Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update allowed admin groups #2429

Merged
merged 3 commits into from
May 6, 2024
Merged

Conversation

aktech
Copy link
Member

@aktech aktech commented Apr 29, 2024

Reference Issues or PRs

Fixes #2436

Due to a recent change, adding jupyterhub_admin role to a user doesn't makes it admin for JupyterHub, this PR fixes that.

What does this implement/fix?

Put a x in the boxes that apply

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds a feature)
  • Breaking change (fix or feature that would cause existing features not to work as expected)
  • Documentation Update
  • Code style update (formatting, renaming)
  • Refactoring (no functional changes, no API changes)
  • Build related changes
  • Other (please describe):

Testing

  • Did you test the pull request locally?
  • Did you add new tests?

Any other comments?

@aktech aktech force-pushed the update-allowed-admin-groups branch from 0b53700 to 35146ff Compare April 29, 2024 15:42
@aktech aktech force-pushed the update-allowed-admin-groups branch from 35146ff to 81d51d6 Compare April 29, 2024 16:29
@aktech aktech requested a review from krassowski May 1, 2024 15:08
@aktech aktech marked this pull request as ready for review May 1, 2024 15:08
@Adam-D-Lewis Adam-D-Lewis added this to the 2024.5.1 milestone May 2, 2024
@viniciusdc
Copy link
Contributor

This needs to be tested; based on the changes, I don't foresee any problems. but its good to double check

@aktech
Copy link
Member Author

aktech commented May 3, 2024

This needs to be tested; based on the changes, I don't foresee any problems. but its good to double check

We tested this on Quansight deployment and a client deployment. This is a fix for the consequence of: 6a83ada

This could be soon removed, when we have roles syncing and proper permissions model, which is WIP. This PR is just be bring back the old behaviour meanwhile.

Comment on lines +162 to +163
allowed_groups = ["/analyst", "/developer", "/admin", "jupyterhub_admin", "jupyterhub_developer"]
admin_groups = ["/admin", "jupyterhub_admin"]
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @aktech wouldn't this create conda-store namespaces and EFS share files for those then when a users receives such group?

@viniciusdc
Copy link
Contributor

@krassowski, if you have some time today, could you just double-check that those permissions are enough?

@viniciusdc
Copy link
Contributor

As this is a release blocker I will go ahead an merge this PR, and any extra thoughts can be done in a separate PR after the first RC

Copy link
Contributor

@viniciusdc viniciusdc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@viniciusdc viniciusdc merged commit bb321cf into develop May 6, 2024
26 checks passed
@viniciusdc viniciusdc deleted the update-allowed-admin-groups branch May 6, 2024 20:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Development

Successfully merging this pull request may close these issues.

[BUG] - jupyterhub_admin client role not being assigned
3 participants