This service provides a JupyterHub statefulset enabling users to launch Jupyter notebook pods.
Use latest cloud-automation, update revproxy if it's outdated, then:
gen3 kube-setup-jupyterhub
Update ELB for revproxy to remove http listener, update https listen's protocol to SSL, keep rest of the config same. This is temporary solution, should be solved by #178
Update portal for this commons to include workspace nav.
AuthZ is provided by the Arborist service utilizing the workspace-proxy endpoint in the reverse proxy service. That endpoint checks if the user is listed with workspace policy in user.yaml.
JupyterHub is set up to use the REMOTE_USER http header as the username for the user. JupyterHub trusts anything sent in REMOTE_USER so the revproxy must take care to only set it for authenticated users when proxying to the JupyterHub service.
The user pods are launched into the jupyter-pods namespace.