Hi Everyone ! I’m looking for options to expose presto (presto coordinator) outside kubernetes with some basic auth. we are currently running Pinot and presto inside kubernetes. We have a requirement where we want to expose presto outside as a service so clients can connect via presto consume the data. please let me know if anyone has implemented the authentication at the presto layer.

@Elon any suggestions here?

Hi, you can use the lyft gateway to do this. We use istio to expose the gateway and attach presto clusters: https://github.com/lyft/presto-gateway

we have exposed the Presto already as a kubernetes service. But there is no authentication by default. and anyone can login and connect. We want to setup some basic authentication so we can restrict anonymous users

Oh got it, you can either use the file based authentication (https://prestosql.io/docs/current/security/built-in-system-access-control.html#file-based-system-access-control), implement your own plugin (https://prestosql.io/docs/current/develop/system-access-control.html). Also you can enable https, see https://prestosql.io/docs/current/security.html