Add the science core hub instead

2i2c-org · Feb 23, 2024 · fdba744 · fdba744
1 parent 40e2024
commit fdba744
Show file tree

Hide file tree

Showing 2 changed files with 198 additions and 0 deletions.
diff --git a/config/clusters/opensci/enc-sciencecore.secret.values.yaml b/config/clusters/opensci/enc-sciencecore.secret.values.yaml
@@ -0,0 +1,23 @@
+binderhub-service:
+    buildPodsRegistryCredentials:
+        password: ENC[AES256_GCM,data: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,iv:iWOUHcl6uE/5WtybLkDYM7duIpnFKQaSn2/bFvg3GKw=,tag:OL02P4I73VNxhNA1cD7KhA==,type:str]
+jupyterhub:
+    hub:
+        config:
+            GitHubOAuthenticator:
+                client_id: ENC[AES256_GCM,data:dhNb/AwKFr/2s1+RUIsndJ5EKC4=,iv:6Rzm5NBgBZcHrOyWFYi1qib1iraWoRpeoPCo42wUD10=,tag:JIKjxJQ8I8fM+Z+MFRfsEA==,type:str]
+                client_secret: ENC[AES256_GCM,data:LQedpZelm6SO8KAFBpV5fHFYmTOXyzz75HoKC+N9D3/lH7TXZFxl9w==,iv:isCaLvhi3aU/mOLEtsRegzSVxcMh4HRV2kCB3Klrsq0=,tag:c3zZ2190eyzsuK1Mv2t6CQ==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+          created_at: "2023-09-18T19:00:41Z"
+          enc: CiUA4OM7eFioG9yDgVwKtc0cYrU65GNcqMSDuUgnuXuq3KW9dRI6EkkAq2nhVV2TFrZOq5jktjMd4TQF1lwH/08tAyGd3vMfBmdd3Xdy3bAUUHhrPXcK6QabMRYdXPzQzgB+oBGaqOsJO7D7jT9NpeCn
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-02-23T11:56:17Z"
+    mac: ENC[AES256_GCM,data:1NuBjid3SNq/Fv5Pxdfby5Wl7mb7mQG9MYa6pjPaEU2YFf9wRK8WNADCEa4H98xI4dPxcFyftJ0Ww7xUX2o6sa6N6ExM0RMbpSFZ7gttUhDTsLa/D1oYvyr5sFZXOsfeXKyqmSeQZ8+zmZ1GROKjSuNpumS+TGe5ir2EIE3Zuf0=,iv:bJqET8IxysTgdjvmlL2u4xU/fcnDV+j4AlShoMeQ28k=,tag:N+e3YkfTFqEaqqYPwpmuLQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.7.3
diff --git a/config/clusters/opensci/sciencecore.values.yaml b/config/clusters/opensci/sciencecore.values.yaml
@@ -0,0 +1,175 @@
+jupyterhub:
+  ingress:
+    hosts:
+      - sciencecore.opensci.2i2c.cloud
+    tls:
+      - secretName: https-auto-tls
+        hosts:
+          - sciencecore.opensci.2i2c.cloud
+  custom:
+    2i2c:
+      add_staff_user_ids_to_admin_users: true
+      add_staff_user_ids_of_type: "github"
+    jupyterhubConfigurator:
+      enabled: false
+    homepage:
+      templateVars:
+        org:
+          name: Sciencecore
+          url: https://2i2c.org
+          logo_url: https://2i2c.org/media/logo.png
+        designed_by:
+          name: 2i2c
+          url: https://2i2c.org
+        operated_by:
+          name: 2i2c
+          url: https://2i2c.org
+        funded_by:
+          name: ""
+          url: ""
+  singleuser:
+    profileList:
+      - display_name: "Only Profile Available, this info is not shown in the UI"
+        slug: only-choice
+        profile_options:
+          image:
+            display_name: Image
+            unlisted_choice: &profile_list_unlisted_choice
+              enabled: True
+              display_name: "Custom image"
+              validation_regex: "^.+:.+$"
+              validation_message: "Must be a publicly available docker image, of form <image-name>:<tag>"
+              display_name_in_choices: "Specify an existing docker image"
+              description_in_choices: "Use a pre-existing docker image from a public docker registry (dockerhub, quay, etc)"
+              kubespawner_override:
+                image: "{value}"
+            choices:
+              pangeo:
+                display_name: Pangeo Notebook Image
+                description: "Python image with scientific, dask and geospatial tools"
+                kubespawner_override:
+                  image: pangeo/pangeo-notebook:2023.09.11
+              geospatial:
+                display_name: Rocker Geospatial
+                description: "R image with RStudio, the tidyverse & Geospatial tools"
+                default: true
+                slug: geospatial
+                kubespawner_override:
+                  image: rocker/binder:4.3
+                  # Launch into RStudio after the user logs in
+                  default_url: /rstudio
+                  # Ensures container working dir is homedir
+                  # https://github.com/2i2c-org/infrastructure/issues/2559
+                  working_dir: /home/rstudio
+              scipy:
+                display_name: Jupyter SciPy Notebook
