Hello there! I was hoping to get some general advice on securing access to Metaflow services (https://outerbounds.com/engineering/deployment/aws-k8s/advanced/#authenticated-public-endpoints-for-metaflow-services). We've deployed Metaflow on an on-prem k8s cluster using the Metaflow helm chart. My question is, what would be the best approach to secure access to the metaflow service that's exposed via ingress? We're currently considering using a combination of ingress-nginx and ouath2_proxy to achieve this. Is this the right approach? Additionally, do you happen to have any examples or resources that could help us set this up?

Recent user of Metaflow. I've tried it in two ways. 1. ingress-nginx, with oauth2 verification - I used Github, which allowed me to control access to metaflow-ui based on github repo access. Unfortunately, I didn't solve for metaflow-service since I was not sure how the client will use auth to launch jobs from someone's mac (if you're launching the flow from a notebook inside k8s, this shouldn't be a problem). 2. Use a VPN - the company i was working with already had a vpn set up. So I set up k8s in the VPC for that VPN and put the worker nodes on private subnet. No additional auth needed in this case.