Hey! Great work with Flyte 2.0 OSS. :heart: My qu...
# flyte-v2-support
m
Hey! Great work with Flyte 2.0 OSS. ❤️ My question: it is my understanding that Open ID Authentication that was present in Flyte 1.X via flyte-admin is not present in Flyte 2.0. Do you plan on re-adding it? It is obviously rather crucial to start using Flyte 2.0. Greetings!
👀 1
f
You are talking about issuing/validating auth token with flyte backend instead of 3rd party auth service right? Now we only support 3rd party auth service. I can talk to the team
g
are you able to do auth on ingress controller or ALB?
c
Have you tried using oauth2proxy like the deployment instructions mention? That is what we've used and it works.
❤️ 2
m
We put a keycloak instance on the cluster and that works for all use cases (web auth, cli auth, API auth) - but yeah, it was nice when this was fully "inside" of flyte.
Upon looking a bit into the oauth2proxy, I don't think it would solve machine to machine auth, right? We need that path specifically to submit workflow runs from our backend services...
c
The oauth2proxy is hooked up at the ingress layer so you would have to route requests through the ingress path.
I admit that does create an awkward situation for traffic that would typically be intra-cluster. You typically don't want to go out of the cluster and back into ingress if you don't need to. I wonder if you can do auth against the ingress but just traffic direct intra cluster with tokens attached[