Goutham Sekar
Goutham Sekar
Any conclusion to this issue? Looking for the exact same solution where I want to bypass the oidc authuservice when exposing the Inference service to outside the cluster while making...
Patching the knative configmap config-domain with a custom domain atleast updates the virtual service so that it makes use of the kubeflow-gateway for external traffic.
Got it to work with the authentication where I could pass the Cookie authservice_session. But would be better if we could have an option to bypass this.
Yes @yurkoff-mv
@yurkoff-mv I am not using dex, but the oidc-uservice. Here is the output: ``` sklearn-v2-iris ["knative-serving/knative-local-gateway","kubeflow/kubeflow-gateway"] ["sklearn-v2-iris.dev.svc.cluster.local","sklearn-v2-iris-dev.example.com"] 5d20h sklearn-v2-iris-predictor-ingress ["knative-serving/knative-local-gateway","kubeflow/kubeflow-gateway"] ["sklearn-v2-iris-predictor-dev.example.com","sklearn-v2-iris-predictor.dev","sklearn-v2-iris-predictor.dev.svc","sklearn-v2-iris-predictor.dev.svc.cluster.local"] 5d20h sklearn-v2-iris-predictor-mesh ["mesh"] ["sklearn-v2-iris-predictor.dev","sklearn-v2-iris-predictor.dev.svc","sklearn-v2-iris-predictor.dev.svc.cluster.local"] 5d20h ```
I also had to update knative config domain, that was the key ``` apiVersion: v1 kind: ConfigMap metadata: name: config-domain namespace: knative-serving labels: app.kubernetes.io/name: knative-serving app.kubernetes.io/component: controller app.kubernetes.io/version: "1.10.2" annotations:...
@yurkoff-mv Which ConfigMap are you adding the extension provider? I haven't tried the steps you had mentioned for bypassing auth on my setup yet
@yurkoff-mv Was able to achieve it. Disabled session token as well for Infer endpoints. Though not recommended for a production setup. We wanted it for our nonprod env.
@yurkoff-mv The same steps you had mentioned above for disabling the session token. For the kubeflow-gateway to come up the knative configmap needs to be updated in the way I...
https://kserve.github.io/website/0.10/admin/serverless/serverless/#1-install-knative-serving - Look at the warning here too. The changes was mostly from knative side