Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature: add authentication to Mlflow UI #4

Open
2 of 4 tasks
tanlin2013 opened this issue May 8, 2022 · 2 comments
Open
2 of 4 tasks

Feature: add authentication to Mlflow UI #4

tanlin2013 opened this issue May 8, 2022 · 2 comments
Assignees
@tanlin2013
Labels
enhancement New feature or request

Comments

@tanlin2013
Copy link
Owner

tanlin2013 commented May 8, 2022 •
edited
Loading

Add authentication to the load balancer of Mlflow UI.

AWS

  • Cognito + MLflow Tracking Dashboard

On-premise workstation

  • Basic auth + SSL + MLflow Tracking Dashboard
  • SSL + Minio Console
  • Hide http path and other sensitive data in nginx.conf through environment vars

Reference

https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-authenticate-users.html#cognito-requirements
@tanlin2013 tanlin2013 added the enhancement New feature or request label May 8, 2022
@tanlin2013 tanlin2013 self-assigned this May 8, 2022
tanlin2013 added a commit that referenced this issue Jun 5, 2022
@tanlin2013
Infra: add ssl certification & login password (#4)
fd2261d
@tanlin2013
Copy link
Owner Author

We have configured a Nginx frontend to MLflow tracking dashboard, together with basic login authentication. Note still, minio dashboard is yet been configured under Nginx.

tanlin2013 added a commit that referenced this issue Jun 15, 2022
@tanlin2013
Infra: hide server name & dns with env var (#4)
d3c7278
tanlin2013 added a commit that referenced this issue Jun 15, 2022
@tanlin2013
Infra: use port 443 for minio ssl also (#4)
0ba9627
tanlin2013 added a commit that referenced this issue Jun 15, 2022
@tanlin2013
Infra: nginx does not support env vars (#4)
37a8c5b
tanlin2013 added a commit that referenced this issue Jun 15, 2022
@tanlin2013
Infra: proxy pass minio to port 444 (#4) [skip ci]
7492b0b
@tanlin2013
Copy link
Owner Author

tanlin2013 commented Jun 15, 2022 •
edited
Loading

To hide server name and DNS as env vars, it depends on whether Nginx does support this feature. For the moment it seems like one has to go to the image with version nginx >= 1.19.

https://github.com/docker-library/docs/tree/master/nginx#using-environment-variables-in-nginx-configuration

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@tanlin2013 tanlin2013

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@tanlin2013