Recommendation KF-NB-01

[zachomedia]

The download functionality be disabled in the Kubeflow Notebooks environment, if possible. Assuming this functionality is provided by means of a URL, then the URL can be restricted using Istio.

[wg102]

This issue is handled by to separate issues. Once they are all reviewed and merged, it will be considered done.

• Notebook controller + Jupyter download: feat: Add Notebook Controller aaw-prob-notebook-controller#1
• Jupyter export as... download: feat: block jupyter download using export as aaw-prob-notebook-controller#2
• VSCode palette download feat: Block Download from palette vscode aaw-kubeflow-containers#281
• feat: Add block proB pod unless authpolicy present gatekeeper-policies#16
• Prot B constraint for gatekeeper https://github.com/StatCan/aaw-gatekeeper-constraints/pull/3

[wg102]

I finished linking all the PRs related to this. The idea is that there is an authorization policy and constraints that block the user from downloading files. For VSCode, it was not possible to use an authorization policy, and therefore we had to manually remove the option for the user to click.
Since all the issues are now closed, this recommendation can now be closed