From 00e0e99cdd165eb69cb8bf8f3c89b022868c0547 Mon Sep 17 00:00:00 2001 From: Tarashish Mishra Date: Mon, 29 Sep 2025 14:06:45 +0530 Subject: [PATCH 1/2] NASA VEDA: Enable auth for fancy-profile binderhub Make the necessary config changes to test https://github.com/2i2c-org/jupyterhub-fancy-profiles/pull/122 on VEDA staging hub. --- config/clusters/nasa-veda/staging.values.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/config/clusters/nasa-veda/staging.values.yaml b/config/clusters/nasa-veda/staging.values.yaml index 0a3823a54e..d9e6dc8fd5 100644 --- a/config/clusters/nasa-veda/staging.values.yaml +++ b/config/clusters/nasa-veda/staging.values.yaml @@ -36,6 +36,17 @@ basehub: config: GitHubOAuthenticator: oauth_callback_url: https://staging.hub.openveda.cloud/hub/oauth_callback + loadRoles: + # grant all users access to services (TODO: we should tighten the scope of this) + user: + scopes: + - self + - access:services + services: + binder: + "oauth_client_id": "service-binderhub" + "oauth_no_confirm": true + "oauth_redirect_uri": "https://staging.hub.openveda.cloud/services/binder/oauth_callback" ingress: hosts: [staging.hub.openveda.cloud] tls: @@ -69,6 +80,7 @@ basehub: 2i2c/hub-name: staging BinderHub: image_prefix: quay.io/imagebuilding-non-gcp-hubs/veda-staging- + auth_enabled: true jupyterhub-home-nfs: eks: From 528d1466792d4eaaaff28f7472b468dbc7f068d3 Mon Sep 17 00:00:00 2001 From: "pre-commit-ci[bot]" <66853113+pre-commit-ci[bot]@users.noreply.github.com> Date: Mon, 29 Sep 2025 08:41:42 +0000 Subject: [PATCH 2/2] [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci --- config/clusters/nasa-veda/staging.values.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/config/clusters/nasa-veda/staging.values.yaml b/config/clusters/nasa-veda/staging.values.yaml index d9e6dc8fd5..da36340eb5 100644 --- a/config/clusters/nasa-veda/staging.values.yaml +++ b/config/clusters/nasa-veda/staging.values.yaml @@ -44,9 +44,9 @@ basehub: - access:services services: binder: - "oauth_client_id": "service-binderhub" - "oauth_no_confirm": true - "oauth_redirect_uri": "https://staging.hub.openveda.cloud/services/binder/oauth_callback" + oauth_client_id: service-binderhub + oauth_no_confirm: true + oauth_redirect_uri: https://staging.hub.openveda.cloud/services/binder/oauth_callback ingress: hosts: [staging.hub.openveda.cloud] tls: