adrien/ctie-exercice
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Adrien Bouvais 2026-08-31 19:13:28 +00:00
parent 4cae7b8093
commit f67d5f1985
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -74,7 +74,7 @@ values, and provisions the new namespace.
(`tenant-a`, `tenant-b`) and runs under a dedicated Kubernetes `ServiceAccount`. (`tenant-a`, `tenant-b`) and runs under a dedicated Kubernetes `ServiceAccount`.
* **Network Security:** A `NetworkPolicy` is deployed within each tenant namespace * **Network Security:** A `NetworkPolicy` is deployed within each tenant namespace
to restrict ingress/egress traffic. The Jupyter notebook can only communicate to restrict ingress/egress traffic. The Jupyter notebook can only communicate
with necessary services (like MinIO) and the internet, preventing cross-namespace communication. with necessary services, preventing cross-namespace communication.
* **Automated & Isolated S3 Setup:** To prevent exposing admin credentials outside the storage * **Automated & Isolated S3 Setup:** To prevent exposing admin credentials outside the storage
infrastructure, a Kubernetes Job runs directly within the minio namespace during tenant provisioning. infrastructure, a Kubernetes Job runs directly within the minio namespace during tenant provisioning.
This job connects to the MinIO admin API locally, creates a reference bucket (Read-Only), a work bucket (Read/Write), This job connects to the MinIO admin API locally, creates a reference bucket (Read-Only), a work bucket (Read/Write),