https://github.com/dcnsakthi/aks-jhub
JupyterHub on Azure Kubernetes Service (AKS)
https://github.com/dcnsakthi/aks-jhub
Last synced: 15 days ago
JSON representation
JupyterHub on Azure Kubernetes Service (AKS)
- Host: GitHub
- URL: https://github.com/dcnsakthi/aks-jhub
- Owner: dcnsakthi
- License: mit
- Created: 2022-12-11T02:58:35.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2023-01-24T01:16:01.000Z (over 2 years ago)
- Last Synced: 2025-02-17T17:52:51.695Z (3 months ago)
- Size: 6.84 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# JupyterHub on Azure Kubernetes Service (AKS) with Azure Active Directory Authentication | aks-jhub
JupyterHub is a powerful tool for creating and managing interactive Jupyter notebook environments for multiple users. When combined with the scalability and flexibility of the Azure Kubernetes Service (AKS), it becomes an ideal platform for data science and machine learning workloads. In this guide, we will walk through the process of deploying JupyterHub on AKS with Azure Active Directory (AAD) authentication.
## Prerequisites
- An Azure account
- A resource group in Azure
- The Azure CLI installed on your local machine
- The kubectl command-line tool installed on your local machine
- An AAD tenant with at least one user account
- A JupyterHub image (you can use one from the JupyterHub Helm Chart)
## Deployment Steps
- Create a new AKS cluster. You can do this using the Azure CLI with the following command:
```az aks create --resource-group nsaks-rg --name nsaks --node-count 2 --generate-ssh-keys```
You can also use the Azure Portal to create a new AKS cluster.
- Connect to your AKS cluster using the following command:
```az aks get-credentials --resource-group nsaks-rg --name nsaks```
- Create a namespace for JupyterHub:
```kubectl create namespace jhub```
- Install the JupyterHub Helm chart and Create a new deployment for JupyterHub using the JupyterHub Helm Chart:
```helm repo add jupyterhub https://jupyterhub.github.io/helm-chart/ helm install jupyterhub jupyterhub/jupyterhub --version=3.0.0 --namespace jhub```
- Create a new Service Principal in Azure for JupyterHub:
```az ad sp create-for-rbac --name jupyterhub-sp --role Contributor --scopes /subscriptions//resourceGroups/ ```
- Create a new secret in Kubernetes for the Service Principal:
```kubectl create secret generic jupyterhub-sp-secret --from-literal=client-id= --from-literal=client-secret= --namespace jhub```
- Update the JupyterHub Helm chart to use the new secret:
```helm upgrade jupyterhub jupyterhub/jupyterhub --version=0.9.1 --namespace jhub --set singleuser.extraEnv[0].name=AZURE_CLIENT_ID --set singleuser.extraEnv[0].valueFrom.secretKeyRef.name=jupyterhub-sp-secret --set singleuser.extraEnv[0].valueFrom.secretKeyRef.key=client-id --set singleuser.extraEnv[1].name=AZURE_CLIENT_SECRET --set singleuser.extraEnv[1].valueFrom.secretKeyRef.name=jupyterhub-sp-secret --set singleuser.extraEnv[1].valueFrom.secretKeyRef.key=client-secret```
- Create a new AAD group for JupyterHub users:
```az ad group create --display-name "JupyterHub Users" --mail-nickname "jupyterhub-users"```
- Add users to the AAD group:
```az ad group member add --group "JupyterHub Users" --member-id ```
- Update the JupyterHub Helm chart to use the AAD group:
```helm upgrade jupyterhub jupyterhub/jupyterhub --version=3.0.0 --namespace jhub --set hub.extraEnv[0].name=AAD_GROUP_ID --set hub.extraEnv[0].value=```
- Expose the JupyterHub service with a LoadBalancer:
```kubectl expose deployment jupyterhub-hub --type=LoadBalancer --name=jupyterhub --namespace jhub```
- Get the external IP of the LoadBalancer:
```kubectl get service jupyterhub --namespace jhub```
- Access JupyterHub at the external IP in a web browser, and log in with your AAD credentials.
- Create new user profiles with the jupyterhub-admin command-line tool:
```kubectl exec -it jupyterhub-hub-0 --namespace jhub -- jupyterhub-admin create-user ```
- (Optional) To configure custom resource limits for the single-user notebook pods, you can use the singleuser.resources field in the Helm chart:
```helm upgrade jupyterhub jupyterhub/jupyterhub --version=3.0.0 --namespace jhub --set singleuser.resources.requests.cpu=1 --set singleuser.resources.requests.memory=2Gi --set singleuser.resources.limits.cpu=2 --set singleuser.resources.limits.memory=1Gi```
By following these steps, you should now have a fully functional JupyterHub deployment on AKS with AAD authentication for your users. Keep in mind that you should run the above steps periodically to update the JupyterHub deployment and keep it secure.