I'm having problems sending a Request to the Inferenceservice.
KFServing seems to be having an issue with the Authentication flow.
The Inferenceservice shows Healthy and all Conditions as Ready on the Kubeflow Dashboard.
I'm issuing a Bearer Token at the Endpoint from Keycloak /auth/realms/kubeflow/protocol/openid-connect/token.
Afterwards, I'm checking if the token is valid at /auth/realms/kubeflow/protocol/openid-connect/userinfo ,
which returns that the Token is valid.
The request to the actual Model Endpoint is returning a bad Request.
invalid parameter: redirect_uri
Keycloaks logs showing following:
type=LOGIN_ERROR, realmId=kubeflow, clientId=43aa752e45d68c36ecebcde8e4a60752, userId=null, ipAddress=192.223.51.453, error=invalid_redirect_uri, redirect_uri=https://model.serving.ai/oauth2/callback
Because of this Error, I've set the redirect_uri to a Wildcard, but still having this issue.
I expect that the Request is valid and arrives on the KFServing Container, after getting the Token.
Is there another way to authenticate, or some suggestions about what I've missed?
Hello,
I'm having problems sending a Request to the Inferenceservice. KFServing seems to be having an issue with the Authentication flow.
The Inferenceservice shows Healthy and all Conditions as Ready on the Kubeflow Dashboard.
I'm issuing a Bearer Token at the Endpoint from Keycloak
/auth/realms/kubeflow/protocol/openid-connect/token
. Afterwards, I'm checking if the token is valid at/auth/realms/kubeflow/protocol/openid-connect/userinfo
, which returns that the Token is valid.The request to the actual Model Endpoint is returning a bad Request.
invalid parameter: redirect_uri
Keycloaks logs showing following:type=LOGIN_ERROR, realmId=kubeflow, clientId=43aa752e45d68c36ecebcde8e4a60752, userId=null, ipAddress=192.223.51.453, error=invalid_redirect_uri, redirect_uri=https://model.serving.ai/oauth2/callback
Because of this Error, I've set the redirect_uri to a Wildcard, but still having this issue.
I expect that the Request is valid and arrives on the KFServing Container, after getting the Token.
Is there another way to authenticate, or some suggestions about what I've missed?