skypilot-nightly 1.0.0.dev20250410__py3-none-any.whl → 1.0.0.dev20250412__py3-none-any.whl

sky/__init__.py

@@ -5,7 +5,7 @@ from typing import Optional
 import urllib.request
 
 # Replaced with the current commit when building the wheels.
-_SKYPILOT_COMMIT_SHA = '022a5c3ffe258f365764b03cb20fac70934f5a60'
+_SKYPILOT_COMMIT_SHA = 'ac3cbfe07c8c1129480d4facd683f4844ff6e1f7'
 
 
 def _get_git_commit():
@@ -35,7 +35,7 @@ def _get_git_commit():
 
 
 __commit__ = _get_git_commit()
-__version__ = '1.0.0.dev20250410'
+__version__ = '1.0.0.dev20250412'
 __root_dir__ = os.path.dirname(os.path.abspath(__file__))
 
 

sky/adaptors/oci.py

@@ -13,7 +13,7 @@ from sky.clouds.utils import oci_utils
 # effect.
 logging.getLogger('oci.circuit_breaker').setLevel(logging.WARNING)
 
-CONFIG_PATH = '~/.oci/config'
+OCI_CONFIG_PATH = '~/.oci/config'
 ENV_VAR_OCI_CONFIG = 'OCI_CONFIG'
 
 oci = common.LazyImport(
@@ -23,7 +23,7 @@ oci = common.LazyImport(
 
 
 def get_config_file() -> str:
-    conf_file_path = CONFIG_PATH
+    conf_file_path = OCI_CONFIG_PATH
     config_path_via_env_var = os.environ.get(ENV_VAR_OCI_CONFIG)
     if config_path_via_env_var is not None:
         conf_file_path = config_path_via_env_var

sky/authentication.py

@@ -382,10 +382,10 @@ def setup_kubernetes_authentication(config: Dict[str, Any]) -> Dict[str, Any]:
         network_mode = kubernetes_enums.KubernetesNetworkingMode.from_str(
             network_mode_str)
     except ValueError as e:
-        # Add message saying "Please check: ~/.sky/config.yaml" to the error
+        # Add message saying "Please check: ~/.sky/skyconfig.yaml" to the error
         # message.
         with ux_utils.print_exception_no_traceback():
-            raise ValueError(str(e) + ' Please check: ~/.sky/config.yaml.') \
+            raise ValueError(str(e) + ' Please check: ~/.sky/skyconfig.yaml.') \
                 from None
     _, public_key_path = get_or_generate_keys()
 

sky/backends/backend_utils.py

@@ -682,7 +682,7 @@ def write_cluster_config(
             ssh_proxy_command = ssh_proxy_command_config[region_name]
     logger.debug(f'Using ssh_proxy_command: {ssh_proxy_command!r}')
 
-    # User-supplied global instance tags from ~/.sky/config.yaml.
+    # User-supplied global instance tags from ~/.sky/skyconfig.yaml.
     labels = skypilot_config.get_nested((str(cloud).lower(), 'labels'), {})
     # labels is a dict, which is guaranteed by the type check in
     # schemas.py

sky/backends/cloud_vm_ray_backend.py

@@ -1473,7 +1473,7 @@ class RetryingVmProvisioner(object):
                     f'invalid cloud credentials: '
                     f'{common_utils.format_exception(e)}')
             except exceptions.InvalidCloudConfigs as e:
-                # Failed due to invalid user configs in ~/.sky/config.yaml.
+                # Failed due to invalid user configs in ~/.sky/skyconfig.yaml.
                 logger.warning(f'{common_utils.format_exception(e)}')
                 # We should block the entire cloud if the user config is
                 # invalid.
@@ -2065,10 +2065,10 @@ class RetryingVmProvisioner(object):
                                (clouds.Kubernetes, clouds.RunPod)) and
                         controller_utils.Controllers.from_name(cluster_name)
                         is not None):
-                    assert (clouds.CloudImplementationFeatures.STOP
+                    assert (clouds.CloudImplementationFeatures.AUTOSTOP
                             in requested_features), requested_features
                     requested_features.remove(
-                        clouds.CloudImplementationFeatures.STOP)
+                        clouds.CloudImplementationFeatures.AUTOSTOP)
 