+                slug: scipy
+                kubespawner_override:
+                  image: jupyter/scipy-notebook:2023-06-26
+          resources:
+            display_name: Resource Allocation
+            choices:
+              mem_3_7:
+                display_name: 3.7 GB RAM, upto 3.7 CPUs
+                kubespawner_override:
+                  mem_guarantee: 3982682624
+                  mem_limit: 3982682624
+                  cpu_guarantee: 0.46875
+                  cpu_limit: 3.75
+                  node_selector:
+                    node.kubernetes.io/instance-type: r5.xlarge
+                default: true
+              mem_7_4:
+                display_name: 7.4 GB RAM, upto 3.7 CPUs
+                kubespawner_override:
+                  mem_guarantee: 7965365248
+                  mem_limit: 7965365248
+                  cpu_guarantee: 0.9375
+                  cpu_limit: 3.75
+                  node_selector:
+                    node.kubernetes.io/instance-type: r5.xlarge
+              mem_14_8:
+                display_name: 14.8 GB RAM, upto 3.7 CPUs
+                kubespawner_override:
+                  mem_guarantee: 15930730496
+                  mem_limit: 15930730496
+                  cpu_guarantee: 1.875
+                  cpu_limit: 3.75
+                  node_selector:
+                    node.kubernetes.io/instance-type: r5.xlarge
+              mem_29_7:
+                display_name: 29.7 GB RAM, upto 3.7 CPUs
+                kubespawner_override:
+                  mem_guarantee: 31861460992
+                  mem_limit: 31861460992
+                  cpu_guarantee: 3.75
+                  cpu_limit: 3.75
+                  node_selector:
+                    node.kubernetes.io/instance-type: r5.xlarge
+
+  hub:
+    # Allows for multiple concurrent demos
+    allowNamedServers: true
+    services:
+      binder:
+        # FIXME: ref https://github.com/2i2c-org/binderhub-service/issues/57
+        # for something more readable and requiring less copy-pasting
+        url: http://sciencecore-binderhub-service:8090
+    image:
+      name: quay.io/2i2c/dynamic-image-building-experiment
+      tag: "0.0.1-0.dev.git.7567.ha4162031"
+    config:
+      JupyterHub:
+        authenticator_class: github
+      GitHubOAuthenticator:
+        oauth_callback_url: https://sciencecore.opensci.2i2c.cloud/hub/oauth_callback
+        allowed_organizations:
+          - 2i2c-demo-hub-access
+          - ScienceCore
+        scope:
+          - read:org
+
+    extraConfig:
+      enable-fancy-profiles: |
+        from jupyterhub_fancy_profiles import setup_ui
+        setup_ui(c)
+
+binderhub-service:
+  nodeSelector:
+    hub.jupyter.org/node-purpose: core
+  enabled: true
+  service:
+    port: 8090
+  # The DaemonSet at https://github.com/2i2c-org/binderhub-service/blob/main/binderhub-service/templates/docker-api/daemonset.yaml
+  # will start a docker-api pod on a user node.
+  # It starts the [dockerd](https://docs.docker.com/engine/reference/commandline/dockerd/) daemon,
+  # that will be accessible via a unix socket, mounted by the build.
+  # The docker-api pod must run on the same node as the builder pods.
+  dockerApi:
+    nodeSelector:
+      hub.jupyter.org/node-purpose: user
+    tolerations:
+      # Tolerate tainted jupyterhub user nodes
+      - key: hub.jupyter.org_dedicated
+        value: user
+        effect: NoSchedule
+      - key: hub.jupyter.org/dedicated
+        value: user
+        effect: NoSchedule
+  config:
+    BinderHub:
+      base_url: /services/binder
+      use_registry: true
+      # Re-uses the registry created for the `binderhub-staging` hub
+      # but pushes images under a different prefix
+      image_prefix: us-central1-docker.pkg.dev/two-eye-two-see/binder-staging-registry/opensci-
+    KubernetesBuildExecutor:
+      # Get ourselves a newer repo2docker!
+      build_image: quay.io/jupyterhub/repo2docker:2023.06.0-8.gd414e99
+      node_selector:
+        # Schedule builder pods to run on user nodes only
+        hub.jupyter.org/node-purpose: user
+  # The password to the registry is stored encrypted in the hub's encrypted config file
+  buildPodsRegistryCredentials:
+    server: "https://us-central1-docker.pkg.dev"
+    username: "_json_key"