We have a multi-tenant setup and every k8s pod has user identity that is required for authz & audit when talking to other stripe services. So the flyte pod needs to send some extra tokens to the Ray k8s cluster. So we decided to not use the flytekit ray plugin as it has to go via propeller and the identity is only in task pods, so the call to Ray EKS cluster need to come from the task pod