                 # Skip if to_provision.cloud does not support requested features
                 to_provision.cloud.check_features_are_supported(

sky/check.py

@@ -142,7 +142,7 @@ def check_capabilities(
     if disallowed_cloud_names:
         disallowed_clouds_hint = (
             '\nNote: The following clouds were disabled because they were not '
-            'included in allowed_clouds in ~/.sky/config.yaml: '
+            'included in allowed_clouds in ~/.sky/skyconfig.yaml: '
             f'{", ".join([c for c in disallowed_cloud_names])}')
     if not all_enabled_clouds:
         echo(

sky/cli.py

@@ -35,7 +35,8 @@ import sys
 import textwrap
 import traceback
 import typing
-from typing import Any, Callable, Dict, Generator, List, Optional, Tuple, Union
+from typing import (Any, Callable, Dict, Generator, List, Optional, Set, Tuple,
+                    Union)
 
 import click
 import colorama
@@ -134,49 +135,51 @@ def _get_cluster_records_and_set_ssh_config(
     # Update the SSH config for all clusters
     for record in cluster_records:
         handle = record['handle']
-        # During the failover, even though a cluster does not exist, the handle
-        # can still exist in the record, and we check for credentials to avoid
-        # updating the SSH config for non-existent clusters.
-        if (handle is not None and handle.cached_external_ips is not None and
-                'credentials' in record):
-            credentials = record['credentials']
-            if isinstance(handle.launched_resources.cloud, clouds.Kubernetes):
-                # Replace the proxy command to proxy through the SkyPilot API
-                # server with websocket.
-                key_path = (
-                    cluster_utils.SSHConfigHelper.generate_local_key_file(
-                        handle.cluster_name, credentials))
-                # Instead of directly use websocket_proxy.py, we add an
-                # additional proxy, so that ssh can use the head pod in the
-                # cluster to jump to worker pods.
-                proxy_command = (
-                    f'ssh -tt -i {key_path} '
-                    '-o StrictHostKeyChecking=no '
-                    '-o UserKnownHostsFile=/dev/null '
-                    '-o IdentitiesOnly=yes '
-                    '-W %h:%p '
-                    f'{handle.ssh_user}@127.0.0.1 '
-                    '-o ProxyCommand='
-                    # TODO(zhwu): write the template to a temp file, don't use
-                    # the one in skypilot repo, to avoid changing the file when
-                    # updating skypilot.
-                    f'\'{sys.executable} {sky.__root_dir__}/templates/'
-                    f'websocket_proxy.py '
-                    f'{server_common.get_server_url().split("://")[1]} '
-                    f'{handle.cluster_name}\'')
-                credentials['ssh_proxy_command'] = proxy_command
-            cluster_utils.SSHConfigHelper.add_cluster(
-                handle.cluster_name,
-                handle.cached_external_ips,
-                credentials,
-                handle.cached_external_ssh_ports,
-                handle.docker_user,
-                handle.ssh_user,
-            )
-        else:
+
+        if not (handle is not None and handle.cached_external_ips is not None
+                and 'credentials' in record):
             # If the cluster is not UP or does not have credentials available,
             # we need to remove the cluster from the SSH config.
             cluster_utils.SSHConfigHelper.remove_cluster(record['name'])
+            continue
+
+        # During the failover, even though a cluster does not exist, the handle
+        # can still exist in the record, and we check for credentials to avoid
+        # updating the SSH config for non-existent clusters.
+        credentials = record['credentials']
+        if isinstance(handle.launched_resources.cloud, clouds.Kubernetes):
+            # Replace the proxy command to proxy through the SkyPilot API
+            # server with websocket.
+            key_path = (cluster_utils.SSHConfigHelper.generate_local_key_file(
+                handle.cluster_name, credentials))
+            # Instead of directly use websocket_proxy.py, we add an
+            # additional proxy, so that ssh can use the head pod in the
+            # cluster to jump to worker pods.
+            proxy_command = (
+                f'ssh -tt -i {key_path} '
+                '-o StrictHostKeyChecking=no '
+                '-o UserKnownHostsFile=/dev/null '
+                '-o IdentitiesOnly=yes '
+                '-W %h:%p '
+                f'{handle.ssh_user}@127.0.0.1 '
+                '-o ProxyCommand='
+                # TODO(zhwu): write the template to a temp file, don't use
+                # the one in skypilot repo, to avoid changing the file when
+                # updating skypilot.
+                f'\'{sys.executable} {sky.__root_dir__}/templates/'
+                f'websocket_proxy.py '
+                f'{server_common.get_server_url()} '
+                f'{handle.cluster_name}\'')
+            credentials['ssh_proxy_command'] = proxy_command
+
+        cluster_utils.SSHConfigHelper.add_cluster(
+            handle.cluster_name,
+            handle.cached_external_ips,
+            credentials,
+            handle.cached_external_ssh_ports,
+            handle.docker_user,
+            handle.ssh_user,
+        )
 
