Skip to content

Commit

Permalink
cosmicds: Temporarily re-enable Google & Microsoft access
Browse files Browse the repository at this point in the history
- While we work with partnerships to figure out a longer
  term solution.
- Provide stricter CPU limits so that rogue / cryptobro users
  can't do *as much damage* as otherwise.
- Can be reverted first week of November

Ref https://2i2c.freshdesk.com/a/tickets/1042
  • Loading branch information
yuvipanda committed Oct 16, 2023
1 parent 0131baa commit 3388174
Showing 1 changed file with 15 additions and 0 deletions.
15 changes: 15 additions & 0 deletions config/clusters/2i2c-aws-us/cosmicds.values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,11 @@ jupyterhub:
# Must set jupyterhub.custom.singleuserAdmin.extraVollumeMounts to [] as well
type: none
extraVolumeMounts: []
cpu:
# Authentication is wide open here, so let's limit how much CPU a single user can use
# more actively. This is to limit the amount of damage a rogue user can do to not more
# than 1 CPU per user account.
limit: 1
hub:
services:
# OAuth2 credentials for the CosmicDS portal, which uses
Expand Down Expand Up @@ -74,6 +79,16 @@ jupyterhub:
username_derivation:
username_claim: "preferred_username"
allow_all: true
# Temporarily enable Google & Microsoft accounts again
# Disable again first week of november
http://google.com/accounts/o8/id:
username_derivation:
username_claim: "email"
allow_all: true
http://login.microsoftonline.com/common/oauth2/v2.0/authorize:
username_derivation:
username_claim: "email"
allow_all: true
Authenticator:
admin_users:
- nmearl
Expand Down

0 comments on commit 3388174

Please sign in to comment.