[BUG] - add R-studio via custom image
bozethe opened this issue · 3 comments
Describe the bug
I am trying to extend the features of orbit to include r-studio by using custom image. However the pod fails with "error" status
To Reproduce
Steps to reproduce the behavior:
- login to orbit workbench
- click New server
- tick custom image and provide r-studio image pushed into your private ecr
- Launch
Expected behavior
Expecting to be able to use r-studio via custom image
Screenshots
❯ kubectl logs studio-0 -n sample-admin-orbit
sh: 1: /usr/local/bin/start.sh: not found
Additional context
Add any other context about the problem here.
Kubeflow's Notebook server interface is used to launch Pods with Jupyter Notebook containers. the custom images defined are expected to be Jupyter Notebook images. these images typically use a startup script (shown in your log outputs) found at /usr/local/bin/start.sh. the image you are attempting to launch does not meet the criteria to be launched from Kubeflow's Notebook server UI.
you should be able to launch a Pod with this image using kubectl (from within a Notebook if you wanted). you will need to define a kubernetes manifest describing the Pod, including the container image.
@chamcca how can we have r-studio to benefit from all the great features of orbit(teams collaboration, secure environment etc)?
are the any plans to incorporate r-studio into orbit?
I have another question that is not connected to the first one. Is it possible to use microsoft AD for authentication instead of cognito? we don't want to go through cognito at all. The requirement is that, orbit should not use cognito at all for auth instead use Microsoft AD.
deploying rstudio into the namespace of a team or team member will automatically enable some of the security protections. the Pod will get the IAM Role and Security Group assigned to the team, which enables collaboration and restriction by team.
to integrate with Microsoft AD, see the documentation on Okta (https://awslabs.github.io/aws-orbit-workbench/okta-integration) and Keycloak (https://awslabs.github.io/aws-orbit-workbench/keycloak-integration) integrations. it should be possible to use the SAML method to integrate Microsoft AD's IdP with Cognito.