     # Clean up SSH configs for clusters that do not exist.
     #
@@ -186,14 +189,15 @@ def _get_cluster_records_and_set_ssh_config(
     # removing clusters, because SkyPilot has no idea whether to remove
     # ssh config of a cluster from another user.
     clusters_exists = set(record['name'] for record in cluster_records)
+    clusters_to_remove: Set[str] = set()
     if clusters is not None:
-        for cluster in clusters:
-            if cluster not in clusters_exists:
-                cluster_utils.SSHConfigHelper.remove_cluster(cluster)
+        clusters_to_remove = set(clusters) - clusters_exists
     elif all_users:
-        for cluster_name in cluster_utils.SSHConfigHelper.list_cluster_names():
-            if cluster_name not in clusters_exists:
-                cluster_utils.SSHConfigHelper.remove_cluster(cluster_name)
+        clusters_to_remove = set(cluster_utils.SSHConfigHelper.
+                                 list_cluster_names()) - clusters_exists
+
+    for cluster_name in clusters_to_remove:
+        cluster_utils.SSHConfigHelper.remove_cluster(cluster_name)
 
     return cluster_records
 

sky/client/cli.py

@@ -35,7 +35,8 @@ import sys
 import textwrap
 import traceback
 import typing
-from typing import Any, Callable, Dict, Generator, List, Optional, Tuple, Union
+from typing import (Any, Callable, Dict, Generator, List, Optional, Set, Tuple,
+                    Union)
 
