Skip to content

Authentication and Authorization for feast serving #823

@jmelinav

Description

@jmelinav

Is your feature request related to a problem? Please describe.
Currently user authentication and authorization limits access to Feast core(#793 ), but doesn't secure feast serving. Since feast client connects to core and serving directly, authentication and authorization on feast serving is a necessary feature.
Describe the solution you'd like
The PR #793, implements jwt authenticator and Keto authorizer for feast core. Same implementation will be done on the feast serving. Instead of replicating the code, Authorization and authentication will be moved separate module feast-auth, which will be included as a dependency in feast core and feast serving. Rest of the configuration will remain same as described in the documentation for #793. Python sdk will be updated to use secure channel to connect to feast serving.

Assumptions:

  • User authentication and authorization only applies to Feast Core and serving not ingestion.

Out of scope:

  • Go and java clients.

Describe alternatives you've considered
Refer to issue #793 for the alternatives considered.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions