Authenticating Cloudera AI Inference service

Cloudera AI Inference service secures all incoming requests to application and model endpoints using Cloudera Workload Authentication. Users and client applications must authenticate using one of the supported token- or key-based mechanisms before gaining access to HTTP endpoints.

Supported authentication methods

  • JSON Web Token (JWT) Authentication (Default): Uses Cloudera Workload Authentication JWTs to authenticate short-lived sessions, users, and programmatic clients interacting with HTTP endpoints exposed by the service workload.

  • Knox API Keys: Enables long-lived connectivity to model endpoints. To use Knox API keys, administrators must configure the Knox service within the Data Lake to accept and process key-based authentication.