Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add notebook on Authenticating to Vespa Cloud #880

Merged
merged 13 commits into from
Aug 20, 2024

Conversation

thomasht86
Copy link
Collaborator

@thomasht86 thomasht86 commented Aug 19, 2024

I confirm that this contribution is made under the terms of the license found in the root directory of this repository's source tree and that I have the authority necessary to make this contribution on behalf of its copyright owner.

Added a notebook to demonstrate and explain the different authentication methods, as this is something that is often a source of misunderstanding/misconfiguration, ref #862.

Please have a look at the table in the notebook to see if I missed something.
Adding below for convenience:

For background context, it is useful to read the Vespa Cloud Security Guide.

Control-plane vs Data-plane

This may be self-explanatory for some, but it is worth mentioning that Vespa Cloud has two main components: the control-plane and the data-plane, which provide access to different functionalities.

Control-plane Data-plane Comments
Deploy application
Modify application (re-deploy)
Add or modify data-plane certs or token(s)
Feed data
Query data
Delete data
Visiting
Monitoring
Get application package
vespa auth login Interactive control-plane login in browser
vespa auth api-key Headless control-plane authentication with an API key generated in the Vespa Cloud console
vespa auth cert Used to generate a certificate for a data-plane connection
VespaCloud VespaCloud is a control-plane connection to Vespa Cloud
VespaDocker VespaDocker is a control-plane connection to a Vespa server running in Docker
Vespa Vespa is a data-plane connection to an existing Vespa application

I also discovered that a lot of the recently added classes had not been added to the reference API-documentation, so included these.

@thomasht86 thomasht86 marked this pull request as ready for review August 19, 2024 13:56
@thomasht86 thomasht86 requested a review from kkraune August 19, 2024 13:56
@kkraune
Copy link
Member

kkraune commented Aug 19, 2024

This will be a great help, and good to merge (so we can look at the links not displayed etc.)

kkraune
kkraune previously approved these changes Aug 19, 2024
"Security is a top priority for the Vespa Team.\n",
"We understand that as a newcomer to Vespa, the different authentication methods may not always be immediately clear.\n",
"\n",
"This notebook is intended to provide some clarity on the different authentication methods needing when interacting with Vespa Cloud for different purposes.\n"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
"This notebook is intended to provide some clarity on the different authentication methods needing when interacting with Vespa Cloud for different purposes.\n"
"This notebook is intended to provide some clarity on the different authentication methods needed when interacting with Vespa Cloud for different purposes.\n"

"metadata": {},
"source": [
"<div class=\"alert alert-info\">\n",
" Refer to <a href=\"https://pyvespa.readthedocs.io/en/latest/troubleshooting.html\">troubleshooting</a>\n",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

troubleshooting link did not work inside the alert (when testing locally)

docs/sphinx/source/authenticating-to-vespa-cloud.ipynb Outdated Show resolved Hide resolved
docs/sphinx/source/authenticating-to-vespa-cloud.ipynb Outdated Show resolved Hide resolved
@thomasht86 thomasht86 requested a review from kkraune August 20, 2024 06:47
Copy link
Member

@kkraune kkraune left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@kkraune kkraune merged commit 355c529 into master Aug 20, 2024
43 checks passed
@kkraune kkraune deleted the thomasht86/authentication-notebook branch August 20, 2024 06:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants