From c4ac158363541f9493846408ac65e5fecf8a7d32 Mon Sep 17 00:00:00 2001
From: YuviPanda <yuvipanda@gmail.com>
Date: Wed, 6 Jul 2022 14:41:49 -0700
Subject: [PATCH] Allow users to access services

---
 helm-charts/basehub/values.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/helm-charts/basehub/values.yaml b/helm-charts/basehub/values.yaml
index c76d9b66f..4a70fd9b5 100644
--- a/helm-charts/basehub/values.yaml
+++ b/helm-charts/basehub/values.yaml
@@ -254,6 +254,15 @@ jupyterhub:
                 matchLabels:
                   app.kubernetes.io/component: traefik
   hub:
+    loadRoles:
+      # Should use this, not hub.config.JupyterHub.load_roles - that will
+      # override any existing load_roles set by z2jh
+      service-use:
+        name: user
+        scopes:
+          # Allow all users access to 'services', which includes dask-gateway & configurator
+          - access:services
+          - self
     config:
       JupyterHub:
         # Allow unauthenticated prometheus requests