 import click
 import colorama
@@ -134,49 +135,51 @@ def _get_cluster_records_and_set_ssh_config(
     # Update the SSH config for all clusters
     for record in cluster_records:
         handle = record['handle']
-        # During the failover, even though a cluster does not exist, the handle
-        # can still exist in the record, and we check for credentials to avoid
-        # updating the SSH config for non-existent clusters.
-        if (handle is not None and handle.cached_external_ips is not None and
-                'credentials' in record):
-            credentials = record['credentials']
-            if isinstance(handle.launched_resources.cloud, clouds.Kubernetes):
-                # Replace the proxy command to proxy through the SkyPilot API
-                # server with websocket.
-                key_path = (
-                    cluster_utils.SSHConfigHelper.generate_local_key_file(
-                        handle.cluster_name, credentials))
-                # Instead of directly use websocket_proxy.py, we add an
-                # additional proxy, so that ssh can use the head pod in the
-                # cluster to jump to worker pods.
-                proxy_command = (
-                    f'ssh -tt -i {key_path} '
-                    '-o StrictHostKeyChecking=no '
-                    '-o UserKnownHostsFile=/dev/null '
-                    '-o IdentitiesOnly=yes '
-                    '-W %h:%p '
-                    f'{handle.ssh_user}@127.0.0.1 '
-                    '-o ProxyCommand='
-                    # TODO(zhwu): write the template to a temp file, don't use
-                    # the one in skypilot repo, to avoid changing the file when
-                    # updating skypilot.
-                    f'\'{sys.executable} {sky.__root_dir__}/templates/'
-                    f'websocket_proxy.py '
-                    f'{server_common.get_server_url().split("://")[1]} '
-                    f'{handle.cluster_name}\'')
-                credentials['ssh_proxy_command'] = proxy_command
-            cluster_utils.SSHConfigHelper.add_cluster(
-                handle.cluster_name,
-                handle.cached_external_ips,
-                credentials,
-                handle.cached_external_ssh_ports,
-                handle.docker_user,
-                handle.ssh_user,
-            )
-        else:
+
+        if not (handle is not None and handle.cached_external_ips is not None
+                and 'credentials' in record):
             # If the cluster is not UP or does not have credentials available,
             # we need to remove the cluster from the SSH config.
             cluster_utils.SSHConfigHelper.remove_cluster(record['name'])
+            continue
+
+        # During the failover, even though a cluster does not exist, the handle
+        # can still exist in the record, and we check for credentials to avoid
+        # updating the SSH config for non-existent clusters.
+        credentials = record['credentials']
+        if isinstance(handle.launched_resources.cloud, clouds.Kubernetes):
+            # Replace the proxy command to proxy through the SkyPilot API
+            # server with websocket.
+            key_path = (cluster_utils.SSHConfigHelper.generate_local_key_file(
+                handle.cluster_name, credentials))
+            # Instead of directly use websocket_proxy.py, we add an
+            # additional proxy, so that ssh can use the head pod in the
+            # cluster to jump to worker pods.
+            proxy_command = (
+                f'ssh -tt -i {key_path} '
+                '-o StrictHostKeyChecking=no '
+                '-o UserKnownHostsFile=/dev/null '
+                '-o IdentitiesOnly=yes '
+                '-W %h:%p '
+                f'{handle.ssh_user}@127.0.0.1 '
+                '-o ProxyCommand='
+                # TODO(zhwu): write the template to a temp file, don't use
+                # the one in skypilot repo, to avoid changing the file when
+                # updating skypilot.
+                f'\'{sys.executable} {sky.__root_dir__}/templates/'
+                f'websocket_proxy.py '
+                f'{server_common.get_server_url()} '
+                f'{handle.cluster_name}\'')
+            credentials['ssh_proxy_command'] = proxy_command
+
+        cluster_utils.SSHConfigHelper.add_cluster(
+            handle.cluster_name,
+            handle.cached_external_ips,
+            credentials,
+            handle.cached_external_ssh_ports,
+            handle.docker_user,
+            handle.ssh_user,
+        )
 
     # Clean up SSH configs for clusters that do not exist.
     #
@@ -186,14 +189,15 @@ def _get_cluster_records_and_set_ssh_config(
     # removing clusters, because SkyPilot has no idea whether to remove
     # ssh config of a cluster from another user.
     clusters_exists = set(record['name'] for record in cluster_records)
+    clusters_to_remove: Set[str] = set()
     if clusters is not None:
-        for cluster in clusters:
-            if cluster not in clusters_exists:
-                cluster_utils.SSHConfigHelper.remove_cluster(cluster)
+        clusters_to_remove = set(clusters) - clusters_exists
     elif all_users:
-        for cluster_name in cluster_utils.SSHConfigHelper.list_cluster_names():
-            if cluster_name not in clusters_exists:
-                cluster_utils.SSHConfigHelper.remove_cluster(cluster_name)
+        clusters_to_remove = set(cluster_utils.SSHConfigHelper.
+                                 list_cluster_names()) - clusters_exists
+
+    for cluster_name in clusters_to_remove:
+        cluster_utils.SSHConfigHelper.remove_cluster(cluster_name)
 
