For SSO we need to keep staging different from prod for a while.
It means kratos config should be one for staging (where we would add oidc), and other for production (without oidc).
Possible solutions:
a. add two config files here and a flag in terraform, in order to choose the correct file according to the environment
b. move the config file to Cloudflare Worker (where we can more easily manage two enviroments). To be checked: what happens with secrets?
hugotiburtino
commented
1 year ago 
For SSO we need to keep staging different from prod for a while. It means kratos config should be one for staging (where we would add oidc), and other for production (without oidc). Possible solutions: a. add two config files here and a flag in terraform, in order to choose the correct file according to the environment b. move the config file to Cloudflare Worker (where we can more easily manage two enviroments). To be checked: what happens with secrets?