Add missing config for auth on a BinderHub

Copied from https://binderhub.readthedocs.io/en/latest/authentication.html#enabling-authentication
2i2c-org · Aug 1, 2022 · 8110897 · 8110897
1 parent 6926c74
commit 8110897
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 9 deletions.
diff --git a/config/clusters/2i2c/binder-staging.values.yaml b/config/clusters/2i2c/binder-staging.values.yaml
@@ -1,14 +1,22 @@
 binderhub:
   config:
     BinderHub:
+      auth_enabled: true
       template_path: /etc/binderhub/custom/templates
       extra_static_path: /etc/binderhub/custom/static
       extra_static_url_prefix: /extra_static/
       about_message: |
         <p>binder.pangeo.io is public infrastructure operated by the <a href="https://2i2c.org">2i2c team</a>.<br /><br />
   jupyterhub:
     hub:
+      redirectToServer: false
       config:
+        BinderSpawner:
+          auth_enabled: false
+        services:
+          binder:
+            oauth_no_confirm: true
+            oauth_redirect_uri: "https://binder-staging.2i2c.cloud/hub/oauth_callback"
         JupyterHub:
           authenticator_class: cilogon
         CILogonOAuthenticator:
@@ -18,7 +26,9 @@ binderhub:
             - http://google.com/accounts/o8/id:
                 username_derivation:
                   username_claim: "email"
-          username_pattern: '^(.+@2i2c\.org|deployment-service-check)$'
+          username_pattern: "^(.+@2i2c\.org|deployment-service-check)$"
+    singleuser:
+      cmd: jupyterhub-singleuser
   initContainers:
     - name: git-clone-templates
       image: alpine/git

diff --git a/config/clusters/2i2c/enc-binder-staging.secret.values.yaml b/config/clusters/2i2c/enc-binder-staging.secret.values.yaml
@@ -3,22 +3,25 @@ binderhub:
         hub:
             config:
                 CILogonOAuthenticator:
-                    client_id: ENC[AES256_GCM,data:RuqtZnjQa3x18fOFj8aOzcV2G5nNXOv0+HNDPQv6v5fl8kCtmaYvVKioSA/+jrVGHYA=,iv:GQwIR02EvvZ9afRePmfMveP4JrTTFb4gGxcbC2Y69kQ=,tag:rFal+Q2tiG+J0wWq4/LE1g==,type:str]
-                    client_secret: ENC[AES256_GCM,data:komugh5Iy2b9+0fzRdB8IfKVDj9lYBsWVN4Eq80OmzFW3ykQJVf1b1Hq76px/UvsQ8ZyomJo/Gs9ES0xoM8OmHYi3S+bTRuAMLJ6je6IAMB93FEw+8M=,iv:k+mptWH6NP4p92UxfsF5CFxbRyY8uBCdE/2v3A6JTKw=,tag:aBa5+SlpI+2HiDLLDJo0nQ==,type:str]
+                    client_id: ENC[AES256_GCM,data:0geI4CrkoLofGQiINJdHaf/t5h6CLh+vBX319Oq7g1s/KWUW/1EsXx/VKNx1U3tt/F4=,iv:m07AeKeBbhrnc8G+xQZ1Y3g75kAzdIfGZg7iBfv9UCI=,tag:orVcBLft0DkuZOy/H8jsAg==,type:str]
+                    client_secret: ENC[AES256_GCM,data:Yh6xjgQ9SqeEGeGz9gmEl29a93/XvvbQNoSVyHvZIgXB5QOXUTuwdPWXQCkBO9rt5UD0TjWad+PYRtB3ek2vyzr5sgoBIA6934P2quCvpJxya7MpsLk=,iv:ppL9hmPba7TjXTt0ND0J44oVFkz89Nl1jhCWbvECz0w=,tag:kBtB5nOzw4gMFSeoqWEuDg==,type:str]