     return cluster_records
 

sky/client/common.py

@@ -75,7 +75,8 @@ def download_logs_from_api_server(
     body = payloads.DownloadBody(folder_paths=list(paths_on_api_server),)
     response = requests.post(f'{server_common.get_server_url()}/download',
                              json=json.loads(body.model_dump_json()),
-                             stream=True)
+                             stream=True,
+                             cookies=server_common.get_api_cookie_jar())
     if response.status_code == 200:
         remote_home_path = response.headers.get('X-Home-Path')
         assert remote_home_path is not None, response.headers
@@ -176,7 +177,8 @@ def _upload_chunk_with_retry(params: UploadChunkParams) -> None:
                 },
                 content=FileChunkIterator(f, _UPLOAD_CHUNK_BYTES,
                                           params.chunk_index),
-                headers={'Content-Type': 'application/octet-stream'})
+                headers={'Content-Type': 'application/octet-stream'},
+                cookies=server_common.get_api_cookie_jar())
             if response.status_code == 200:
                 data = response.json()
                 status = data.get('status')

sky/client/sdk.py

@@ -102,7 +102,8 @@ def check(clouds: Optional[Tuple[str]],
     """
     body = payloads.CheckBody(clouds=clouds, verbose=verbose)
     response = requests.post(f'{server_common.get_server_url()}/check',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -118,7 +119,8 @@ def enabled_clouds() -> server_common.RequestId:
     Request Returns:
         A list of enabled clouds in string format.
     """
-    response = requests.get(f'{server_common.get_server_url()}/enabled_clouds')
+    response = requests.get(f'{server_common.get_server_url()}/enabled_clouds',
+                            cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -168,7 +170,8 @@ def list_accelerators(gpus_only: bool = True,
     )
     response = requests.post(
         f'{server_common.get_server_url()}/list_accelerators',
-        json=json.loads(body.model_dump_json()))
+        json=json.loads(body.model_dump_json()),
+        cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -208,7 +211,8 @@ def list_accelerator_counts(
     )
     response = requests.post(
         f'{server_common.get_server_url()}/list_accelerator_counts',
-        json=json.loads(body.model_dump_json()))
+        json=json.loads(body.model_dump_json()),
+        cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -246,7 +250,8 @@ def optimize(
                                  minimize=minimize,
                                  request_options=admin_policy_request_options)
     response = requests.post(f'{server_common.get_server_url()}/optimize',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -281,7 +286,8 @@ def validate(
     body = payloads.ValidateBody(dag=dag_str,
                                  request_options=admin_policy_request_options)
     response = requests.post(f'{server_common.get_server_url()}/validate',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     if response.status_code == 400:
         with ux_utils.print_exception_no_traceback():
             raise exceptions.deserialize_exception(
@@ -493,6 +499,7 @@ def launch(
         f'{server_common.get_server_url()}/launch',
         json=json.loads(body.model_dump_json()),
         timeout=5,
+        cookies=server_common.get_api_cookie_jar(),
     )
     return server_common.get_request_id(response)
 
@@ -576,6 +583,7 @@ def exec(  # pylint: disable=redefined-builtin
         f'{server_common.get_server_url()}/exec',
         json=json.loads(body.model_dump_json()),
         timeout=5,
+        cookies=server_common.get_api_cookie_jar(),
     )
     return server_common.get_request_id(response)
 
@@ -626,7 +634,8 @@ def tail_logs(cluster_name: str,
         json=json.loads(body.model_dump_json()),
         stream=True,
         timeout=(client_common.API_SERVER_REQUEST_CONNECTION_TIMEOUT_SECONDS,
-                 None))
+                 None),
+        cookies=server_common.get_api_cookie_jar())
     request_id = server_common.get_request_id(response)
     return stream_response(request_id, response, output_stream)
 
