Authenticating to Kubeflow Pipelines API
Plugin supports 2 ways of authenticating to Kubeflow Pipelines API:
1. KFP behind IAP proxy on Google Cloud
It’s already described in GCP AI Platform support chapter.
2. KFP behind Dex with authservice
Dex is the recommended authentication mechanism for on-premise Kubeflow clusters. The usual setup looks in a way that:
oidc-autheservice redirect unauthenticated users to Dex,
Dex authenticates user in remote system, like LDAP or OpenID and also acts as OpenID provider,
oidc-autheservice
asks Dex for a token and creates the session used across entire Kubeflow.
In order to use kedro-kubeflow
behind Dex-secured clusters, use the following manual:
Setup staticPassword authentication method and add a user that you’re going to use as CI/CD account.
Point your Kedro project to
/pipeline
API on Kubeflow, for example:https://kubeflow.local/pipeline
Set environment variables
DEX_USERNAME
andDEX_PASSWORD
before callingkedro kubeflow