[DH-197] Remove course admin related configs across hubs

deployments/a11y/config/common.yaml

@@ -17,16 +17,22 @@ jupyterhub:
     nodeSelector:
       hub.jupyter.org/pool-name: core-pool-2023-07-11
     config:
-      Authenticator:
-        admin_users:
-          # infrastructure
-          - balajialwar
-          - felder
-          - gmerritt
-          - rylo
-          - sknapp
-          # List of other admin users
-
+    loadRoles:
+      # datahub staff
+      datahub-staff:
+        description: Enable admin for datahub staff
+        # this role provides permissions to...
+        scopes:
+          - admin-ui
+          - admin:groups
+          - admin:users
+          - admin:servers
+          - read:roles
+          - read:hub
+          - access:servers
+        # this role will be assigned to...
+        groups:
+          - course::1524699::group::all-admins
   singleuser:
     extraEnv:
       # Unset NotebookApp from hub/values. Necessary for recent lab versions.

deployments/astro/config/common.yaml

@@ -17,20 +17,34 @@ jupyterhub:
     nodeSelector:
       hub.jupyter.org/pool-name: core-pool-2023-07-11
     config:
-      Authenticator:
-        admin_users:
-          # infrastructure
-          - balajialwar
-          - felder
-          - gmerritt
-          - rylo
-          - sknapp
-          # List of other admin users
-          - nsabrams
-          - joshbloom
-          - aparsons
-          - jlu-astro
-
+    loadRoles:
+      # datahub staff
+      datahub-staff:
+        description: Enable admin for datahub staff
+        # this role provides permissions to...
+        scopes:
+          - admin-ui
+          - admin:groups
+          - admin:users
+          - admin:servers
+          - read:roles
+          - read:hub
+          - access:servers
+        # this role will be assigned to...
+        groups:
+          - course::1524699::group::all-admins
+      # astro admins
+      astro-admins:
+        description: Enable astro folks to view and access all servers.
+        # this role provides permissions to...
+        scopes:
+          - admin-ui
+          - list:users
+          - admin:servers
+          - access:servers
+        # this role will be assigned to...
+        groups:
+          - course::1524699::group::astro-admins
   singleuser:
     nodeSelector:
       hub.jupyter.org/pool-name: astro-pool

deployments/biology/config/common.yaml

@@ -21,20 +21,34 @@ jupyterhub:
       hub.jupyter.org/pool-name: core-pool-2023-07-11
 
     config:
-      Authenticator:
-        admin_users:
-          # infrastructure
-          - balajialwar
-          - felder
-          - gmerritt
-          - rylo
-          - sknapp
-
-          # List of other admin users
-          - psudmant
-          - ingolia
-          - stacy-l
-
+    loadRoles:
+      # datahub staff
+      datahub-staff:
+        description: Enable admin for datahub staff
+        # this role provides permissions to...
+        scopes:
+          - admin-ui
+          - admin:groups
+          - admin:users
+          - admin:servers
+          - read:roles
+          - read:hub
+          - access:servers
+        # this role will be assigned to...
+        groups:
+          - course::1524699::group::all-admins
+      # biology admins
+      biology-admins:
+        description: Enable departmental folks to view and access all servers.
+        # this role provides permissions to...
+        scopes:
+          - admin-ui
+          - list:users
+          - admin:servers
+          - access:servers
+        # this role will be assigned to...
+        groups:
+          - course::1524699::group::biology-admins
   custom:
     admin:
       extraVolumeMounts:

deployments/cee/config/common.yaml

@@ -17,17 +17,22 @@ jupyterhub:
     nodeSelector:
       hub.jupyter.org/pool-name: core-pool-2023-07-11
     config:
-      Authenticator:
-        admin_users:
-          # infrastructure
-          - balajialwar
-          - felder
-          - gmerritt
-          - rylo
-          - sknapp
-
-          # List of other admin users
-
+    loadRoles:
+      # datahub staff
+      datahub-staff:
+        description: Enable admin for datahub staff
+        # this role provides permissions to...
+        scopes:
+          - admin-ui
+          - admin:groups
+          - admin:users
+          - admin:servers
+          - read:roles
+          - read:hub
+          - access:servers
+        # this role will be assigned to...
+        groups:
+          - course::1524699::group::all-admins
   singleuser:
     defaultUrl: /desktop
     nodeSelector:

deployments/data100/config/common.yaml

@@ -17,18 +17,33 @@ jupyterhub:
       hub.jupyter.org/pool-name: core-pool-2023-07-11
     config:
     loadRoles:
-      # Data 100, Fall 2023
-      course-staff-1527426:
-        description: Enable course staff to view and access servers.
+      # datahub staff
+      datahub-staff:
+        description: Enable admin for datahub staff
         # this role provides permissions to...
         scopes:
           - admin-ui
-          - list:users!group=course::1527426
-          - admin:servers!group=course::1527426
-          - access:servers!group=course::1527426
+          - admin:groups
+          - admin:users
+          - admin:servers
+          - read:roles
+          - read:hub
+          - access:servers
         # this role will be assigned to...
         groups:
-          - course::1527426::group::Admins
+          - course::1524699::group::all-admins
+      ## Data 100, Spring 2024
+      #course-staff-N:
+      #  description: Enable course staff to view and access servers.
+      #  # this role provides permissions to...
+      #  scopes:
+      #    - admin-ui
+      #    - list:users!group=course::N
+      #    - admin:servers!group=course::N
+      #    - access:servers!group=course::N
+      #  # this role will be assigned to...
+      #  groups:
+      #    - course::N::group::Admins
 
