Flyte enables production-grade orchestration for machine learning workflows and data processing created to accelerate local workflows to production.

Flyte

According to the ai bot this should work `user_identity = context.execution_metadata.security_context.user_identity`
I followed the references to some merged PRs. Is this still not released or is there a way to get the authenticated user in a workflow or task?

I don’t think flyte exposes this information to tasks today.

the field you’re looking for presumably is <https://github.com/flyteorg/flyte/blob/e9413c0ccb6672a0129e7e357bbf8a92ae0a3411/flyteadmin/pkg/manager/impl/execution_manager.go#L499|this I think>

this is set by the control plane in the request spec, and I believe this is handed down to the CRD that flyte propeller reads

but from there I don’t think it’s passed down to the plugins (and hence to the tasks)

Theres mention of it here <https://github.com/flyteorg/flyte/issues/3566>

The ability to know who ran a task would be important for tracing and audit

the information is stored in the control plane database.

so technically I can get it if I query the db

but you’re asking to make it accessible from within a task while it’s running right?

though you will have to match up the principal field against your idp most likely.

in our db it’s a random id that the idp assigns

I generate a report at the end of a workflow, a snap shot of the workflow. I would like to list who ran the execution.
In the UI I am able to filter all my executions

I see. It seems like this would be a feature request then

that just takes the current identity and uses it as a filter

<@UNR3C6Y4T> I could not find user metadata in either the metadata bucket or the database. In the cause of the user column of the execution table the value user is always postgres
I tried to find principal in the tables but could not

Eventually it will be important to know who ran a pipeline for audit purposes

that’s super weird.  who is your idp again?

and the /me endpoint in the UI shows the correct information?

you’re not `select user from …` right?