From 6bbc638ee24e1eac9413e815c89758c5d49fcd61 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jarom=C3=ADr=20Hradil?= <jaromir.hradil@cesnet.cz>
Date: Mon, 7 Oct 2024 14:29:27 +0200
Subject: [PATCH] Updating docker image versions

Adding setting to enable/disable RTC mode

Adding introspect URL for latest EGI hub introspect PR
---
 cesnet-central/deployments/fullhub.yaml    | 11 +++++++++--
 common/deployments/hub-production.yaml     | 11 +++++++++--
 common/deployments/hub-staging.yaml        | 11 +++++++++--
 common/playbooks/files/jupyterhub-jwt.yaml |  2 +-
 testing/deployments/hub.yaml               | 11 +++++++++--
 5 files changed, 37 insertions(+), 9 deletions(-)

diff --git a/cesnet-central/deployments/fullhub.yaml b/cesnet-central/deployments/fullhub.yaml
index 7ad4bad..3ccc80d 100644
--- a/cesnet-central/deployments/fullhub.yaml
+++ b/cesnet-central/deployments/fullhub.yaml
@@ -52,7 +52,7 @@ singleuser:
   defaultUrl: "/lab"
   image:
     name: eginotebooks/single-user-eosc
-    tag: "sha-3473906"
+    tag: "sha-dea4fa2"
   profileList:
     - display_name: Small Environment - 2 vCPU / 4 GB RAM (non-collaboratice)
       description: >
@@ -150,6 +150,12 @@ singleuser:
         #
         /usr/local/bin/jupyterhub-wait-remote-home
 
+        # Disables RTC extension. To enable it set this env variable in kubespawner_override
+        # to JUPYTERHUB_ALLOW_TOKEN_IN_URL="1"
+        if [ -z JUPYTERHUB_ALLOW_TOKEN_IN_URL ]; then
+          jupyter-labextension  disable @jupyter/collaboration-extension
+        fi
+
         cd .
         exec jupyterhub-singleuser \
           --FileCheckpoints.checkpoint_dir='/home/jovyan/.notebookCheckpoints' \
@@ -169,7 +175,7 @@ hub:
   # recommended to keep in sync with common/playbooks/files/jupyterhub-jwt.yaml
   image:
     name: eginotebooks/hub
-    tag: "sha-df106d8"
+    tag: "sha-ea893ce"
   config:
     Authenticator:
       enable_auth_state: true
@@ -189,6 +195,7 @@ hub:
       authorize_url: "https://{{ secret['checkin_host'] }}/OIDC/authorization"
       token_url: "https://{{ secret['checkin_host'] }}/OIDC/token"
       userdata_url: "https://{{ secret['checkin_host'] }}/OIDC/userinfo"
+      introspect_url: "https://{{ secret['checkin_host'] }}/OIDC/introspect"
       client_id: "{{ secret['client_id'] }}"
       client_secret: "{{ secret['client_secret'] }}"
       oauth_callback_url: "https://{{ notebooks_hostname }}/hub/oauth_callback"
diff --git a/common/deployments/hub-production.yaml b/common/deployments/hub-production.yaml
index 618ed53..d3d50ce 100644
--- a/common/deployments/hub-production.yaml
+++ b/common/deployments/hub-production.yaml
@@ -52,7 +52,7 @@ singleuser:
   defaultUrl: "/lab"
   image:
     name: eginotebooks/single-user-eosc
-    tag: "sha-3473906"
+    tag: "sha-dea4fa2"
   profileList:
     - display_name: Small Environment - 2 vCPU / 4 GB RAM
       description: >
@@ -132,6 +132,12 @@ singleuser:
         #
         /usr/local/bin/jupyterhub-wait-remote-home
 
+        # Disables RTC extension. To enable it set this env variable in kubespawner_override
+        # to JUPYTERHUB_ALLOW_TOKEN_IN_URL="1"
+        if [ -z JUPYTERHUB_ALLOW_TOKEN_IN_URL ]; then
+          jupyter-labextension  disable @jupyter/collaboration-extension
+        fi
+
         cd .
         exec jupyterhub-singleuser \
           --FileCheckpoints.checkpoint_dir='/home/jovyan/.notebookCheckpoints' \
@@ -151,7 +157,7 @@ hub:
   # recommended to keep in sync with common/playbooks/files/jupyterhub-jwt.yaml
   image:
     name: eginotebooks/hub
-    tag: "sha-df106d8"
+    tag: "sha-ea893ce"
   config:
     Authenticator:
       enable_auth_state: true
@@ -170,6 +176,7 @@ hub:
       authorize_url: "https://{{ secret['checkin_host'] }}/OIDC/authorization"
       token_url: "https://{{ secret['checkin_host'] }}/OIDC/token"
       userdata_url: "https://{{ secret['checkin_host'] }}/OIDC/userinfo"
+      introspect_url: "https://{{ secret['checkin_host'] }}/OIDC/introspect"
       client_id: "{{ secret['client_id'] }}"
       client_secret: "{{ secret['client_secret'] }}"
       oauth_callback_url: "https://{{ notebooks_hostname }}/hub/oauth_callback"
diff --git a/common/deployments/hub-staging.yaml b/common/deployments/hub-staging.yaml
index 40ed42b..42ecb45 100644
--- a/common/deployments/hub-staging.yaml
+++ b/common/deployments/hub-staging.yaml
@@ -52,7 +52,7 @@ singleuser:
   defaultUrl: "/lab"
   image:
     name: eginotebooks/single-user-eosc
-    tag: "sha-3473906"
+    tag: "sha-dea4fa2"
   profileList:
     - display_name: Small Environment - 2 vCPU / 4 GB RAM
       description: >
@@ -132,6 +132,12 @@ singleuser:
         #
         /usr/local/bin/jupyterhub-wait-remote-home
 