 #  prePuller:
 #    extraImages:

deployments/data101/config/common.yaml

@@ -21,18 +21,33 @@ jupyterhub:
   hub:
     config:
     loadRoles:
-      # Data 101, Fall 2023
-      course-staff-1528038:
-        description: Enable course staff to view and access servers.
+      # datahub staff
+      datahub-staff:
+        description: Enable admin for datahub staff
         # this role provides permissions to...
         scopes:
           - admin-ui
-          - list:users!group=course::1528038
-          - admin:servers!group=course::1528038
-          - access:servers!group=course::1528038
+          - admin:groups
+          - admin:users
+          - admin:servers
+          - read:roles
+          - read:hub
+          - access:servers
         # this role will be assigned to...
         groups:
-          - course::1528038::group::Admins
+          - course::1524699::group::all-admins
+      ## Data 101, Spring 2024
+      #course-staff-N:
+      #  description: Enable course staff to view and access servers.
+      #  # this role provides permissions to...
+      #  scopes:
+      #    - admin-ui
+      #    - list:users!group=course::N
+      #    - admin:servers!group=course::N
+      #    - access:servers!group=course::N
+      #  # this role will be assigned to...
+      #  groups:
+      #    - course::N::group::Admins
     extraConfig:
       data101-new-db: |
         from jupyterhub.utils import exponential_backoff

deployments/data102/config/common.yaml

@@ -35,19 +35,19 @@ jupyterhub:
         # this role will be assigned to...
         groups:
           - course::1524699::group::all-admins
-      # Data 102, Fall 2023, #4941
-      course-staff-1526710:
-        description: Enable course staff to view and access servers.
-        # this role provides permissions to...
-        scopes:
-          - admin-ui
-          - list:users!group=course::1526710
-          - admin:servers!group=course::1526710
-          - access:servers!group=course::1526710
-        # this role will be assigned to...
-        groups:
-          - course::1526710::enrollment_type::teacher
-          - course::1526710::enrollment_type::ta
+      ## Data 102, Spring 2024, #xyz
+      #course-staff-N:
+      #  description: Enable course staff to view and access servers.
+      #  # this role provides permissions to...
+      #  scopes:
+      #    - admin-ui
+      #    - list:users!group=course::N
+      #    - admin:servers!group=course::N
+      #    - access:servers!group=course::N
+      #  # this role will be assigned to...
+      #  groups:
+      #    - course::N::enrollment_type::teacher
+      #    - course::N::enrollment_type::ta
 
   singleuser:
     defaultUrl: "/lab"

deployments/data8/config/common.yaml

@@ -26,28 +26,35 @@ jupyterhub:
     nodeSelector:
       hub.jupyter.org/pool-name: core-pool-2023-07-11
     config:
-      #Authenticator:
-      #  admin_users:
-      #    # infrastructure
-      #    - balajialwar
-      #    - felder
-      #    - gmerritt
-      #    - rylo
-      #    - sknapp
     loadRoles:
-      # Data 8, Summer 2023
-      course-staff-1525580:
-        description: Enable course staff to view and access servers.
+      # datahub staff
+      datahub-staff:
+        description: Enable admin for datahub staff
         # this role provides permissions to...
         scopes:
           - admin-ui
-          - list:users!group=course::1525580
-          - admin:servers!group=course::1525580
-          - access:servers!group=course::1525580
+          - admin:groups
+          - admin:users
+          - admin:servers
+          - read:roles
+          - read:hub
+          - access:servers
         # this role will be assigned to...
         groups:
-          - course::1525580::enrollment_type::teacher
-          - course::1525580::enrollment_type::ta
+          - course::1524699::group::all-admins
+      ## Data 8, Spring 2024
+      #course-staff-N:
+      #  description: Enable course staff to view and access servers.
+      #  # this role provides permissions to...
+      #  scopes:
+      #    - admin-ui
+      #    - list:users!group=course::N
+      #    - admin:servers!group=course::N
+      #    - access:servers!group=course::N
+      #  # this role will be assigned to...
+      #  groups:
+      #    - course::N::enrollment_type::teacher
+      #    - course::N::enrollment_type::ta
 
   singleuser:
     nodeSelector: