Examples: query, "exact match", wildcard*, wild?ard, wild*rd
Fuzzy search: cake~ (finds cakes, bake)
Term boost: "red velvet"^4, chocolate^2
Field grouping: tags:(+work -"fun-stuff")
Escaping: Escape characters +-&|!(){}[]^"~*?:\ with \, e.g. \+
Range search: properties.timestamp:[1587729413488 TO *] (inclusive), properties.title:{A TO Z}(excluding A and Z)
Combinations: chocolate AND vanilla, chocolate OR vanilla, (chocolate OR vanilla) NOT "vanilla pudding"
Field search: properties.title:"The Title" AND text
Answered
Hi Again

Hi again 🙂
Is there some documentation on what is actually "secured" via authentication in the self-hosted version?
The fileservers for example seems to be accessible without authentication since requests are not routed through the API!

  
  
Posted 2 years ago
Votes Newest

Answers 11


It's still worth mentioning that HTTPS termination is up to the deployment, and is highly recommended if you deploy your server in an open network.

  
  
Posted 2 years ago

Hey 🙂
No, nothing specific. It is just that users can get a sense of false security.

  
  
Posted 2 years ago

I think in the open source it's bring your own security on most cases ^^

  
  
Posted 2 years ago

Yep can do 👍

  
  
Posted 2 years ago

Thank you! I agree with CostlyOstrich36 that is why I meant false sense of security 🙂
Thank you SuccessfulKoala55 so actually only the file-server needs to be secured.

  
  
Posted 2 years ago

SuperiorPanda77 Would love to get a PR if you're up for it

  
  
Posted 2 years ago

Hi ReassuredTiger98 ,
Authentication-wise, all communication with the server is authenticated using a JWT token. In the open version, fileserver is indeed not included in this scheme (however, of you use any other object storage solution such as S3/minio, that's already built-in)

  
  
Posted 2 years ago

I think a note about the fileserver should be added to the https://clear.ml/docs/latest/docs/deploying_clearml/clearml_server_security page!

  
  
Posted 2 years ago

Heya ReassuredTiger98 ,

Is there anything specific you're looking for?

  
  
Posted 2 years ago

Yeah, for authentication, yes

  
  
Posted 2 years ago
570 Views
11 Answers
2 years ago
one year ago
Tags