+        # Disables RTC extension. To enable it set this env variable in kubespawner_override
+        # to JUPYTERHUB_ALLOW_TOKEN_IN_URL="1"
+        if [ -z JUPYTERHUB_ALLOW_TOKEN_IN_URL ]; then
+          jupyter-labextension  disable @jupyter/collaboration-extension
+        fi
+
         cd .
         exec jupyterhub-singleuser \
           --FileCheckpoints.checkpoint_dir='/home/jovyan/.notebookCheckpoints' \
@@ -151,7 +157,7 @@ hub:
   # recommended to keep in sync with common/playbooks/files/jupyterhub-jwt.yaml
   image:
     name: eginotebooks/hub
-    tag: "sha-df106d8"
+    tag: "sha-ea893ce"
   config:
     Authenticator:
       enable_auth_state: true
@@ -170,6 +176,7 @@ hub:
       authorize_url: "https://{{ secret['checkin_host'] }}/OIDC/authorization"
       token_url: "https://{{ secret['checkin_host'] }}/OIDC/token"
       userdata_url: "https://{{ secret['checkin_host'] }}/OIDC/userinfo"
+      introspect_url: "https://{{ secret['checkin_host'] }}/OIDC/introspect"
       client_id: "{{ secret['client_id'] }}"
       client_secret: "{{ secret['client_secret'] }}"
       oauth_callback_url: "https://{{ notebooks_hostname }}/hub/oauth_callback"
diff --git a/common/playbooks/files/jupyterhub-jwt.yaml b/common/playbooks/files/jupyterhub-jwt.yaml
index 71e1d4e..16117a2 100644
--- a/common/playbooks/files/jupyterhub-jwt.yaml
+++ b/common/playbooks/files/jupyterhub-jwt.yaml
@@ -20,7 +20,7 @@ spec:
       containers:
         - name: jwt
           # recommended to keep it in sync with */deployments/*.yaml
-          image: eginotebooks/hub:sha-df106d8
+          image: eginotebooks/hub:sha-ea893ce
           args:
             - fastapi
             - run
diff --git a/testing/deployments/hub.yaml b/testing/deployments/hub.yaml
index 1226186..2e4b3b5 100644
--- a/testing/deployments/hub.yaml
+++ b/testing/deployments/hub.yaml
@@ -53,7 +53,7 @@ singleuser:
   defaultUrl: "/lab"
   image:
     name: eginotebooks/single-user-eosc
-    tag: "sha-3473906"
+    tag: "sha-dea4fa2"
   profileList:
     - display_name: Small Environment - 2 vCPU / 4 GB RAM
       description: >
@@ -133,6 +133,12 @@ singleuser:
         #
         /usr/local/bin/jupyterhub-wait-remote-home
 
+        # Disables RTC extension. To enable it set this env variable in kubespawner_override
+        # to JUPYTERHUB_ALLOW_TOKEN_IN_URL="1"
+         if [ -z JUPYTERHUB_ALLOW_TOKEN_IN_URL ]; then
+          jupyter-labextension  disable @jupyter/collaboration-extension
+        fi
+
         cd .
         exec jupyterhub-singleuser \
           --FileCheckpoints.checkpoint_dir='/home/jovyan/.notebookCheckpoints' \
@@ -152,7 +158,7 @@ hub:
   # recommended to keep in sync with common/playbooks/files/jupyterhub-jwt.yaml
   image:
     name: eginotebooks/hub
-    tag: "sha-df106d8"
+    tag: "sha-ea893ce"
   config:
     Authenticator:
       enable_auth_state: true
@@ -171,6 +177,7 @@ hub:
       authorize_url: "https://{{ secret['checkin_host'] }}/OIDC/authorization"
       token_url: "https://{{ secret['checkin_host'] }}/OIDC/token"
       userdata_url: "https://{{ secret['checkin_host'] }}/OIDC/userinfo"
+      introspect_url: "https://{{ secret['checkin_host'] }}/OIDC/introspect"
       client_id: "{{ secret['client_id'] }}"
       client_secret: "{{ secret['client_secret'] }}"
       oauth_callback_url: "https://{{ notebooks_hostname }}/hub/oauth_callback"
-- 
GitLab