diff --git a/README.md b/README.md index 721e822..527133f 100644 --- a/README.md +++ b/README.md @@ -74,7 +74,7 @@ values, and provisions the new namespace. (`tenant-a`, `tenant-b`) and runs under a dedicated Kubernetes `ServiceAccount`. * **Network Security:** A `NetworkPolicy` is deployed within each tenant namespace to restrict ingress/egress traffic. The Jupyter notebook can only communicate -with necessary services (like MinIO) and the internet, preventing cross-namespace communication. +with necessary services, preventing cross-namespace communication. * **Automated & Isolated S3 Setup:** To prevent exposing admin credentials outside the storage infrastructure, a Kubernetes Job runs directly within the minio namespace during tenant provisioning. This job connects to the MinIO admin API locally, creates a reference bucket (Read-Only), a work bucket (Read/Write),