Hi, I’m Erik Dao, machine learning engineer, currently based in Stockholm, Sweden 🇸🇪 I’ve got to use Flyte at my work. And I’ve been struggling to setup the latest Flyte version on GCP GKE without authentication 🫡

😞

What are the problems you are having with GCP/GKE?

Hi @freezing-airport-6809 and @cool-lifeguard-49380 First off, thank you very much for your willingness to help. Really appreciate it. Basically, I’ve deployed the

flyte-binary

Helm chart to my GKE cluster, with

auth:
  enabled: false
  selfAuthServer: false

ingress:
  create: true
  ingressClassName: nginx
  host: flyte-console.mycompany.domain

There is no TLS setup in the ingress, the domain is setup with TLS via the domain manager. Then, I’ve been trying to execute workflows in a Jupyter notebook. The JupyterHub is deployed in the same cluster with Flyte.

remote = FlyteRemote(
    config=Config(
        platform=PlatformConfig(
            endpoint="flyte-console.mycompany.domain",
            insecure=True,
            insecure_skip_verify=True,
            auth_mode="Pkce",
        )
    ),
    default_project="flytesnacks",
    default_domain="development",
    data_upload_location="<s3a://flyte-storage/>"
)

# The workflow is from Flyte's tutorial
execution = remote.execute_local_workflow(training_workflow, inputs={"C": 0.1})

And I’ve faced with this error

InactiveRpcError: <_InactiveRpcError of RPC that terminated with:
        status = StatusCode.UNAVAILABLE
        details = "failed to connect to all addresses; last error: INTERNAL: ipv4:<some_ip_address>:443: Trying to 
connect an http1.x server"
        debug_error_string = "UNKNOWN:failed to connect to all addresses; last error: INTERNAL: 
ipv4:<some_ip_address>:443: Trying to connect an http1.x server {created_time:"2023-05-25T05:23:30.814940018+00:00", 
grpc_status:14}"

Just to be sure:

auth:
  enabled: false

Does this mean your flyte deployment is publicly in the internet without auth? That would be dangerous potentially!

@cool-lifeguard-49380 Yes, my Flyte deployment is “public”, but it isn’t available to the public internet as it’s within the company VPN. So only several employees in the company have the access. It’s a fine setup for our scope at the moment.

Ok sounds good, just wanted to make sure 🙂

@cool-lifeguard-49380 Thank you very much for your suggestion. It's working now. I have some other problems with my workflow failed, but at least no security errors anymore 😄

Happy to hear 🙂

I don't think there is any errors related to configuration now. I've got

ValueError: Empty module name

when I execute a workflow via FlyteRemote on the jupyter notebook. But I get it's something different. I'll ask proper question in the #CP2HDHKE1 channel. Thank you very much for your help.