❔I'm looking for some help with setting up Okta auth with flyte-core and an external authorization server following this doc. As I understand it (please correct me if I'm wrong), there are 4 main types of authentication to cover in a Flyte setup: 1. Human browser (HTTP) 2. Human CLI (GRPC) 3. Machine to machine (GRPC, external to k8s networks, e.g. CI systems) 4. Service to service (GRPC, within k8s network) Is there a way currently to enable 1,2 and 3 but disable 4 and rely solely on k8s networking policies to verify incoming traffic? Or maybe I need enable

selfAuthServer

for only

flytepropeller

to use the internal authorization server in just scenario 4? (Using flyte-core v1.16.1 in AWS EKS). Thanks in advance!

hey did you get m2m auth working through okta?

hey @high-autumn-89220, yeah we did!

are you using a custom okta auth server or the built-in flyte one?

okta external authorization server

thanks!