# This file can update the JupyterHub Helm chart's default configuration values.
#
# For reference see the configuration reference and default values, but make
# sure to refer to the Helm chart version of interest to you!
#
# Introduction to YAML:     https://www.youtube.com/watch?v=cdLNKUoMc6c
# Chart config reference:   https://zero-to-jupyterhub.readthedocs.io/en/stable/resources/reference.html
# Chart default values:     https://github.com/jupyterhub/zero-to-jupyterhub-k8s/blob/HEAD/jupyterhub/values.yaml
# Available chart versions: https://jupyterhub.github.io/helm-chart/
#

hub:
  config:
    CILogonOAuthenticator:
      client_id: $CILOGON_ID
      client_secret: $CILOGON_SECRET
      oauth_callback_url: https://csusb-hpc.nrp-nautilus.io/hub/oauth_callback
#      username_claim: "email"
      admin_users: ["dvu@csusb.edu", "000065181@csusb.edu", "youngsu.kim@csusb.edu", "006501270@csusb.edu"]
      allow_all: false      
      allowed_idps:
        https://idp.csusb.edu/idp/shibboleth:
          username_derivation:
              username_claim: "email"
          allowed_domains:
          - csusb.edu
          - coyote.csusb.edu

        https://shibboleth.fullerton.edu/idp/shibboleth:
          username_derivation:
              username_claim: "email"
          allowed_domains:
          - fullerton.edu
          - csu.fullerton.edu          


        https://mckinley.csuci.edu/idp/shibboleth:
          username_derivation:
              username_claim: "email"
          allowed_domains:
          - csuci.edu
          - myci.csuci.edu

        https://idp.sfsu.edu/idp/shibboleth:
          username_derivation:
              username_claim: "email"
          allowed_domains:
          - sfsu.edu

        http://google.com/accounts/o8/id:
          username_derivation:
              username_claim: "email"
          allowed_domains:
          - ltu.edu
          - my.ltu.edu


      allowed_users:

        - dmishin@ucsd.edu
        - kcousins@csusb.edu	
        - doguhan.sundal@csusb.edu
        # 
        # CSE faculty
        - yunfei.hou@csusb.edu
        - jennifer.jin@csusb.edu
        - bilal.khan@csusb.edu
        - Mark.Takahashi@csusb.edu
        - HQiao@csusb.edu
        - MChao@csusb.edu
        - yan.zhang@csusb.edu
        - qsun@csusb.edu
        - Fadi.Muheidat@csusb.edu
        - Ronald.Salloum@csusb.edu
        - qiuxiao.chen@csusb.edu
        - hqiao@csusb.edu
        - khalil.dajani@csusb.edu
        - georgiou@csusb.edu
        - Beverly.Abadines@csusb.edu
        - TGeorgio@csusb.edu
        - KDevlin@csusb.edu
        - khan@csusb.edu
        - HeeJean.Kim@csusb.edu
        - YLi@csusb.edu
        - Lawrence.Orijuela@csusb.edu
        - Duck.Chung@csusb.edu
        - Giovanni.Orijuela@csusb.edu
        - Sonia.PerezGamboa@csusb.edu
        - PWatson@csusb.edu
        - alzahran@csusb.edu
        - Mohsen.Babaeian@csusb.edu
        - Said.Ngobi@csusb.edu
        - Beverly.Abadines@csusb.edu
        - Benyamin.Ahmadnia@csusb.edu
        - Abdul.MotinHowlader@csusb.edu 
        - Mudassar.Ghazi@csusb.edu
        - Nazanin.Ghasemianmoghaddam@csusb.edu
        - JSon@csusb.edu

        # 
        # IDS faculty
        - nasrin.mohabbati@csusb.edu
        - sepideh.alavi@csusb.edu
        - Essia.Hamouda@csusb.edu
        # 
        # Math faculty
        - suthakaran.ratnasingam@csusb.edu	
        - hector.banoscervantes@csusb.edu	
        # 
        # computer science
        # researcher - faculty and staff
        - Bobby.Laudeman@csusb.edu
        - Francisco.Casillas@csusb.edu
        - SSudhakar@csusb.edu
        - GAu@csusb.edu
        - BOwen@csusb.edu
        - James.Macdonell@csusb.edu
        - qiuxiao.chen@csusb.edu
        

