yeah, auth is a big question in general.
We have a complete auth implementation covering Argo Workflows, K8s, and all Metaflow surface area in the Outerbounds Platform. We are happy to show how it works, if you are curious.
On the open source side we are agnostic, so you can design a solution around it however you want.