Parse and insert keycloak roles scopes into JupyterHub

[aktech]

Reference Issues or PRs

Fixes #2432

What does this implement/fix?

Put a x in the boxes that apply

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds a feature)
• Breaking change (fix or feature that would cause existing features not to work as expected)
• Documentation Update
• Code style update (formatting, renaming)
• Refactoring (no functional changes, no API changes)
• Build related changes
• Other (please describe):

Testing

• Did you test the pull request locally?
• Did you add new tests?

Any other comments?

[krassowski]

I have not run it yet, but it looks good.

Do you know how long the login sequence with the REST API call takes? Should we add a log message printing out delta in milliseconds to be able to monitor this in logs?

[aktech]

Do you know how long the login sequence with the REST API call takes? Should we add a log message printing out delta in milliseconds to be able to monitor this in logs?

I have not measured it but I didn't notice any observable latency. Sure, worth adding the time delta in logs.

[krassowski]

Tested locally by:

• adding a new client role keycloak: Configure → Clients → jupyterhub → Roles → Add role → Role name = testrole → Save → Attributes → scopes = test → component = jupyterhub
• assigning the role to user: Manage → Users → username → Role mappings → Available Roles → testrole → Add Selected
• log out and log in as username
• open k9s, enter shell on jupyterhub pod, open sqlite database, view the roles table

[krassowski]

Looks good - thank you!

Last time some pytest tests failed in local deployment run, let's see if those pass this time before merging.

[aktech]

Last time some pytest tests failed in local deployment run, let's see if those pass this time before merging.

Yes, I noticed tests/tests_deployment/test_jupyterhub_ssh.py::test_simple_jupyterhub_ssh failed, I am guessing it's a bit flaky, lets see though. 🤞

[aktech]

All green now, merging.