Enable pulling private GitHub repos for Neurohackademy

[sgibson91]

Following instructions in #2849 as an alternative for authenticated static sites

new hub issue: #2681

I reused the same GitHub App that I had previously set up for the static site and is already installed on the appropriate repo.

[github-actions]

Merging this PR will trigger the following deployment actions.

Support and Staging deployments

Cloud Provider	Cluster Name	Upgrade Support?	Reason for Support Redeploy	Upgrade Staging?	Reason for Staging Redeploy
gcp	2i2c	No		Yes	Following prod hubs require redeploy: neurohackademy

Production deployments

Cloud Provider	Cluster Name	Hub Name	Reason for Redeploy
gcp	2i2c	neurohackademy	Following helm chart values files were modified: enc-neurohackademy.secret.values.yaml, neurohackademy.values.yaml

[pnasrat]

LGTM

[sgibson91]

I am holding off on merging this as nbgitpuller is returning a 128 error status

[yuvipanda]

I figured out why this isn't working! Updated the docs PR, at ac2ad97.

Basically, because in the image, git is installed via conda, it doesn't read /etc/gitconfig. Looks like someone (:D) filed an issue about this in the conda feedstock that's unfortunately still not fixed (conda-forge/git-feedstock#113).

in this case, $CONDA_PREFIX is /srv/conda/envs/notebook, so the path should be /srv/conda/envs/notebook/etc/gitconfig. I can't make a suggestion here because of sops though.

[sgibson91]

Booooo! (Let me push the commit that generated this)

2023-07-21T16:57:09Z [Warning] Error: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error mounting "/var/lib/kubelet/pods/8b096c8a-84e4-4bee-b35c-18e9025c7c4e/volume-subpaths/files/notebook/2" to rootfs at "/srv/conda/envs/notebook/etc/gitconfig/github-app-private-key.pem": open o_path procfd: open /run/containerd/io.containerd.runtime.v2.task/k8s.io/notebook/rootfs/srv/conda/envs/notebook/etc/gitconfig/github-app-private-key.pem: not a directory: unknown

[sgibson91]

No wait, I think I've just done the wrong thing.. hang on

[sgibson91]

Cracked it!

[github-actions]

🎉🎉🎉🎉

Monitor the deployment of the hubs here 👉 https://github.com/2i2c-org/infrastructure/actions/runs/5624822878