নোট আপগ্রেড করুন
নোটগুলি আপগ্রেড করুন
নোট টেমপ্লেট
১. পরিবর্তন
বৈশিষ্ট্য:
বৈশিষ্ট্য বিবরণ
মান মুছে ফেলা হয়েছে - চার্টের নাম
| নাম | কারণে |
|---|---|
হেলম.ভ্যালু | হেলম মান অপসারণের কারণ |
মান যোগ করা হয়েছে - চার্টের নাম
মান বিভাগের বিবরণ
| নাম | বর্ণনা | মান |
|---|---|---|
হেলম.ভ্যালু | হেলম মান বিবরণ | ডিফল্ট মান |
নাম পরিবর্তন - চার্টের নাম
| পুরাতন নাম | নতুন নাম |
|---|---|
পুরাতন নাম | নতুন নাম |
⚠️⚠️⚠️ Warnings
মান পরিবর্তিত হয়েছে - চার্টের নাম
| নাম | পুরাতন মূল্য | নতুন মূল্য |
|---|---|---|
হেলম.ভ্যালু | পুরাতন মূল্য | নতুন মূল্য |
পরবর্তী মুক্তি
RELEASE 6.6.1
1. Ugraded JupyterHub experience
বৈশিষ্ট্য:
Ugraded helm_jupyterhub to bundle Ilum-specific SSH/Git/LDAP bootstrap logic, curated notebooks, and tailored singleuser defaults so helm_aio merely enables the dependency, pins পুরো নাম ওভাররাইড , and surfaces only the still-relevant overrides. This also keeps the SSH network policy open for port 2222 and ensures the shared ilum-jupyter-ssh-keys secret remains stable, while c.JupyterHub.cleanup_servers = True guarantees the SSH service and user pods stop with the release.
Values added - helm_jupyterhub
| নাম | বর্ণনা | মান |
|---|---|---|
ssh.enabled | Enables the bundled SSH operator, service, and shared key workflow | সত্য |
ssh.keysSecret | Secret that provides the stable host and authorized keys | ilum-jupyter-ssh-keys |
ssh.operatorImage | Image that syncs per-user secrets and applies the rendered SSH config | `` |
git.existingSecret | Credentials that allow the Git init job to seed the notebooks repository | ilum-git-credentials |
git.operatorImage | Operator responsible for pushing files/examples into Gitea | `` |
hub.gitInit.enabled | Runs the job that ensures the ilum-jupyterhub organization/repo exist | সত্য |
Values added - helm_aio
| নাম | বর্ণনা | মান |
|---|---|---|
jupyterhub.enabled | Enables the curated Ilum JupyterHub dependency | সত্য |
jupyterhub.fullnameOverride | Prefixes all rendered resources with the stable ilum-jupyterনাম | "ilum-jupyter" |
jupyterhub.hub.image.name | Hub image repository used when rendering the sub-chart | `` |
jupyterhub.hub.image.tag | Hub image tag | 4.1.0 |
jupyterhub.hub.contentSecurityPolicy.enabled | Turns the managed CSP header injection on/off | সত্য |
jupyterhub.hub.contentSecurityPolicy.frameAncestors | Origins allowed to embed JupyterHub in an iframe | ["'self'","http://localhost:9777"] |
jupyterhub.hub.contentSecurityPolicy.extraDirectives | Extra CSP directives appended verbatim to the header | [] |
jupyterhub.singleuser.image.name | Singleuser runtime image used in Ilum deployments | `` |
jupyterhub.singleuser.image.tag | Singleuser image tag | 32 |
Singleuser runtime defaults
| নাম | বর্ণনা | মান |
|---|---|---|
jupyterhub.singleuser.startupArgs.iopubDataRateLimit | Raised output bandwidth ceiling for Ilum workloads | 1000000000 |
jupyterhub.singleuser.startupArgs.extraArgs | Additional CLI arguments forwarded to the user server | [] |
jupyterhub.singleuser.nodeSelector | Architecture-agnostic placement (empty by default but can be filled later) | {} |
jupyterhub.singleuser.tolerations | Allows scheduling on tainted nodes when needed | [] |
jupyterhub.singleuser.affinity.nodeAffinity | Restricts pods to amd64/arm64 nodes for Ilum multi-arch clouds | See values.yaml (amd64 + arm64) |