@@ -663,7 +672,8 @@ def download_logs(cluster_name: str,
         job_ids=job_ids,
     )
     response = requests.post(f'{server_common.get_server_url()}/download_logs',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     job_id_remote_path_dict = stream_and_get(
         server_common.get_request_id(response))
     remote2local_path_dict = client_common.download_logs_from_api_server(
@@ -745,6 +755,7 @@ def start(
         f'{server_common.get_server_url()}/start',
         json=json.loads(body.model_dump_json()),
         timeout=5,
+        cookies=server_common.get_api_cookie_jar(),
     )
     return server_common.get_request_id(response)
 
@@ -790,6 +801,7 @@ def down(cluster_name: str, purge: bool = False) -> server_common.RequestId:
         f'{server_common.get_server_url()}/down',
         json=json.loads(body.model_dump_json()),
         timeout=5,
+        cookies=server_common.get_api_cookie_jar(),
     )
     return server_common.get_request_id(response)
 
@@ -838,6 +850,7 @@ def stop(cluster_name: str, purge: bool = False) -> server_common.RequestId:
         f'{server_common.get_server_url()}/stop',
         json=json.loads(body.model_dump_json()),
         timeout=5,
+        cookies=server_common.get_api_cookie_jar(),
     )
     return server_common.get_request_id(response)
 
@@ -907,6 +920,7 @@ def autostop(
         f'{server_common.get_server_url()}/autostop',
         json=json.loads(body.model_dump_json()),
         timeout=5,
+        cookies=server_common.get_api_cookie_jar(),
     )
     return server_common.get_request_id(response)
 
