Authenticating to Kubeflow Pipelines API
Plugin supports 2 ways of authenticating to Kubeflow Pipelines API:
1. KFP behind IAP proxy on Google Cloud
It’s already described in GCP AI Platform support chapter.
2. KFP behind Dex+authservice
Dex is the recommended authentication mechanism for on-premise Kubeflow clusters. The usual setup looks in a way that:
oidc-autheservice redirect unauthenticated users to Dex,
Dex authenticates user in remote system, like LDAP or OpenID and also acts as OpenID provider,
oidc-autheservice asks Dex for token and creates the session used across entire Kubeflow.
In order to use
kedro-kubeflow behind Dex-secured clusters, use the following manual:
Setup staticPassword authentication method and add a user that you’re going to use as CI/CD account.
Point your Kedro project to
/pipelineAPI on Kubeflow, for example:
Set environment variables