Jupyterhub singleuser extra annotations templating

JupyterHub Zero to JupyterHub on Kubernetes
1

Hi guys, I’m using jupyterhub z2hj helm template in order to provision the hub on kubernetes and I’m having a bit of an issue.
In my deployment I use vault-injector annotations in order to inject secrets to the jupyterhub singleuser pod. In the helm chart the annotations look correct:

singleuser:
    extraAnnotations:
        vault.hashicorp.com/agent-inject-secret-git-ssh-key.pem: "<secret-name>"
        vault.hashicorp.com/agent-inject-template-git-ssh-key.pem: |
          {{- with secret "<secret-name>" -}}
            {{ .Data.data.git-ssh-key }}
          {{- end }}

But when the single user pod is starting the annotations for some reason are templated incorrectly, my best guess it is something to do with the kubespawner, it removes one set of curly brackets from each pair:

  vault.hashicorp.com/agent-inject-template-git-ssh-key.pem:
      {- with secret "<secret-name>" }
         { .Data.data.git-ssh-key }
      {- end }

I’ve tried various ways to template the annotations but the end result is always the same as above. Anyone got an idea how to pass the template as is with the double curly brackets?

2

KubeSpawner expands some template variables in annotations.
This is done using Python’s string.format, so { needs to be escaped as {{, and {{ as {{{{: