Dep: Pin grpcio in flytekit-identity-aware-proxy to version that allo… #2212
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a regression in
grpcio
which made a channel fail if the server responded with a content type other thanapplication/grpc
.During flytekit's lazy authentication, GCP Identity Aware Proxy (IAP) responds with 401 and content type
text/html
to the first unauthenticated request. For recentgrpcio
versions, lazy authentication thus failed completely.I described this in detail in grpc/grpc#35323.
In #2156 I previously pinned
grpcio
in the flytekit IAP plugin to versions without this regression.The grpc team now fixed the issue I reported. In this PR I therefore pin
grpcio>=1.62.0
.I exclude the previously allowed versions because the error message
used to be logged during lazy authentication even though it did actually work.
With the newest version, no more error message is logged.