https://prefect.io logo
Title
m

merlin

01/20/2021, 12:28 AM
Hi! I work at a large corp and will not be able to use Prefect Cloud. Is there a good tutorial for installing prefect core server on a host? Preferably will run on a long running kubernetes container, but EC2 also OK.
👀 1
n

nicholas

01/20/2021, 12:35 AM
Hi @merlin - check out the Prefect helm chart for some information on deploying all the pieces of Prefect Server to K8s. For information on deploying to a single machine (like EC2), check out this blog post, which describes the process for GCP but is directly transferrable.
m

merlin

01/20/2021, 12:52 AM
brilliant, this is very helpful.
👍 1
z

Zanie

01/20/2021, 12:54 AM
Do note that because we don’t store your data/code we typical play well with large corps! Let us know if you run into issues with the helm chart. Also, the PR Nicholas linked is. WIP IAC for infrastructure and the helm chart. The helm chart can be used standalone if there’s an existing cluster and the instructions for that are at https://github.com/PrefectHQ/server/tree/master/helm/prefect-server
🙌 1
🚀 1
n

nicholas

01/20/2021, 12:55 AM
What he said^^ 😄
m

merlin

01/20/2021, 12:55 AM
Thanks michael i'm not against paying for the cloud service but I checked and couldn't find a prior infosec review for prefect.
n

nicholas

01/20/2021, 1:05 AM
@merlin we routinely fill out infosec reviews when working with our large clients - if you want to have a more formal conversation about that let us know and we can make it happen! 🙂
m

merlin

01/20/2021, 1:07 AM
I'll look into it, thanks!
😄 1
👍 1
Hi I've gone through the GCP deployment on a host. Is there guidance for authentication? For example I put redshift in a VPC, but still have to authenticate with credentials. I couldn't find authentication instructions to the UI.
z

Zanie

01/21/2021, 4:40 PM
Hmm I’m not sure what you mean. We don’t support authentication out of the box with Prefect Server (it’s very infra specific) but I know users make it work.
m

merlin

01/24/2021, 7:10 PM
Got it -- i'm a data guy not developer, sorry for the dumb questions. So anyone who can access the server UI is able to make changes or run flows, etc. I should be looking for standard methods to authenticate to a server ip hosted website, I guess.
z

Zanie

01/26/2021, 4:49 PM
I believe people use https://kubernetes.github.io/ingress-nginx/examples/auth/basic/ but I can’t really say more than that. Cloud is going to be more secure than any authentication that can be tacked onto Server.
:upvote: 1