https://prefect.io logo
Title
e

Edmondo Porcu

12/30/2022, 4:36 PM
How does authentication work on Orion running on premise?
c

Christopher Boyd

12/30/2022, 4:42 PM
are you referring to self hosted orion?
Authentication / accounts are prefect cloud specifically
e

Edmondo Porcu

12/30/2022, 4:46 PM
We are going to try Prefect in QA on Kubernetes, and then use the managed version for production. We had already wrapped Orion with SSO, however I wanted to understand API authentication / flow deployment
I understand the UI has no authentication (we handled it ourselves), what about the API?
c

Christopher Boyd

12/30/2022, 5:14 PM
there is no api authentication / api keys for the open source orion
e

Edmondo Porcu

12/30/2022, 5:27 PM
oh oh the authentication tax
p

Paco Ibañez

12/30/2022, 7:03 PM
Hi Edmondo, as a workaround I am running open source prefect in k8s using oauth2-proxy and keycloak for authentication. All requests go through oauth2-proxy and authorized requests are sent to either prefect ui or prefect api. https://oauth2-proxy.github.io/oauth2-proxy/
e

Edmondo Porcu

12/30/2022, 8:25 PM
@Paco Ibañez we are doing the same using Istio and an oauth2 proxy
But I never tried to configure API endpoints with istio, just SSO
how do you configure
prefect flow deploy
to use the credentials?