Open sgibson91 opened 2 years ago
- Azure AD authentication, so everyone can log in with their turing.ac.uk account
- Docs: zero-to-jupyterhub.readthedocs.io/en/latest/administrator/authentication.html#azure-active-directory
- Turing IT will need to create a relevant app and provide the client ID and secret for that app
- Mapping specific user groups onto specific profile lists (i.e. machine types)
Note that for the second point, we must use GitHub-based authentication - so the first point is not applicable
Here is a nice implementation of allowing specific GitHub Teams access to specific machine types via profileList
(note this will eventually be upstreamed to the z2jh helm chart)
Summary
A BinderHub isn't the most useful platform for a research community - it generally lacks persistence (although you can rectify this by deploying the persistent_binderhub helm chart) and configuring safe git push/pull to any kind of repository is clunky.
A lot of work has been going on in the z2jh-k8s helm chart by 2i2c and other parties to make this a useful platform for research purposes.
Must-Have Features
Azure AD authentication, so everyone can log in with their turing.ac.uk accountDocs: https://zero-to-jupyterhub.readthedocs.io/en/latest/administrator/authentication.html#azure-active-directoryTuring IT will need to create a relevant app and provide the client ID and secret for that appNice-to-Have Features
Future Features
These features are still under active development and are not yet recommended for production deployment. But when they are, they'll be super awesome!
TODOs
Tearing down the BinderHub
uksouth
location while we have the opportunity. Up to you!Clearing out the repo
Files we won't need (or will be creating new ones for JupyterHub):
deploy/
folderhub23-chart/
folder (we should create a new local helm chart that has ingress-nginx, grafana and prometheus dependencies for monitoring).az-pipelines/cd.yaml
will need rewriting and temporarily disabling until we have the new deployment set up.github/workflows/bump-helm-version.yaml
docs/
folder as we go tooSetting up the new JupyterHub
basehub
for this: https://github.com/2i2c-org/infrastructure/tree/master/helm-charts/basehub.az-pipelines/cd.yaml
to get it running again, or....github/workflows/bump-helm-version.yaml
for new local helm chartNext Steps