auth:mlflow-oidc-auth

What problem does it solve?

This Skill simplifies the secure deployment of MLflow by integrating it with Keycloak for robust OIDC authentication and authorization, ensuring only authorized users and services can access MLflow resources.

Core Features & Use Cases

• OIDC Authentication: Leverages Keycloak for secure user and service authentication.
• Role-Based Access Control: Implements group-based authorization for READ, EDIT, and MANAGE permissions within MLflow.
• Programmatic Access: Supports Basic/Bearer token authentication for CI/CD pipelines and automated tools.
• OTEL Trace Ingestion: Configures secure ingestion of OpenTelemetry traces via Istio mTLS, bypassing OIDC for trace endpoints.
• Use Case: Deploying a secure MLflow Tracking Server in a Kubernetes environment where access needs to be managed centrally through an existing Keycloak instance, while also enabling automated trace collection from distributed applications.

Quick Start

Configure MLflow to use Keycloak OIDC authentication by setting the required environment variables and applying Istio policies for trace ingestion.