https://flyte.org
Join Slack
I see that OAuth 2.0 Device Authorization Grant flow has been a part of Flyte since 1.5.0 (<#3483>) ...
# flyte-support
s
I see that OAuth 2.0 Device Authorization Grant flow has been a part of Flyte since 1.5.0 (#3483) however I can’t seem to find any documentation about it. Can anyone help me find some explanation of how to configure this? https://github.com/flyteorg/flytekit/blob/892b4741d0c38bd61b9cdaf1defb002d729acba2/flytekit/configuration/__init__.py#L363C19-L363C29
If I try and use this with flytekit I get the following:
Unable to retrieve Device Authentication Code for {…}, Reason Bad Request
t
you need to be using an external auth server that supports device flow.
a
Have you configured the OIDC params in your Helm deployment? I see the authenticator builds the client from there
This includes 
clientid
clientsecret
and 
scopes
s
@average-finland-92144 yes that’s correct. Pyflyte with 
authType: Pkce
works perfectly against Keycloak. I’ve also verified that device auth works using curl directly to the idp
I have discovered the problem. It was because PKCE was being enforced on that client in the Keycloak configuration. Device Auth Flow for flyte should definitely support PKCE as well… I will file an issue about it later.
thx 1
24 Views
Open in Slack
PreviousNext
Powered by

Flyte

Flyte enables production-grade orchestration for machine learning workflows and data processing created to accelerate local workflows to production.

Powered by