Access Services with External Clients¶
Many times you need to access a service from outside your cluster. For example, you may want to access EKF, which is running in a cluster, from your laptop. This guide will walk you through creating a token that you can use with your external clients. This includes creating a service account and retrieving its long-lived token, authorizing it to be able to perform certain actions in certain namespaces, and creating short-lived tokens which your external clients can use.
What You’ll Need¶
- An existing EKF deployment.
- A working TokenRequest API for external clients on your EKF cluster.
Depending on the application, there may be different ways to use the token. The client will use the long-lived token to create short-lived tokens, which will then use to access the desired API. The individual application client (for example, the KFP Python client) will usually perform this procedure transparently.