project-codeflare / project-codeflare/codeflare-sdk
Switch to Using Istio for Auth(z)
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 35
- Forks
- 66
- Avg merge
- 48m
- Merged PRs (30d)
- 7
Description
Name of Feature or Improvement
https://github.com/project-codeflare/codeflare-sdk/pull/298#issuecomment-1771546096
Use Istio/Service Mesh so that the end user doesn't need the elevated permissions we see with the current implementation.
Description of Problem the Feature Should Solve
Auth needs to gate access to both the dashboard api and the dashboard ui which are served on the same port.
Describe the Solution You Would Like to See
code is added to ODH operator most likely which automatically puts Service Mesh auth in front of Ray cluster dashboard
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with PR #298 and its linked discussion, then inspect the ODH operator path that manages access to the Ray cluster dashboard. Done means Istio or Service Mesh authentication gates both the dashboard API and UI on their shared port without requiring elevated permissions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes
- Domain
- api, authentication, infrastructure
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100