Azure groups for custom spawn

JupyterHub Zero to JupyterHub on Kubernetes
,
1

Hi there,

I’m trying to setup a dynamic spawn for users if they belong to a specific Azure application group. In the yaml below you can see there are 2 profile list options, I want one to for users in group datascience101 and the other for users in group datascience202.

singleuser:
  profileList:
    - display_name: "Small environment" # should only be shown if user belongs to group datascience101
      description: "4Gb RAM, 2 Cores"
      default: true
      kubespawner_override:
        image: jupyter/datascience-notebook:2343e33dec46
        memory:
          guarantee: 2G
          limit: 4G
        cpu:
          limit: 2
          guarantee: 1
        storage:
          extraVolumes:
            - name: datascience101-test-shared
              persistentVolumeClaim:
                claimName: datascience101-test-shared
          extraVolumeMounts:
            - name: datascience101-test-shared
              mountPath: /home/datascience101/
    - display_name: "Medium environment" # should only be shown if user belongs to group datascience202
      description: "8GB RAM, 4 Cores"
      default: true
      kubespawner_override:
        image: jupyter/datascience-notebook:2343e33dec46
        memory:
          guarantee: 2G
          limit: 8G
        cpu:
          limit: 4
          guarantee: 1
        storage:
          extraVolumes:
            - name: datascience202-test-shared
              persistentVolumeClaim:
                claimName: datascience202-test-shared
          extraVolumeMounts:
            - name: datascience202-test-shared
              mountPath: /home/datascience202/
hub:
  revisionHistoryLimit:
  config:
    AzureAdOAuthenticator:
      client_id: xxxxx
      client_secret: xxxxx
      oauth_callback_url: https://xxxxxxxxx.io/hub/oauth_callback
      tenant_id: xxxxxxx
      enable_auth_state: true
      username_claim: unique_name
    JupyterHub:
      authenticator_class: azuread

Thanks in advance for any assistance

2

I see there is an open merge request for this:

[AzureAD] Add config to map Azure’s concept of AppRoles to conclude if a user is allowed and/or if the user is an admin by weisdd · Pull Request #446 · jupyterhub/oauthenticator (github.com)

3

@consideRatio Any idea when the azure group fix will be implemented?