Hi! I work at a large corp and will not be able t...
# prefect-server
m
Hi! I work at a large corp and will not be able to use Prefect Cloud. Is there a good tutorial for installing prefect core server on a host? Preferably will run on a long running kubernetes container, but EC2 also OK.
👀 1
n
Hi @merlin - check out the Prefect helm chart for some information on deploying all the pieces of Prefect Server to K8s. For information on deploying to a single machine (like EC2), check out this blog post, which describes the process for GCP but is directly transferrable.
m
brilliant, this is very helpful.
👍 1
z
Do note that because we don’t store your data/code we typical play well with large corps! Let us know if you run into issues with the helm chart. Also, the PR Nicholas linked is. WIP IAC for infrastructure and the helm chart. The helm chart can be used standalone if there’s an existing cluster and the instructions for that are at https://github.com/PrefectHQ/server/tree/master/helm/prefect-server
🙌 1
🚀 1
n
What he said^^ 😄
m
Thanks michael i'm not against paying for the cloud service but I checked and couldn't find a prior infosec review for prefect.
n
@merlin we routinely fill out infosec reviews when working with our large clients - if you want to have a more formal conversation about that let us know and we can make it happen! 🙂
m
I'll look into it, thanks!
😄 1
👍 1
Hi I've gone through the GCP deployment on a host. Is there guidance for authentication? For example I put redshift in a VPC, but still have to authenticate with credentials. I couldn't find authentication instructions to the UI.
z
Hmm I’m not sure what you mean. We don’t support authentication out of the box with Prefect Server (it’s very infra specific) but I know users make it work.
m
Got it -- i'm a data guy not developer, sorry for the dumb questions. So anyone who can access the server UI is able to make changes or run flows, etc. I should be looking for standard methods to authenticate to a server ip hosted website, I guess.
z
I believe people use https://kubernetes.github.io/ingress-nginx/examples/auth/basic/ but I can’t really say more than that. Cloud is going to be more secure than any authentication that can be tacked onto Server.
upvote 1