search

unicef / magasin

Cloud native open-source end-to-end data / AI / ML platform
https://unicef.github.io/magasin/
Apache License 2.0
5 stars 3 forks source link

Automate magasin changes in the daskhub helm chart #21

Open merlos opened 8 months ago

merlos commented 8 months ago

By default daskhub helm chart sets a public proxy service in LoadBalancer mode. f that is installed in a regular kubernetes cloud service, it exposes a jupyterhub interface to any user without password and therefore allows running arbitrary code in that instance.

To prevent that this change is added in the values.yaml file within the helm chart.

jupyterhub:
  proxy:
    service:
      type: ClusterIP

However, if the helm chart is updated (dev-scripts/update-helm-charts.sh) this change will be overwritten.