:wave: Flyte Gang. I am currently trying to get e...
# ask-the-community
j
👋 Flyte Gang. I am currently trying to get eager workflows running on our flyte cluster. I followed the instructions and got to the point were flytekit actually tries to authenticate with a given client id and secret - still fails with this error:
Status Code (400) received from IDP: {"error":"invalid_scope","error_description":"The requested scope is invalid, unknown, or malformed. The OAuth 2.0 Client is not allowed to request scope 'offline,all'."}
Did anyone got this working already? configs can be found in this thread
wf
Copy code
from flytekit import task, workflow
from flytekit.experimental import eager
from flytekit.remote import FlyteRemote
from flytekit.configuration import Config, PlatformConfig


@task
def add_one(x: int) -> int:
    return x + 1

@task
def double(x: int) -> int:
    return x * 2

@eager(
    remote=FlyteRemote(
        config=Config.auto(config_file="config.yaml")
    ),
    client_secret_group="test",
    client_secret_key="test",
)
async def wf(x: int) -> int:
    out = await add_one(x=x)
    if out < 0:
        return -1
    return await double(x=out)
config.yaml
Copy code
admin:
  endpoint: dns:///my_endpoint
  authType: ClientSecret
  clientId: my_new_client
  scopes:
    - offline
    - all
values.yaml
Copy code
selfAuthServer:
          staticClients:
            ...
            my_new_client:
              id: my_new_client
              client_secret: client_secret
              redirect_uris:
                - "<http://localhost:3846/callback>"
              grant_types:
                - refresh_token
                - client_credentials
              response_types:
                - token
              scopes:
                - all
                - offline
                - access_token
Scopes look alright to me
d
@Jan Fiedler sorry, somehow we all missed this question. Are you still struggling with this?
j
Hey David! I dropped the topic since we dont had the use cases for it yet but still i wanted to play around with it a little. So yes, this is where i left it