Skip to content

Conversation

@tmihalac
Copy link
Contributor

All the server-to-server requests should not be secured. Only client requests are secured.
This PR introduces a mechanism for intra server to server.

What this PR does / why we need it:
Which issue(s) is related to PR:
(#4198)

@tmihalac tmihalac force-pushed the intra-server-communication branch from af81369 to 0073ff0 Compare August 26, 2024 18:03
@tmihalac tmihalac force-pushed the intra-server-communication branch from 0073ff0 to e6414ba Compare August 27, 2024 14:06
@redhatHameed
Copy link
Contributor

any documentation need for this ?

@tmihalac
Copy link
Contributor Author

any documentation need for this ?

I don't think so, as far as I understand we decided not to expose the env variable for security purposes.

@redhatHameed
Copy link
Contributor

@tokoko can we merge this if there is no any further comments .

@redhatHameed
Copy link
Contributor

@tmihalac @dmartinol @lokeshrangineni also now as username and password not required incase if the server can we make this optional here

@tmihalac
Copy link
Contributor Author

@tmihalac @dmartinol @lokeshrangineni also now as username and password not required incase if the server can we make this optional here

I am not sure I understand what is the connection between auth_model.py and the intra server communication

@redhatHameed
Copy link
Contributor

@tmihalac @dmartinol @lokeshrangineni also now as username and password not required incase if the server can we make this optional here

I am not sure I understand what is the connection between auth_model.py and the intra server communication

this isn’t directly related, but I’ve found below validation error while deploying server it always asks for a username and password, with OIDC, and it throws a validation error if those fields are empty. Maybe we could just make the username and password fields optional WDYT?

username
Field required [type=missing, input_value={'type': 'oidc', 'auth_di..., 'realm': 'feast-rbac'}, input_type=dict]
For further information visit https://errors.pydantic.dev/2.8/v/missing
password```

@tmihalac
Copy link
Contributor Author

@tmihalac @dmartinol @lokeshrangineni also now as username and password not required incase if the server can we make this optional here

I am not sure I understand what is the connection between auth_model.py and the intra server communication

this isn’t directly related, but I’ve found below validation error while deploying server it always asks for a username and password, with OIDC, and it throws a validation error if those fields are empty. Maybe we could just make the username and password fields optional WDYT?

username
Field required [type=missing, input_value={'type': 'oidc', 'auth_di..., 'realm': 'feast-rbac'}, input_type=dict]
For further information visit https://errors.pydantic.dev/2.8/v/missing
password```

I am not sure, maybe ask @lokeshrangineni but aren't those parameters mandatory when auth type is oidc ?

@redhatHameed
Copy link
Contributor

@tmihalac @dmartinol @lokeshrangineni also now as username and password not required incase if the server can we make this optional here

I am not sure I understand what is the connection between auth_model.py and the intra server communication

this isn’t directly related, but I’ve found below validation error while deploying server it always asks for a username and password, with OIDC, and it throws a validation error if those fields are empty. Maybe we could just make the username and password fields optional WDYT?

username
Field required [type=missing, input_value={'type': 'oidc', 'auth_di..., 'realm': 'feast-rbac'}, input_type=dict]
For further information visit https://errors.pydantic.dev/2.8/v/missing
password```

I am not sure, maybe ask @lokeshrangineni but aren't those parameters mandatory when auth type is oidc ?

AFAIK for the client yes but incase server these should not mandatory.

@lokeshrangineni
Copy link
Contributor

@tmihalac @dmartinol @lokeshrangineni also now as username and password not required incase if the server can we make this optional here

I am not sure I understand what is the connection between auth_model.py and the intra server communication

this isn’t directly related, but I’ve found below validation error while deploying server it always asks for a username and password, with OIDC, and it throws a validation error if those fields are empty. Maybe we could just make the username and password fields optional WDYT?

username
Field required [type=missing, input_value={'type': 'oidc', 'auth_di..., 'realm': 'feast-rbac'}, input_type=dict]
For further information visit https://errors.pydantic.dev/2.8/v/missing
password```

I am not sure, maybe ask @lokeshrangineni but aren't those parameters mandatory when auth type is oidc ?

AFAIK for the client yes but incase server these should not mandatory.

Yes, it is mandatory for client and not for server. May be better to create separate task/issue and handle it as it is not related to this PR.

Signed-off-by: Theodor Mihalache <tmihalac@redhat.com>
@tmihalac tmihalac force-pushed the intra-server-communication branch from 2363186 to fa18deb Compare August 29, 2024 14:03
@tmihalac
Copy link
Contributor Author

@tokoko Can we merge this PR?

Copy link
Collaborator

@tokoko tokoko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@tokoko tokoko merged commit 729c874 into feast-dev:master Aug 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants