worksmobile 연동 & ory stack 26.2.0으로 업그레이드

docker/compose.ory.yaml

@@ -88,6 +88,33 @@ services:
             - ory-net
             - hydranet
 
+    keto-migrate:
+        image: oryd/keto:${KETO_VERSION:-v25.4.0}
+        environment:
+            - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KETO_DB:-ory_keto}?sslmode=disable&max_conns=20
+        volumes:
+            - ./docker/ory/keto:/etc/config/keto
+        command: ["migrate", "up", "-c", "/etc/config/keto/keto.yml", "--yes"]
+        depends_on:
+            postgres_ory:
+                condition: service_healthy
+        networks:
+            - ory-net
+
+    keto:
+        image: oryd/keto:${KETO_VERSION:-v25.4.0}
+        container_name: ory_keto
+        environment:
+            - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${KETO_DB:-ory_keto}?sslmode=disable&max_conns=20
+        volumes:
+            - ./docker/ory/keto:/etc/config/keto
+        command: serve -c /etc/config/keto/keto.yml
+        depends_on:
+            keto-migrate:
+                condition: service_completed_successfully
+        networks:
+            - ory-net
+
     oathkeeper:
         image: oryd/oathkeeper:${OATHKEEPER_VERSION:-v0.40.6}
         container_name: oathkeeper
@@ -123,20 +150,32 @@ services:
               echo 'Wait for services...';
               until curl -s http://kratos:4433/health/ready; do sleep 1; done;
               until curl -s http://hydra:4444/health/ready; do sleep 1; done;
+              until curl -s http://keto:4466/health/ready; do sleep 1; done;
               echo 'Ory Stack is fully operational!';"
         depends_on:
             - kratos
             - hydra
+            - keto
         networks:
             - ory-net
 
     init-rp:
-        image: oryd/hydra:${HYDRA_VERSION:-v25.4.0}
+        image: alpine:latest
         container_name: init-rp
-        entrypoint: ["/bin/sh"]
+        env_file:
+            - ../.env
         command:
+            - /bin/sh
             - -ec
             - |
+              apk add --no-cache curl tar
+              HYDRA_CLI_VERSION="$${HYDRA_VERSION:-v26.2.0}"
+              HYDRA_CLI_VERSION="$${HYDRA_CLI_VERSION%-distroless}"
+              HYDRA_CLI_ARCHIVE_VERSION="$${HYDRA_CLI_VERSION#v}"
+              curl -fsSLo /tmp/hydra.tar.gz "https://github.com/ory/hydra/releases/download/$${HYDRA_CLI_VERSION}/hydra_$${HYDRA_CLI_ARCHIVE_VERSION}-linux_64bit.tar.gz"
+              tar -xzf /tmp/hydra.tar.gz -C /usr/local/bin hydra
+              rm /tmp/hydra.tar.gz
+
               echo "Creating/Updating OAuth2 Clients..."
               
               hydra create oauth2-client \