❔I'm looking for some help with setting up
Okta auth with flyte-core and an external authorization server following this doc. As I understand it (please correct me if I'm wrong), there are 4 main types of authentication to cover in a Flyte setup:
1. Human browser (HTTP)
2. Human CLI (GRPC)
3. Machine to machine (GRPC, external to k8s networks, e.g. CI systems)
4. Service to service (GRPC, within k8s network)
Is there a way currently to enable 1,2 and 3 but disable 4 and rely solely on k8s networking policies to verify incoming traffic? Or maybe I need enable
selfAuthServer
for only
flytepropeller
to use the internal authorization server in just scenario 4?
(Using flyte-core v1.16.1 in AWS EKS).
Thanks in advance!