Merge pull request 2i2c-org#4158 from consideRatio/pr/unam-scratch

catalystproject-latam, unam: setup scratch bucket for james to use

config/clusters/catalystproject-latam/unam.values.yaml

@@ -1,3 +1,10 @@
+userServiceAccount:
+  annotations:
+    # singleuser.networkPolicy.egressAllowRules.cloudMetadataServer=true and
+    # singleuser.cloudMetadata.blockWithIptables=false are set for so that users
+    # can work against the scratch bucket using this GCP service account
+    iam.gke.io/gcp-service-account: [email protected]
+
 jupyterhub:
   ingress:
     hosts: [unam.latam.catalystproject.2i2c.cloud]
@@ -24,6 +31,13 @@ jupyterhub:
           - nselem
           - miguel-mx
   singleuser:
+    networkPolicy:
+      egressAllowRules:
+        cloudMetadataServer: true
+    cloudMetadata:
+      blockWithIptables: false
+    extraEnv:
+      SCRATCH_BUCKET: gs://latam-scratch-unam/$(JUPYTERHUB_USER)
     profileList:
       - display_name: Jupyter SciPy Notebook
         description: Python environment

terraform/gcp/projects/catalystproject-latam.tfvars

@@ -33,4 +33,17 @@ notebook_nodes = {
   },
 }
 
-user_buckets = {}
+user_buckets = {
+  // unam's scratch bucket was setup for James Munroe specifically to copy misc
+  // data over for the community (https://2i2c.freshdesk.com/a/tickets/1588)
+  "scratch-unam" : {
+    "delete_after" : 7,
+  },
+}
+
+hub_cloud_permissions = {
+  "unam" : {
+    bucket_admin_access : ["scratch-unam"],
+    hub_namespace : "unam",
+  },
+}