@@ -966,7 +980,8 @@ def queue(cluster_name: str,
         all_users=all_users,
     )
     response = requests.post(f'{server_common.get_server_url()}/queue',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1007,7 +1022,8 @@ def job_status(cluster_name: str,
         job_ids=job_ids,
     )
     response = requests.post(f'{server_common.get_server_url()}/job_status',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1060,7 +1076,8 @@ def cancel(
         try_cancel_if_cluster_is_init=_try_cancel_if_cluster_is_init,
     )
     response = requests.post(f'{server_common.get_server_url()}/cancel',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1155,7 +1172,8 @@ def status(
         all_users=all_users,
     )
     response = requests.post(f'{server_common.get_server_url()}/status',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1189,7 +1207,8 @@ def endpoints(
         port=port,
     )
     response = requests.post(f'{server_common.get_server_url()}/endpoints',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1227,7 +1246,8 @@ def cost_report() -> server_common.RequestId:  # pylint: disable=redefined-built
               'total_cost': (float) cost given resources and usage intervals,
             }
     """
-    response = requests.get(f'{server_common.get_server_url()}/cost_report')
+    response = requests.get(f'{server_common.get_server_url()}/cost_report',
+                            cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1256,7 +1276,8 @@ def storage_ls() -> server_common.RequestId:
                 }
         ]
     """
-    response = requests.get(f'{server_common.get_server_url()}/storage/ls')
+    response = requests.get(f'{server_common.get_server_url()}/storage/ls',
+                            cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1280,7 +1301,8 @@ def storage_delete(name: str) -> server_common.RequestId:
     """
     body = payloads.StorageBody(name=name)
     response = requests.post(f'{server_common.get_server_url()}/storage/delete',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1318,7 +1340,8 @@ def local_up(gpus: bool,
                                 context_name=context_name,
                                 password=password)
     response = requests.post(f'{server_common.get_server_url()}/local_up',
-                             json=json.loads(body.model_dump_json()))
+                             json=json.loads(body.model_dump_json()),
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1334,7 +1357,8 @@ def local_down() -> server_common.RequestId:
         with ux_utils.print_exception_no_traceback():
             raise ValueError('sky local down is only supported when running '
                              'SkyPilot locally.')
-    response = requests.post(f'{server_common.get_server_url()}/local_down')
+    response = requests.post(f'{server_common.get_server_url()}/local_down',
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1358,7 +1382,8 @@ def realtime_kubernetes_gpu_availability(
     response = requests.post(
         f'{server_common.get_server_url()}/'
         'realtime_kubernetes_gpu_availability',
-        json=json.loads(body.model_dump_json()))
+        json=json.loads(body.model_dump_json()),
+        cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1389,7 +1414,8 @@ def kubernetes_node_info(
     body = payloads.KubernetesNodeInfoRequestBody(context=context)
     response = requests.post(
         f'{server_common.get_server_url()}/kubernetes_node_info',
-        json=json.loads(body.model_dump_json()))
+        json=json.loads(body.model_dump_json()),
+        cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1418,7 +1444,8 @@ def status_kubernetes() -> server_common.RequestId:
         - context: Kubernetes context used to fetch the cluster information.
     """
     response = requests.get(
-        f'{server_common.get_server_url()}/status_kubernetes')
+        f'{server_common.get_server_url()}/status_kubernetes',
+        cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1444,7 +1471,8 @@ def get(request_id: str) -> Any:
     response = requests.get(
         f'{server_common.get_server_url()}/api/get?request_id={request_id}',
         timeout=(client_common.API_SERVER_REQUEST_CONNECTION_TIMEOUT_SECONDS,
-                 None))
+                 None),
+        cookies=server_common.get_api_cookie_jar())
     request_task = None
     if response.status_code == 200:
         request_task = requests_lib.Request.decode(
@@ -1523,7 +1551,8 @@ def stream_and_get(
         params=params,
         timeout=(client_common.API_SERVER_REQUEST_CONNECTION_TIMEOUT_SECONDS,
                  None),
-        stream=True)
+        stream=True,
+        cookies=server_common.get_api_cookie_jar())
     if response.status_code in [404, 400]:
         detail = response.json().get('detail')
         with ux_utils.print_exception_no_traceback():
@@ -1579,7 +1608,8 @@ def api_cancel(request_ids: Optional[Union[str, List[str]]] = None,
 
     response = requests.post(f'{server_common.get_server_url()}/api/cancel',
                              json=json.loads(body.model_dump_json()),
-                             timeout=5)
+                             timeout=5,
+                             cookies=server_common.get_api_cookie_jar())
     return server_common.get_request_id(response)
 
 
@@ -1607,7 +1637,8 @@ def api_status(
         f'{server_common.get_server_url()}/api/status',
         params=server_common.request_body_to_params(body),
         timeout=(client_common.API_SERVER_REQUEST_CONNECTION_TIMEOUT_SECONDS,
-                 None))
+                 None),
+        cookies=server_common.get_api_cookie_jar())
     server_common.handle_request_error(response)
     return [
         requests_lib.RequestPayload(**request) for request in response.json()
@@ -1634,7 +1665,8 @@ def api_info() -> Dict[str, str]:
             }
 
     """
-    response = requests.get(f'{server_common.get_server_url()}/api/health')
+    response = requests.get(f'{server_common.get_server_url()}/api/health',
+                            cookies=server_common.get_api_cookie_jar())
     response.raise_for_status()
     return response.json()
 
@@ -1780,7 +1812,8 @@ def api_login(endpoint: Optional[str] = None) -> None:
     server_common.check_server_healthy(endpoint)
 
     # Set the endpoint in the config file
-    config_path = pathlib.Path(skypilot_config.CONFIG_PATH).expanduser()
+    config_path = pathlib.Path(
+        skypilot_config.get_user_config_path()).expanduser()
     with filelock.FileLock(config_path.with_suffix('.lock')):
         if not skypilot_config.loaded():
             config_path.touch()