+            services:
+                binder:
+                    oauth_client_id: ENC[AES256_GCM,data:Tdc9bQmU0F/0jMf/S14XqXJqeybBqtycc0cbhdUYpTpaWaOJM6x8SOfOw7B8HWE3rDM=,iv:b/lA734rHp6n56bTRrqs6CPzYtyqTesDnH+juCSRlx0=,tag:1WGNxA4/ZdDZdoIQ3wlOHA==,type:str]
     registry:
-        username: ENC[AES256_GCM,data:k4U0HNK3ViUF,iv:f87l847a0ZOGuYdOlqfoojHVdveurl7Hxwp7KNBZk7E=,tag:46eWy5HosU7yYTbilQ9MJA==,type:str]
-        password: ENC[AES256_GCM,data:HnOAdXI1Q7DtI+oUA+crjGd+glQOx8Td48G0Y5mMU5GZdbKPgdAV92BEY/MrKWb5ULdsnAKR8GYqmNr9Gr4K3f7debwpLCO6reKsGI37CUh0+RFrmGDvVkjaOE9fNMlqtEG3H+dePeFqCQXaBw7XPKEZcd+pcKID18mS5ZZD/R/x915uiIT7YupBAe3HUbxYbNGVo6o9MPbUoVxQQUseyWzU23i05BO8Abn0HGfeyuEo6XmH4TLkCbdJhqe0tWt6+rAfT42DFzIXeu2UmEZi2Uz94naJBv2QoTrgP0l9UW487Q8wyF8bFzhsxtcvxr0Iy8UifFJdcfrpMetN7dNj8x3k7lhZ7+dJz+KGmXI34+EUMRbJSE1qDqvOLOZt+EzE8dwmVx9hqFsYBpbjNfBaIRUD2ygUIoCmotkYEPLUM7WauFRrUC/MWNOMZBpJfEPbz722E8h164eiiI62JB0y3IheNbS8Sl9Se8uZrJW8vBvz56VlvV5dgyT+VXI7wVszeCMo3WG+oqZDX4l/4PY7Y3zIHuYRIEDl38FoAbflymF9mA/kfLE6Jjd00a2RVrILsxy+u/vML119axvFvgnCwdAXxDhd+HWO7hqTr7DEqrZY0ohhio6SRr+w75rNS7rMaBcoayNe1yUyBMxOOXkDoWRofMZIy8FLEfPE1eqmNHUeTmeAbfuc+S/JzvmBqEZhleJ+teF6a9ZeC4SaeqaVwfLarZSEHIOi4KknQV376ip3THOvYqNvDkUH9IH3yTLmUXU8dVGUT0lkHNxnIM0zJKROKMYaykXEwPewEvB0WNsmimGHBi7NPyQ2Ddc0MSCZvhXPr+saY2p4WPZEsIF6eKIGJNVH0EJF00Z9FCkY1hruBPClPcuO/uNu18O81H0NZmrXV31wfJE18uSINHkdOGk2qPox3/1YgMl7Gps6e8FelgzOLqz9MRIJJNgtED4hQY8MsAjkSjbtkwjZhPnl/m42DtdZNPgehmwFJ+1kmXAiOZhzL13skTezUZxYLRJbVbj+K6e3pj8uK/qn6wLjiEnEnYIKxJ3Yi2G6Ro+DaRW1B9vD/6mHar25hNDk+fQFT5/USr6FrRvlzXQCZg5FGk91LBjJUEUpVm/HYN/mh2do+X8KnJNp4+WqDzGi1ske0aJqpM+JN8mFHMnZoXUGp42pzL2NXr9yFtkvnLH7yleQXpfaILowVDPETbasFy5/DEd81P6cKLM5XxJ2meqv7rxVV33VtQ/O7IePzywhRQM1uvGzcmzlBYNyAkJUVGaOarLSP/T9SGi/twVOAi/Bi+lISdm4Ow07DD9BnSff6GnRcJAzbF6PbMWdC4qHPuZTyG0iHgP53NEsWTtWcWEEXs/naMzFrwTmS8AA+e8/T0nz/pz5/tGjqu1LGkxQO5Qot/A9RxZ2sGZZUI8SucP9T16MVNUXl14kF0WinFc241Gey0Qz9d4TK8QefTZ1AneYnH9IiYpJs/oDJ0k/c3vqz//4UDRb9cH4GGJChTGb9ryKnCW37UuOXh16722d5O/ACGhsUPPNHUB3doReCCfbM1ww/QYzXlzqJC/p/lbQ9hyCN/X6NhOdVUVJCrwkKtfZiCteWSd7ATaH10JcVJ1VjOmdKt2XAuEu+1wTfdr13GPCDuLoiVk8HTCaho15kHeE6InKHNLVGryrtm/bIWxnBNTl3uIMjAPnlnB33o9eu6Sq7V6jx9bsC3OXAqwuGiQzfO3TfkIJ5I9C0CURSAMY9Z4M0+yGD5qF/mIm/wphgJPYlcOec5ThJEaJ+ANlrQcKHmSlVWPTiUt5RCY18UXpCXt46okuE4mbc/8eAg3bCZ9JEmXFaH6uG2kLmjFaXA7I3X/mxBBr1sfXgw8EBPtNOkvMwy3L6j4Za8ZsaSjFBNDTEzNm2iSm06lylMmkQlIak+8pT+vor6Ai60Oqf/pF0FFM/DAnkfnbv+R8mZqsanMu6gCTWsfGGK5JqrvS+FSJNAfIwdVuJgsXkkVy6VzStcEcfKTRPfHyBcS7at78vqfchDLEwj2zJJweQrF1aHG2MjjhGQJY45hDlpfAZEyeZqBeLGAvAzAX7Wa31ax4E/Be6PA2M7bEJy36z/ZWm+uKmfHuESabUfqAt9PDJHuhxkEasjw2cvHCrCOE/je+geUVKcAweosrCAbd/rc78czLQqUWbUtunWkg3k47TPEPsbDYmjbfzc10D+SNlJSohIoGwKGU54vpD4zAV9g5nV/K+LY0fiUF89rAfxT443JxKth/tSFLyFiWv+BPhPHL+HFJ4R7BA6GLMK29WgODl4PNaz4P71iGovvu5Hg8fWf3UPCRGKz8XpS1oiF5MHJgQ+h8cCkiYQ6L9VnbprgiTVjCKvpxsEFq5JKU5llTFeGnmLMJOJl/YNlsZLrkyTZioiHJOCLkWT4ZM6PLaCG5myk1LO67Q1AVuw4/RuGkDeOSpEEsuGgfy8c/J8GBO+8Xb6qGEj/MHtAa4LFAvIL5WJWwAJrF26ID5BkB3u2E8zmb1WKVqplJVvMWQus3ctKBWmxvl0xUZosGwvgwqZVnQ4BEUNbZTqUpQGbdqBtx8hPo/ZTYbrbfl760fDX1OC3OmsZZRyF4oWZ/Pb+MQ2BaL7mCHrN0nGu1Ek6Egn/NVJ0FBJuAswJiluHA2fRAJRzfXxCcetMtfglCSt1WgsYEAYQIF403DyO088NQ7mcYlyYGntn88fPq+T/q/tv6A6nYhJ46Uwwe5lAu44ftO3HaxrUizamjB0xuz7PNt8tPEvd3IU6cVUqHuuBAp6OWctX1JtIZU9pp93GXqJzRIa/6NxNyQJujpBup8C85o+UxSFlUVIVIIB+rJuBOqKasINeqF+ld8zWglzoqNL3lvfYZLxdQJNrjCs5L9ka+u6xo0PDO+LVlWmVX0dE18jlXZRPwaqvD8BqJQPEMG0xDzwCSf0ip8Qud/Zq/wiBTpe4ZXbdveGfRMSO+85qhwGA/MmGbmJZpSaphBBtij9jvAr8P513lDXzBaW5/xVCmxx2PFRx8j2bmKRxwJQf7ZkoFKCLyK/o0EpgSC1Mn+XlzUW/HF7oVc08ZOYa8f1x7WQI6x4oe/PKR5zG2xwoLn2ymDKwwDfeYsaAtdV3dgutyq+kw3kfKZ80tYv7p7TBWYaafbgGINA==,iv:9GG/CZsI57aFJQCssW7iQg/4lHpTc4U5iHHNeZKh3c0=,tag:6IKw5v+ZffBvGIuD04pYHw==,type:str]
+        username: ENC[AES256_GCM,data:9LeQi3hx9Dkd,iv:A6BPZhzafi9ae2eCMAz22CIspdTiQ1YgPVJ21dK/20s=,tag:w0wnwXKca54wJFT2KObwdA==,type:str]
+        password: ENC[AES256_GCM,data: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,iv:4C0Qrd30FUuEiGuJzkr62KE6ZnF75Dfcp44jGaCYvAU=,tag:8efkAp6LbHqDavzGbQh3NQ==,type:str]
 sops:
     kms: []
     gcp_kms:
         - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
-          created_at: "2022-08-01T13:18:37Z"
-          enc: CiQA4OM7eCPRk629NK6+DDn7Gy/Peufg+kOWtHsew00rqKvuez8SSQBq6cPrK17q00TFVRWLU3xtIoK2nzpE36J19S+2a1vE+kX6c4Dr9njvMwN5FD/4i2+UeI9H031N5X4XfWbLAKcrpyWwhhFKaYc=
+          created_at: "2022-08-01T14:05:40Z"
+          enc: CiQA4OM7eBvlCz4HJOd6KfhEFgdrF/ttkqfBrPr+vllYTmeA/BYSSQBq6cPrnSK06vOUOKi/N/LsHQFknwhQiP4cH3LVJDy0p2GWL1z2/XtnIVljuyZCkSUomhKzNIp+ClTzsQ9EZ1+5nNslH4+yFN8=
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-08-01T13:18:37Z"
-    mac: ENC[AES256_GCM,data:OumJGzPVOAKcMiD/4/8Q6LFwW5yxG0E8I7DY+LvfEEDsLbrzUHuubL358ct3DL6NYTxeYBZiab5iqAmNAR81LpbTvnmEqUppQgvc1/kWnkBwLl/hJFPI9m1ltGvXwx5dtPMqUNP72N678jZvqLWNFoSjM43A5DPXURDSIf2svX8=,iv:lpUAiAEHZ/k0ZKYEacSR8cGNbuhaBJM2QUOJ+6+1dLk=,tag:NOqpDnmvt4Ah2aj6OERbrQ==,type:str]
+    lastmodified: "2022-08-01T14:05:40Z"
+    mac: ENC[AES256_GCM,data:I1y4m6A09pKG5d2evlf2iTJ16ZkoKqWdjN9pVq2x3YscZ0V/bglf+qFEjtYxDYOvDcuJOMZ7PxydqbiHi2rwCSixvvZScUhsuPO6C4fbeS0LqIhbV07NAgSvTPPkNYrjYaRLtscrwGVoDPGcFdenfYKzJeVraaRxUudXAtwY1tY=,iv:IX+Qklvc7q/UkAVBRIqR4U3HaK9ry+DLd2B+yNPQ9uk=,tag:Iwy1HYw2s1Xtu9o1+WXQug==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3