How does authentication work on Orion running on p...
# ask-communitye
Edmondo Porcu
12/30/2022, 4:36 PMHow does authentication work on Orion running on premise?
c
Christopher Boyd
12/30/2022, 4:42 PMare you referring to self hosted orion?
Christopher Boyd
12/30/2022, 4:44 PMAuthentication / accounts are prefect cloud specifically
e
Edmondo Porcu
12/30/2022, 4:46 PMWe are going to try Prefect in QA on Kubernetes, and then use the managed version for production. We had already wrapped Orion with SSO, however I wanted to understand API authentication / flow deployment
Edmondo Porcu
12/30/2022, 4:59 PMI understand the UI has no authentication (we handled it ourselves), what about the API?
c
Christopher Boyd
12/30/2022, 5:14 PMthere is no api authentication / api keys for the open source orion
e
Edmondo Porcu
12/30/2022, 5:27 PMoh oh the authentication tax
p
Paco Ibañez
12/30/2022, 7:03 PMHi Edmondo, as a workaround I am running open source prefect in k8s using oauth2-proxy and keycloak for authentication. All requests go through oauth2-proxy and authorized requests are sent to either prefect ui or prefect api. https://oauth2-proxy.github.io/oauth2-proxy/
e
Edmondo Porcu
12/30/2022, 8:25 PM@Paco Ibañez we are doing the same using Istio and an oauth2 proxy
Edmondo Porcu
12/30/2022, 8:26 PMBut I never tried to configure API endpoints with istio, just SSO
Edmondo Porcu
12/30/2022, 8:27 PMhow do you configure
prefect flow deploy13 Views