How does authentication work on Orion running on premise?

are you referring to self hosted orion?

We are going to try Prefect in QA on Kubernetes, and then use the managed version for production. We had already wrapped Orion with SSO, however I wanted to understand API authentication / flow deployment

there is no api authentication / api keys for the open source orion

oh oh the authentication tax

Hi Edmondo, as a workaround I am running open source prefect in k8s using oauth2-proxy and keycloak for authentication. All requests go through oauth2-proxy and authorized requests are sent to either prefect ui or prefect api. https://oauth2-proxy.github.io/oauth2-proxy/

@Paco Ibañez we are doing the same using Istio and an oauth2 proxy