HOWEVER: we run flyte in unauthenticated mode behind identity aware proxy which is not super nice. We gave flyteadmin an additional internal load balancer service which allows us to access it with flytectl, pyflyte, … from within the VPC. In our setup engineers cannot register workflows with pyflyte through the GKE ingress/identity aware proxy. It’s on my todo list to try to get this to work but until now it hasn’t been a priority.