2i2c-org / infrastructure

Infrastructure for configuring and deploying our community JupyterHubs.
https://infrastructure.2i2c.org
BSD 3-Clause "New" or "Revised" License
104 stars 56 forks source link

[New Hub] NASA Cryo Community -- Cryosphere Community Hub #1702

Closed colliand closed 1 year ago

colliand commented 1 year ago

Hub Description

Tasha Snow and Matt Siegfried of the Colorado School of Mines worked with @fperez and @colliand and members of the cryosphere research community on two NASA proposals over Summer 2022. Both of these proposals were recently funded. These projects will support the use of open science workflows, broaden participation in cryo research, and improve community dynamics. 2i2c will deploy a dask hub for use during a series of events during the Year of Open Science (2023) and beyond.

The main purpose of this issue is to gather the technical details necessary for 2i2c's engineering team to set up the hub.

Future events/milestones/workshops/talks in this project (copied from Google doc running notes)

Community Representative(s)

Others who participated in last week's kickoff event and expressed interest in this hub and the surrounding project inlcude:

Important dates

Hub Authentication Type

GitHub Authentication (e.g., @mygithubhandle)

Hub logo information

Can @tsnow03 or @jessicaS11 please share a URL pointing at an image to be used on the splash page that users land on when they arrive to the hub login page? For example, here is the leap hub's landing page.

Hub user image

What software environment image should be used for the NASA Cryo community hub? In our kickoff, we discussed the idea to launch with a hub image that was used for the SnowEX hackweek. Another possibility would be to use (parts or all of) the JMTE hub used heavily by @fperez and collaborators.

Extra features you'd like to enable

What data centre should be used? The hub should be built on the same data centre where large cryosphere data is stored.

Other relevant information

No response

Hub URL

..2i2c.cloud ### Hub Type _No response_ ### Tasks to deploy the hub - [x] Engineer who will deploy the hub is assigned - [x] Deploy information filled in above - [x] Initial Hub deployment PR: - [x] Administrators able to log on - [x] Community Representative satisfied with hub environment - [x] Hub now in steady-state
sgibson91 commented 1 year ago

I'm signing off for the night now, but will pick this back up in the morning if you can add me to the org as an admin.

tsnow03 commented 1 year ago

Thanks @sgibson91. Apologies I had to step away for a couple meetings. I've sent you an invite to our org.

> In this case, they should go to the configuration page for this app within their GitHub organization and explicitly grant it access.

I was unable to find any AuthO apps or Github Apps to grant permissions to in the Developer Settings or the third-party access on our org so I hit a dead end. I am guessing I am looking in the wrong place for this app?

JessicaS11 commented 1 year ago

@tsnow03 @sgibson91 Not sure about others, but I was able to start up a hub (non-staging) as of about 20 minutes ago...

sgibson91 commented 1 year ago

Not sure about others, but I was able to start up a hub (non-staging) as of about 20 minutes ago...

Yes, I reset the OAuth app permissions for the org last night from my phone, so this should be working now.

I was unable to find any AuthO apps or Github Apps to grant permissions to in the Developer Settings or the third-party access on our org so I hit a dead end. I am guessing I am looking in the wrong place for this app?

I eventually found this under "OAuth application policy", but I think this is a recent change and GitHub's current documentation seems outdated

finding-oauth-apps-in-org-settings

However, I don't think it would have shown up there if you didn't click "Grant" next to the org name, before authorising the app at the first login. For example, if I wanted to grant the app access to the binderhub-test-org org in the screenshot below, I need to first click "Grant", then "Authorise".

The apps might have shown up there if someone who isn't an admin had clicked "Request" instead (as you can see the "Request" button is present for orgs I don't own), but I think all the admins would have also received a notification if that had happened and you wouldn't have needed to go hunting in the settings.

granting-org-access-to-oauth-app

(I'm taking all these screenshots so I can improve docs 😄 )

sgibson91 commented 1 year ago

I've also updated the domains so the hubs are now accessible at, respectively:

tsnow03 commented 1 year ago

Everything is working beautifully! Thank you so much! And our users are only seeing the small and medium instances while advanced team are seeing all of them.

Thank you for the clarification on the instructions! I’m keeping notes on places that were super streamlined and parts that were more ambiguous so we can trade notes at any point once we get into the swing of this a little further.

damianavila commented 1 year ago

Given we have confirmation from the community representative that things are working as expected, I am going to close this one! Feel free to send any follow-up through our support channel at support@2i2c.org.

Thanks!