-
Couldn't load subscription status.
- Fork 78
MAAP staging: Define group shared folders volumes and volume mounts as dict #6102
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
|
Merging this PR will trigger the following deployment actions. Support deploymentsNo support upgrades will be triggered Staging deployments
Production deployments
|
e218550 to
25eae5a
Compare
| # so that the user can't see the contents of other groups' folders | ||
| # that the user is not a member of | ||
| name: shared-group-placeholder | ||
| mountPath: /home/jovyan/shared-group |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not sure if this the best approach to fix visibility of stale group shared folders. Please let me know if there's a better way to do this.
The concern is: If a user previously had a shared group folder mounted (e.g., to /home/jovyan/shared-group/<group-folder>), their underlying home PVC (<home-pvc>/<user>/) might now contain a persistent directory at shared-group/<group-folder> that was created by Kubernetes as a mount point.
Later, if the user is no longer in that group, the specific mount for the actual shared data is removed. However, the shared-group/<group-folder> directory within their personal PVC home will still be visible (as part of the main /home/jovyan mount). This can lead to confusion, showing outdated or empty folders for groups they no longer have access to.
74a6779 to
e008806
Compare
|
Edit: I misread that -- |
|
@sunu hmm, can this be intentionally set to an empty object or something else to test? |
|
@yuvipanda yea, my bad, I misread the schema. |
The upstream JupyterHub Helm chart has added support for dict values for volumes and volume mounts in version 4.3.0. This allows us to easily override the config values we need to without having to specify the entire list again.
|
I've updated the PR to take advantage of support for dict values in z2jh 4.3.0. Converting to draft so that we don't merge it before #6915 is fixed and z2jh 4.3.0 is rolled out across all hubs. |
Trying out suggestions from #6010 (comment)Haven't tried this out live yet, because I'm having some trouble logging in to the MAAP staging hub.But if I understand correctly, we will run into issues without upstream changes because of howextraFilesis handled. This expects theKubeSpawner.volumesandKubeSpawner.volume_mountsto be lists. SimilarlyextraVolumes/extraVolumeMountshandling also expectsKubeSpawner.volumesandKubeSpawner.volume_mountsto be lists.I have tried this out on MAAP staging and it seems to work as expected.
related to NASA-IMPACT/veda-jupyterhub#66
Update
z2jh version 4.3.0 now supports dict based values for all supported fields and this PR now takes advantage of that. I've tested this on MAAP staging hub manually. But to merge this in, we need to wait for #6915 to roll out z2jh 4.3.0 for all hubs.