SSH defaults
| নাম | বর্ণনা | মান |
|---|---|---|
jupyterhub.ssh.enabled | Controls whether the bundled SSH service is exposed directly from singleuser pods | মিথ্যা |
jupyterhub.ssh.keysSecret | Secret that supplies Ilum’s shared host keys and master authorized_keys | ilum-jupyter-ssh-keys |
jupyterhub.ssh.mode | Chooses between shared master authorized_keys or per-user secrets | মাস্টার |
jupyterhub.ssh.service.type | Type of service fronting port 2222 | নোডপোর্ট |
jupyterhub.ssh.service.port | Port exposed for SSH traffic | 2222 |
jupyterhub.ssh.operatorImage | Operator that wires per-user secrets and renders the SSH configuration | docker.io/ilum/jhub-ssh-operator:v30 |
Git bootstrap
| নাম | বর্ণনা | মান |
|---|---|---|
jupyterhub.git.url | Gitea endpoint used to seed the Ilum ilum-jupyterhub org | http://ilum-gitea-http:3000 |
jupyterhub.git.orgName | Organization managed by the git-init job | ilum-jupyterhub |
jupyterhub.git.operatorImage | Operator that mirrors files/examples into Gitea | `` |
jupyterhub.git.secret.name | Secret containing credentials referenced by the operator | ilum-git-credentials |
jupyterhub.git.secret.usernameKey | Key for the username inside the secret | ব্যবহারকারীর নাম |
jupyterhub.git.secret.passwordKey | Key for the password inside the secret | পাসওয়ার্ড |
Image pull credentials
| নাম | বর্ণনা | মান |
|---|---|---|
jupyterhub.imagePullSecret.* | Configure a single pull secret (create inline or reference via নাম ) shared by every JupyterHub workload | See মূল্যবোধ.ইয়ামল |
jupyterhub.imagePullSecrets | Additional pull secrets injected into all hub-managed pods | [] |
LDAP defaults
| নাম | বর্ণনা | মান |
|---|---|---|
jupyterhub.ldap.enabled | Keeps the LDAP authenticator wired into Ilum JupyterHub | সত্য |
jupyterhub.ldap.urls | LDAP server endpoints that front the Ilum directory | ["ldap://ilum-openldap:389"] |
jupyterhub.ldap.base | Search base for Ilum users and groups | "dc=ilum,dc=cloud" |
jupyterhub.ldap.username | Bind DN used for authentication | "cn=admin,dc=ilum,dc=cloud" |
jupyterhub.ldap.password | Password for the bind DN | Not@SecurePassw0rd |
jupyterhub.ldap.adminUsers | LDAP accounts with admin privileges in JupyterHub | ["ilumadmin","admin"] |
jupyterhub.ldap.userSearchBase | Where user entries live | "উ = মানুষ" |
jupyterhub.ldap.userSearchFilter | Filter for user lookups | "UID={0}" |
jupyterhub.ldap.groupSearchBase | Where group entries live | "ou=groups" |
jupyterhub.ldap.groupSearchFilter | Filter that matches members | "(member={0})" |
jupyterhub.ldap.allowedGroups | Empty list allows all groups unless specified | [] |
Values changed - helm_jupyterhub
| নাম | পুরাতন মূল্য | নতুন মূল্য |
|---|---|---|
singleuser.networkPolicy.allowedIngressPorts | [] | [2222] |
Instructions
- Keep
ilum-jupyter-ssh-keysstable outside Helm so the SSH host fingerprint survives upgrades; rotating the secret requires removing stale entries from userknown_hosts. - Ensure
ilum-git-credentialscontains valid credentials for a Gitea account with org-level write access—both the SSH operator and Git init job rely on the rendered token. - To refresh the curated notebooks, update
helm_jupyterhub/files/examples(and their config map templates) so the init container can push them into theilum-jupyterhubrepo again.