ohw.values.yaml

basehub:
  userServiceAccount:
    annotations:
      iam.gke.io/gcp-service-account: pilot-hubs-ohw@two-eye-two-see.iam.gserviceaccount.com
  jupyterhub:
    prePuller:
      continuous:
        # Todo: turn this off after the event
        enabled: true
    singleuser:
      networkPolicy:
        # In clusters with NetworkPolicy enabled, do not
        # allow outbound internet access that's not DNS, HTTP or HTTPS
        # For OHW, we allow 8080 (for DAP) and 22 (for ssh)
        # https://github.com/2i2c-org/infrastructure/issues/549#issuecomment-892276020
        enabled: true
        egress:
          - ports:
              - port: 53
                protocol: UDP
          - ports:
              - port: 80
                protocol: TCP
          - ports:
              - port: 443
                protocol: TCP
          - ports:
              - port: 8080
                protocol: TCP
          - ports:
              - port: 22
                protocol: TCP
      profileList:
        - display_name: "Python image"
          description: "~2 CPU, ~8G RAM"
          default: true
          kubespawner_override:
            image: "ghcr.io/oceanhackweek/python:99b6ab5"
            default_url: "/lab"
            mem_limit: 8G
            mem_guarantee: 4G
            cpu_limit: 2
            cpu_guarantee: 0.5
        - display_name: "R image"
          description: "~2 CPU, ~8G RAM"
          kubespawner_override:
            image: "ghcr.io/oceanhackweek/r:39ba006"
            default_url: "/rstudio"
            mem_limit: 8G
            mem_guarantee: 4G
            cpu_limit: 2
            cpu_guarantee: 0.5
    custom:
      cloudResources:
        provider: gcp
        gcp:
          projectId: two-eye-two-see
        scratchBucket:
          enabled: true
      2i2c:
        add_staff_user_ids_to_admin_users: true
        add_staff_user_ids_of_type: "github"
      homepage:
        templateVars:
          org:
            name: OceanHackWeek
            logo_url: https://avatars.githubusercontent.com/u/33128979
            url: https://oceanhackweek.org/
          designed_by:
            name: 2i2c
            url: https://2i2c.org
          operated_by:
            name: 2i2c
            url: https://2i2c.org
          funded_by:
            name: 2i2c
            url: https://2i2c.org
    hub:
      config:
        JupyterHub:
          authenticator_class: github
        GitHubOAuthenticator:
          oauth_callback_url: https://oceanhackweek.2i2c.cloud/hub/oauth_callback
          allowed_organizations:
            - 2i2c-org:hub-access-for-2i2c-staff
            - Intercoonecta:ohwes23-organizers
            - Intercoonecta:ohwes23-mentor-helper-presenter
            - Intercoonecta:ohwes23-participants
            - oceanhackweek:participants_2022
            - oceanhackweek:ohw22-organizers
            - oceanhackweek:ohw22-mentor-helper-presenter
            - oceanhackweek:participants_2022_northeast
            - oceanhackweek:participants_2022_northwest
            - oceanhackweek:participants_2022_southwest
            - oceanhackweek:participants_2022_australia
            - oceanhackweek:participants_2022_brazil
            - oceanhackweek:participants_2022_espanol
            - oceanhackweek:participants_2022_virtual
            - oceanhackweek:participants_2022_northwest_undergrad
            - oceanhackweek:ohw22-organizers-northeast
            - oceanhackweek:ohw22-organizers-northwest
            - oceanhackweek:ohw22-organizers-southwest
            - oceanhackweek:ohw22-organizers-australia
            - oceanhackweek:ohw22-organizers-brazil
            - oceanhackweek:ohw22-organizers-espanol
            - oceanhackweek:ohw22-organizers-virtual
          scope:
            - read:org
        Authenticator:
          admin_users:
            - ocefpaf
            - abkfenris