Access Services with External Clients

Many times you need to access a service from outside your cluster. For example, you may want to access EKF, which is running in a cluster, from your laptop. This guide will walk you through creating a token that you can use with your external clients. This includes creating a service account and retrieving its long-lived token, authorizing it to be able to perform certain actions in certain namespaces, and creating short-lived tokens which your external clients can use.

What You’ll Need

Procedure

Note

Depending on the application, there may be different ways to use the token. The client will use the long-lived token to create short-lived tokens, which will then use to access the desired API. The individual application client (for example, the KFP Python client) will usually perform this procedure transparently.