e DSN=postgres://kratos:secret@db:5432/kratos \
  docker.io/oryd/kratos:latest serve -c /etc/config/kratos.yml

docker run -d --name kratos \
  --restart unless-stopped \
  -p 4433:4433 -p 4434:4434 \
  -v /etc/kratos:/etc/config:ro \
  -e DSN=postgres://kratos:secret@postgres:5432/kratos?sslmode=disable \
  -e LOG_LEVEL=info \
  docker.io/oryd/kratos:v1.2.0 \
  serve all -c /etc/config/kratos.yml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: kratos
spec:
  replicas: 2
  selector:
    matchLabels:
      app: kratos
  template:
    metadata:
      labels:
        app: kratos
    spec:
      containers:
        - name: kratos
          image: docker.io/oryd/kratos:v1.2.0
          args: ["serve", "all", "-c", "/etc/config/kratos.yml"]
          ports:
            - containerPort: 4433
            - containerPort: 4434
          env:
            - name: DSN
              valueFrom:
                secretKeyRef:
                  name: kratos-secrets
                  key: dsn
          volumeMounts:
            - name: config
              mountPath: /etc/config
      volumes:
        - name: config
          configMap:
            name: kratos-config
---
apiVersion: v1
kind: Service
metadata:
  name: kratos-public
spec:
  selector:
    app: kratos
  ports:
    - name: public
      port: 4433
      targetPort: 4433
    - name: admin
      port: 4434
      targetPort: 4434