Question about multi-cluster setups: In the docs it says the following about configuring the dataplane propeller:

configmap:
  ...
  catalog:
    catalog-cache:
      endpoint: <your-Ingress-FQDN>:443
      insecure: false

Is the assumption here that one modifies the ingress to also expose datacatalog routes? By default only admin is exposed, see here. Not a problem to do so, the docs are just vague here. How would authentication work here though? All auth is handled in admin.

@cool-lifeguard-49380 with Union multi cluster is out of the box

@cool-lifeguard-49380 it would only make sense if the Ingress also exposes the datacatalog service as you said. Not sure if that counts as "official" but I don't see other way it would work on a multi cluster context where caching is enabled. Also, in terms of auth, it will still go through the

admin.admin.endpoint

I gave datacatalog a VPC internal load balancer type service for now and just do all the communication between dataplane and control plane via internal routes. Works well.

but, can someone query datacatalog without passing through flyteadmin? Not sure

If one needs to pass through flyteadmin, I wonder why the docs say to expose datacatalog 🤔

Fabio, I'm just curious, if you wanted to update the docs to clarify them for this particular case, do you know how to push a docs PR all the way through? I ask because we have a pretty complicated docs build, and I'm not sure if we have done all we should to make it easy to accept docs contributions from the community. Feel free to DM me if you don't want to sidetrack this thread. Thanks.

Hey George, happy to contribute to the docs here. Have added to docs in the past, not a problem. But to me it’s still unclear what the recommended approach is for propeller->datacatalog networking in a multi-cluster setup. Would be good if someone from union could clarify how this is intended to be used 🙏 Then I’m happy to put that into the docs.

Ok thanks. I have absolutely no idea about the meat of your question. Just checking in on your perception of the docs contribution process.

Sometimes sphinx errors are difficult to understand but that’s just sphinx 🤷‍♂️

Sphinx is a well-named piece of software

Thanks Fabio. @hallowed-mouse-14616 you might want to take a look at Fabio's doc PR. I'm not sure how deep in the quagmire of multi-cluster config @white-chef-57887 is at this point.