diff --git a/docs/dev/features/object-storage/blobcsi.md b/docs/dev/features/object-storage/blobcsi.md index d46020df8..321f49fd7 100644 --- a/docs/dev/features/object-storage/blobcsi.md +++ b/docs/dev/features/object-storage/blobcsi.md @@ -165,41 +165,45 @@ resource "kubernetes_secret" "aaw--prod-sp-secret" { #### c. Add bucket info: - -Add the following to `resource "kubectl_manifest" "fdi-aaw-configuration-data"`, in one of: +Add the following to `resource "kubectl_manifest" "fdi-aaw-configuration-data"`, in one of the following, depending on the classification of the bucket: 1. `fdi-protected-b-external.json: |` or 2. `fdi-unclassified-external.json: |` or 3. `fdi-protected-b-internal.json: |` or 4. `fdi-unclassified-internal.json: |` -depending on the classification of the bucket. - ``` - { - "bucketName": "", - "pvName": "-eprotb", - "subfolder": "", - "readers": [""], - "writers": [""], - "spn": "aaw--prod-sp" - }, - { - "bucketName": "-transit", - "pvName": "-inbox-eprotb", - "subfolder": "from-de", - "readers": [""], - "writers": [""], - "spn": "aaw--prod-sp" - }, - { - "bucketName": "-transit", - "pvName": "-outbox-eprotb", - "subfolder": "to-vers", - "readers": [""], - "writers": [""], - "spn": "aaw--prod-sp" - } +{ + "bucketName": "", + "pvName": "-eprotb", + "subfolder": "", + "readers": [""], + "writers": [""], + "spn": "aaw--prod-sp" +} +``` + +##### Transit Containers + +If the storage solution requires transit containers, you'll want to add this as well. Not all solutions require this. + +``` +{ + "bucketName": "-transit", + "pvName": "-inbox-eprotb", + "subfolder": "from-de", + "readers": [""], + "writers": [""], + "spn": "aaw--prod-sp" +}, +{ + "bucketName": "-transit", + "pvName": "-outbox-eprotb", + "subfolder": "to-vers", + "readers": [""], + "writers": [""], + "spn": "aaw--prod-sp" +} ``` ##### Info @@ -214,19 +218,22 @@ depending on the classification of the bucket. > > `writers:` use the kubeflow profile name for this > -> `spn:` this has to be created by YOU. Send a JIRA ticket to the Cloud Team. +> `spn:` this has to be obtained by you by sending a Jira ticket to the Cloud Team. See below for an example SPN request. > ##### Example Cloud Ticket +To obtain the SPN, send a Jira ticket to the Cloud Team, follow the template below: + > Hi, > > Can I get a service principle named aaw-\-prod-sp created please? > > The owners should be: > -> relevant.person.one@cloud.statcan.ca -> relevant.person.two@cloud.statcan.ca +> - relevant.person.one@cloud.statcan.ca +> - relevant.person.two@cloud.statcan.ca +> > More info: https://jirab.statcan.ca/browse/?????-???? > > Thanks!