        # sdsc sdsu
        - kkrick@sdsu.edu

        # fullerton
        - wpeng@fullerton.edu
        - dchandswang@fullerton.edu

        # csu Channel island
        - scott.feister@csuci.edu

        # csu San Francisco
        - mohabbati@sfsu.edu

        # Lawrence technologies Univ.
        - otoragay@ltu.edu

        # 
        # students in ldc
        - saikalyan.ayyagari0534@coyote.csusb.edu	
        - bhavikpankaj.khatri8246@coyote.csusb.edu	
        
        # computer Science studednts - Dr. Zhang
        - venkata.kandula@csusb.edu
        - aswin.nalluri@csusb.edu
        - pedro.felix0368@coyote.csusb.edu
        - david.vargasmonroy0554@coyote.csusb.edu
        - logan.ashbaugh7156@coyote.csusb.edu

        # computer Science studednts - Dr. Khan

        - nathan.kelly0642@coyote.csusb.edu
        - Harishkumarreddy.Kunchala7162@coyote.csusb.edu
        - michc308@coyote.csusb.edu
        - adhij.vartak4333@coyote.csusb.edu
        - karen.bhorgiron@csusb.edu      
        - jaylon.ignacio6638@coyote.csusb.edu
        - christian.magana7521@coyote.csusb.edu 
        - autumn.gamache8723@coyote.csusb.edu
        - Wei.Sun@csusb.edu
 

        - joongho.kim0407@coyote.csusb.edu

        # dep of enterpreneurship
        - ShubhaRaj.Pant@csusb.edu

      blocked_users:   
        - brandon.le7991@coyote.csusb.edu
        - headsb@coyote.csusb.edu
        - erick.hernandez8832@coyote.csusb.edu              


    JupyterHub:
      admin_access: true
      authenticator_class: cilogon

  extraConfig:
    templates: |
      c.JupyterHub.template_paths = ['/etc/jupyterhub/custom']

  # https://github.com/jupyterhub/zero-to-jupyterhub-k8s/issues/1990
  # To use these .gitlab-ci.yml needs to be updated accordingly
  extraFiles:
    image_select_idp:
      mountPath: /usr/local/share/jupyterhub/static/select_idp_cilogon.png

    # Files in /usr/local/etc/jupyterhub/jupyterhub_config.d are
    # automatically loaded in alphabetical order of the final file
    # name when JupyterHub starts.

    # for dynamic resource allocation 
    custom_spawner:
      mountPath: /usr/local/etc/jupyterhub/jupyterhub_config.d/my_spawner.py
    # Custom profiles list for the spawner above
    custom_spawner_profile:
      mountPath: /etc/jupyterhub/custom/my_spawner.html

    # Additional custom html files
    custom_login_html:
      mountPath: /etc/jupyterhub/custom/login.html
    custom_page_html:
      mountPath: /etc/jupyterhub/custom/page.html
    custom_spawn_pending_html:
      mountPath: /etc/jupyterhub/custom/spawn_pending.html

    # JupyterHub Start with event log redirection; & cannot be passed in yaml files
    jupyterhub_event_log:
      mountPath: /etc/jupyterhub/custom/event_command.sh
      stringData: |
        #! /bin/bash
        /usr/local/bin/jupyterhub --config /usr/local/etc/jupyterhub/jupyterhub_config.py --upgrade-db &>> /srv/jupyterhub/event.log
      mode: 0777
  
  args: [ "/etc/jupyterhub/custom/event_command.sh" ]

  image:
    name: jupyterhub/k8s-hub
    tag: '3.0.3'
    pullPolicy: ''
    pullSecrets: []

  livenessProbe:
    # The livenessProbe's aim to give JupyterHub sufficient time to startup but
    # be able to restart if it becomes unresponsive for ~5 min.
    enabled: true
    initialDelaySeconds: 300
    periodSeconds: 10
    failureThreshold: 30
    timeoutSeconds: 3
  readinessProbe:
    # The readinessProbe's aim is to provide a successful startup indication,
    # but following that never become unready before its livenessProbe fail and
    # restarts it if needed. To become unready following startup serves no
    # purpose as there are no other pod to fallback to in our non-HA deployment.
    enabled: true
    initialDelaySeconds: 0
    periodSeconds: 2
    failureThreshold: 1000
    timeoutSeconds: 1


  service:
    type: ClusterIP
    annotations: {}
    ports:
      nodePort: 
    loadBalancerIP:
  nodeSelector:
    topology.kubernetes.io/zone: "sdsu-rci"
#    kubernetes.io/hostname: "rci-tide-cpu-03.sdsu.edu"    
#  tolerations:
#  - key: "nautilus.io/csu-tide"
#    operator: "Exists"
#    effect: "NoSchedule"

  deploymentStrategy:
    type: Recreate
  db:
    type: sqlite-pvc
    pvc:
      accessModes:
        - ReadWriteOnce
      storage: 5Gi
      storageClassName: rook-ceph-block
  resources:
    limits:
      cpu: "1"
      memory: 1Gi
      nvidia.com/gpu: 0      
    requests:
      cpu: "500m"
      memory: "500Mi"
      nvidia.com/gpu: 0      
  networkPolicy:
    enabled: false
proxy:
  secretToken: '$SECRET_TOKEN'
  service:
    type: ClusterIP
  chp:
    nodeSelector:
      topology.kubernetes.io/zone: "sdsu-rci"
#      topology.kubernetes.io/region: "us-west"
#      kubernetes.io/hostname: "rci-tide-cpu-03.sdsu.edu"      
#    tolerations:
#    - key: "nautilus.io/csu-tide"
#      operator: "Exists"
#      effect: "NoSchedule"
    resources:
      limits:
        cpu: "1"
        memory: 1Gi
        nvidia.com/gpu: 0      
      requests:
        cpu: "500m"
        memory: "500Mi"
        nvidia.com/gpu: 0      
singleuser:
  extraPodConfig:
    securityContext:
        fsGroupChangePolicy: "OnRootMismatch"
        fsGroup: 100
  allowPrivilegeEscalation: true
  extraTolerations: 
  - key: "nautilus.io/csu-tide"
    operator: "Exists"
    effect: "NoSchedule"
  - key: "nautilus.io/csusb"
    operator: "Exists"
    effect: "NoSchedule"

  extraNodeAffinity:
    required:
      - matchExpressions:
        - 'key': 'topology.kubernetes.io/region'
          'operator': 'In'
          'values': ["us-west"]
  cloudMetadata:
    blockWithIptables: false
  networkPolicy:
    enabled: false
  storage:
    type: dynamic
    extraLabels: {}
    extraVolumes: []
    extraVolumeMounts: []
    capacity: 100Gi
    homeMountPath: /home/jovyan
    dynamic:
      storageClass: rook-ceph-block-tide
      pvcNameTemplate: claim-{username}{servername}
      volumeNameTemplate: volume-{username}{servername}
      storageAccessModes: [ReadWriteOnce]
    # extraVolumes(Mounts) are overriden by the custom spawner -> extraFiles/my_spawner.py
    # extraVolumes:
    #   - name: csusb-hpc-share
    #     persistentVolumeClaim:
    #       claimName: csusb-hpc-share
    #   - name: mkshare-script
    #     configMap:
    #       name: mkshare-script
    #       defaultMode: 0777
    # extraVolumeMounts:
    #   - name: csusb-hpc-share
    #     mountPath: /home/shared        
    #   - name: mkshare-script
    #     mountPath: /usr/local/bin/before-notebook.d/mkshare.sh
    #     subPath: mkshare.sh  
  image:
    name: gitlab-registry.nrp-nautilus.io/prp/jupyter-stack/minimal
    tag: v1.3
  startTimeout: 600
  cpu:
    limit: 16
    guarantee: 4
  memory:
    limit: 16G
    guarantee: 8G
  extraResource:
    limits: {}
    guarantees: {}
  # cmd: start-notebook.sh    
  cmd: jupyterhub-singleuser    
  defaultUrl: "/lab"
#   profileList:
#   - display_name: Stack Minimal
#     default: true    
#     kubespawner_override:
#       image_spec: localhost:30081/prp/jupyter-stack/minimal
scheduling:
  userPlaceholder:
    enabled: false
  userScheduler:
    enabled: false
# prePuller relates to the hook|continuous-image-puller DaemonsSets
prePuller:
  hook:
    enabled: false
  continuous:
    enabled: false

ingress:
  enabled: true
  annotations:
    kubernetes.io/ingress.class: haproxy
  hosts: ["csusb-hpc.nrp-nautilus.io"]
  pathSuffix: ''
  tls:
    - hosts:
      - csusb-hpc.nrp-nautilus.io

cull:
  enabled: false
  users: false
  removeNamedServers: false
  timeout: 3600
  every: 600
  concurrency: 20
  maxAge: 0