@ancient-wolf-19325 how do I make flytepropeller trust the certificate of my IdP provider?

To make FlytePropeller trust your IdP provider's certificate, you need to ensure that the IdP's public root certificate is available in the FlytePropeller container's certificate store. This is necessary if your IdP uses a custom or self-signed CA. You can achieve this by mounting the CA certificate into the FlytePropeller pod and updating the container's trust store accordingly. For example, you may mount the certificate as a Kubernetes secret or config map and reference it in your pod spec, ensuring FlytePropeller can validate the IdP's TLS connection. This approach is confirmed by user reports and discussions in the Flyte community regarding certificate issues with IdP integration and FlytePropeller connectivity, especially when using self-signed or private CA certificates ([Docs] Additional Keycloak configuration settings, comment section; [Docs] OAuth with self-signed certificate throws cert error. Security docs need to be updated to reflect this requirement). Would you like more detail on how to mount the certificate or update the trust store in your FlytePropeller deployment? Sources: - https://github.com/flyteorg/flyte/issues/2606 👍 0 button 👎 0 button 💡 Hint: Mention @runllm in the thread for followups.

@ancient-wolf-19325 how do I make flytepropeller use another grant type which is not client_credentials?

FlytePropeller is designed to use the client_credentials grant type for authentication with OAuth2 providers, as shown in the Flyte configuration and code examples. There is no documented or supported way to configure FlytePropeller to use other grant types (such as authorization_code or password) for its service-to-service authentication. This limitation is confirmed in the Flyte codebase and user discussions ([Docs] Document supported

authType

values). Would you like more detail on how FlytePropeller authentication is configured or why only client_credentials is supported? Sources: - https://github.com/flyteorg/flyte/issues/5021 👍 0 button 👎 0 button 💡 Hint: Mention @runllm in the thread for followups.