Difficulty Authenticating Ory CLI with API Keys in CI/CD

[aleti123]

Hi Ory team,

I have been using Ory CLI (v0.3.4) for over a year to authenticate with Ory in both my local environment (laptop) and CI. However, with the recent changes to the Ory authentication system, it now supports:

• Browser login
• API key authentication

I am trying to switch to API key authentication for use in my CI/CD pipelines, but I’m facing some confusion regarding the setup.

According to the documentation, it states:

In automated environments like CI/CD pipelines, you can authenticate using API keys. The Ory CLI supports both workspace and project API keys. Workspace API keys have permissions to manage project configs, while project API keys have permissions to manage project data. Depending on the use-case you might need to use one or both.

Set the API keys using the ORY_WORKSPACE_API_KEY and ORY_PROJECT_API_KEY environment variables.

Issues I'm encountering:

1. Where exactly can I find the ORY_PROJECT_API_KEY? Is it located under the /project_settings/apikeys section?

2. After setting up the ORY_WORKSPACE_API_KEY and ORY_PROJECT_API_KEY environment variables, I tried running the command ory tunnel, but the CLI still redirects me to browser-based login. Am I missing an additional step to authenticate with the API keys?

I also tried

ORY_PROJECT_API_KEY=<PROJECT API KEY> ./bin/ory tunnel localhsot:8080 --dev

This is also taking me to a browser

Could you please clarify the correct process to authenticate the Ory CLI with API keys, especially for use in CI/CD pipelines?

[aleti123]

ORY_PROJECT_API_KEY=<PROJECT API KEY> ./bin/ory tunnel localhsot:8080 --dev -q this works