From 078f945c374b529d092cea0ec25b2fc985de5286 Mon Sep 17 00:00:00 2001 From: Sigmar Stefansson Date: Wed, 24 Jan 2024 14:59:04 +0000 Subject: [PATCH 1/5] dont run workspaces as root --- charts/bigdata-spark-watcher/templates/role.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/charts/bigdata-spark-watcher/templates/role.yaml b/charts/bigdata-spark-watcher/templates/role.yaml index 3cf5ceb0..384e4be0 100644 --- a/charts/bigdata-spark-watcher/templates/role.yaml +++ b/charts/bigdata-spark-watcher/templates/role.yaml @@ -26,6 +26,7 @@ rules: - "secrets" resourceNames: - "spotinst-kubernetes-cluster-controller" + - "spot-bigdata-log-collector-creds" verbs: - get - apiGroups: From 7d26795514c0c6f527b7bec79320b1b432bbaa6e Mon Sep 17 00:00:00 2001 From: Sigmar Stefansson Date: Wed, 24 Jan 2024 15:04:14 +0000 Subject: [PATCH 2/5] dont run workspaces as root --- charts/bigdata-notebook-workspace/values.yaml | 4 ---- charts/bigdata-spark-watcher/templates/role.yaml | 1 - 2 files changed, 5 deletions(-) diff --git a/charts/bigdata-notebook-workspace/values.yaml b/charts/bigdata-notebook-workspace/values.yaml index 17daedcb..66cd2759 100644 --- a/charts/bigdata-notebook-workspace/values.yaml +++ b/charts/bigdata-notebook-workspace/values.yaml @@ -49,10 +49,6 @@ volume: name: workspace-data mountPath: /home/jovyan -podSecurityContext: - runAsUser: 0 - fsGroup: 0 - containerPort: port: 8888 name: workspace diff --git a/charts/bigdata-spark-watcher/templates/role.yaml b/charts/bigdata-spark-watcher/templates/role.yaml index 384e4be0..3cf5ceb0 100644 --- a/charts/bigdata-spark-watcher/templates/role.yaml +++ b/charts/bigdata-spark-watcher/templates/role.yaml @@ -26,7 +26,6 @@ rules: - "secrets" resourceNames: - "spotinst-kubernetes-cluster-controller" - - "spot-bigdata-log-collector-creds" verbs: - get - apiGroups: From b21dd061689f7296aa1b43440de650d59b56b1da Mon Sep 17 00:00:00 2001 From: Sigmar Stefansson Date: Wed, 24 Jan 2024 17:06:10 +0000 Subject: [PATCH 3/5] start-notebook.sh deprecated use start-notebook.py --- charts/bigdata-notebook-workspace/templates/deployment.yaml | 2 +- charts/bigdata-notebook-workspace/values.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/charts/bigdata-notebook-workspace/templates/deployment.yaml b/charts/bigdata-notebook-workspace/templates/deployment.yaml index ea6e7b96..8b0545dd 100644 --- a/charts/bigdata-notebook-workspace/templates/deployment.yaml +++ b/charts/bigdata-notebook-workspace/templates/deployment.yaml @@ -52,7 +52,7 @@ spec: - containerPort: {{ .Values.containerPort.port }} name: {{ .Values.containerPort.name }} command: - - start-notebook.sh + - start-notebook.py args: {{- range $key, $value := .Values.server }} - --ServerApp.{{ $key | snakecase }}={{$value}} diff --git a/charts/bigdata-notebook-workspace/values.yaml b/charts/bigdata-notebook-workspace/values.yaml index 66cd2759..1c1106b1 100644 --- a/charts/bigdata-notebook-workspace/values.yaml +++ b/charts/bigdata-notebook-workspace/values.yaml @@ -15,7 +15,7 @@ image: repository: public.ecr.aws/ocean-spark/bigdata-notebook pullPolicy: IfNotPresent # Overrides the image tag whose default is the chart appVersion. - tag: lab-4.0.10-ofas-d35201c + tag: lab-4.0.11-ofas-3bd43fa imagePullSecrets: - name: spot-bigdata-image-pull From c88517ad163e99fbf75f038980e565eb6caef34e Mon Sep 17 00:00:00 2001 From: Sigmar Stefansson Date: Thu, 8 Feb 2024 14:30:39 +0000 Subject: [PATCH 4/5] Update values.yaml update jupyterlab --- charts/bigdata-notebook-workspace/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/bigdata-notebook-workspace/values.yaml b/charts/bigdata-notebook-workspace/values.yaml index 1c1106b1..45ad66de 100644 --- a/charts/bigdata-notebook-workspace/values.yaml +++ b/charts/bigdata-notebook-workspace/values.yaml @@ -15,7 +15,7 @@ image: repository: public.ecr.aws/ocean-spark/bigdata-notebook pullPolicy: IfNotPresent # Overrides the image tag whose default is the chart appVersion. - tag: lab-4.0.11-ofas-3bd43fa + tag: lab-4.0.12-ofas-a3b460b imagePullSecrets: - name: spot-bigdata-image-pull From 656d45a7ff2d2bf366204f25562f62030b665407 Mon Sep 17 00:00:00 2001 From: Sigmar Stefansson Date: Mon, 12 Feb 2024 13:06:52 +0000 Subject: [PATCH 5/5] update tag to 4.1.0 --- charts/bigdata-notebook-workspace/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/bigdata-notebook-workspace/values.yaml b/charts/bigdata-notebook-workspace/values.yaml index 45ad66de..3fef87b0 100644 --- a/charts/bigdata-notebook-workspace/values.yaml +++ b/charts/bigdata-notebook-workspace/values.yaml @@ -15,7 +15,7 @@ image: repository: public.ecr.aws/ocean-spark/bigdata-notebook pullPolicy: IfNotPresent # Overrides the image tag whose default is the chart appVersion. - tag: lab-4.0.12-ofas-a3b460b + tag: lab-4.1.0-ofas-ea68b6c imagePullSecrets: - name: spot-bigdata-image-pull