rrrkharse

Currently anyone can trigger it. I will make some iterations in which we pass an API key and the github username in the request to the API gateway to prevent...

Will repro this and see what is going on

Hi @AlexandreBrown, surprisingly I am unable to reproduce the issue so far. My setup: - `main` branch in this repo, `v1.4.1` in `kubeflow/manifests` - Cognito setup via https://github.com/awslabs/kubeflow-manifests/blob/main/docs/deployment/cognito/README-automated.md - RDS/S3...

Pod description ``` $kbl describe pod -n kubeflow kfserving-models-web-app-7884f597cf-cllp5 Name: kfserving-models-web-app-7884f597cf-cllp5 Namespace: kubeflow Priority: 0 Node: ip-192-168-29-17.us-west-2.compute.internal/192.168.29.17 Start Time: Wed, 23 Mar 2022 14:47:12 -0700 Labels: app=kfserving app.kubernetes.io/component=kfserving-models-web-app app.kubernetes.io/name=kfserving istio.io/rev=default...

Kserve version from this commit: https://github.com/kubeflow/manifests/tree/ca48b5eb6b77e74c957bf4522e47ae82ed78cc4a/apps/kfserving/upstream/overlays/kubeflow

Hi RegaliaXYZ, have you authorized (logged in) the user and passed the auth token along with the request? This should be similar to the steps for authenticating KFP client requests...

I see, what I was trying to say was do you have an authorization token present in the request?