MLflow tokens · Container tokens
Issue, revoke and audit MLflow tracking tokens and container registry (docker login) tokens
Required permission: SettingsADMIN
Programs outside the platform use tokens instead of passwords to access this tenant. A token has the tenant fixed at the moment it was issued, so holding a single token isolates the program to that tenant's space. There are two kinds.
| Kind | Used for | Who can issue |
|---|---|---|
| MLflow token | The MLflow client in training scripts and notebooks (MLFLOW_TRACKING_TOKEN) | DEVELOPER · OPERATOR · ADMIN |
| Container token | The password for docker login — push/pull to the built-in registry | Every member (push needs the develop permission — only DEVELOPER, OPERATOR and ADMIN pass) |
Developers usually issue their own tokens in Account settings (계정 설정) in the avatar menu. The two admin console screens offer the same issuing function and are also where the administrator audits and revokes the whole tenant's tokens. The list also shows the issuer's email.
MLflow tokens
-
Enter a token name (what it is for) and the number of days until expiry, then press Issue (발급). Do not turn on No expiry (무기한) unless it has to last a long time.
-
Right after issuing, the card shows the secret and two lines to copy as they are, only once. The tracking address of this server is already filled in.
export MLFLOW_TRACKING_URI=<tracking URI> export MLFLOW_TRACKING_TOKEN=<issued token> -
Once you close the window you cannot see the secret again (the server does not keep the original). If you lose it, revoke it and issue a new one.
Container tokens
The issuing flow is the same, and the issue card shows a complete docker login command to copy.
docker login <registry host> -u <tenant code> -p <issued token>Any user name works (the token is the password). If the registry is an HTTP address other than localhost, you must add the host to insecure-registries in the Docker daemon configuration before you can log in.
Revoking and auditing
- Press Revoke (회수) on a row and the token becomes unusable immediately. The issuer or a tenant ADMIN can revoke it.
- Tokens close to expiry get an "Expires within N days (N일 내 만료)" badge. Use Hide revoked and expired (회수·만료 숨기기) to see only live tokens.
- Issuing and revoking are recorded in the audit log as
mlflow_token.*andregistry_token.*.