Skip to content

Commit

Permalink
Merge pull request #20 from Openscapes/shared-password-admin
Browse files Browse the repository at this point in the history
Edits to shared-password process
  • Loading branch information
ateucher authored Jan 15, 2025
2 parents 1dc7acc + bfb5a48 commit 620a8f4
Showing 1 changed file with 43 additions and 21 deletions.
64 changes: 43 additions & 21 deletions password-access.qmd
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ This page is written primarily for workshop leads (mentors and other partners) w

## Using the Openscapes 2i2c Hub in a workshop using a shared password

### Instructions for workshop leads
### Instructions for workshop leads / mentors

If you are hosting a workshop that has a large number of participants, especially
if workflows with GitHub are not part of the teaching curriculum, use the "shared password"
Expand All @@ -17,19 +17,22 @@ and participants, Hub admins do not have any way to contact the people added to
the Hub. Thus, participants with this method are only allowed to stay in the Hub
for one week before being removed.

- Check with the [primary contact/admin for your hub](about.qmd#primary-contacts) to
ensure that the Hub image has the packages you need
- Reach out to 2i2c _a month in advance_ via an email to `support at 2i2c.freshdesk.com`
1. Open an issue in the appropriate `workshop-planning` repository ([NASA](https://github.com/nasa-openscapes/workshop-planning/issues)/NMFS [TBD]) outlining your workshop. This is for awareness across the Mentor community, and to help you plan and be supported by the admin team.
Also add your workshop to the **WorkshopRegistry** ([NASA](https://docs.google.com/spreadsheets/d/1Sg4fMDGxMLI0p5cgK5xyamFJpKC6NyNneqXLDReSKcg/edit#gid=695033382)/[NMFS](https://docs.google.com/spreadsheets/d/14GDUFU3_H2bZcSt--VGLRmrRFq3dylDL8ZeAKuFbV6E/edit?gid=695033382#gid=695033382)), and
put "SinglePassword" in the `2i2c access type` column.
If you don't have access to this sheet, reach out to the [primary contact/admin for your hub](about.qmd#primary-contacts).
2. Check with the [primary contact/admin](about.qmd#primary-contacts) to ensure that the Hub image has the packages you need.
3. Reach out to 2i2c _a month in advance_ via an email to `support at 2i2c.freshdesk.com`
(example below), cc-ing the primary contacts for your hub, to tell them about the workshop date, start and end times,
\# of participants, and anticipated level of resources to be used. Also tell
them that you would like to use the shared password hub, and provide a desired
password.
- *Do not* ask your workshop particants to request access via the access request Google form - it is not necessary for these types of workshops.
3. *Do not* ask your workshop particants to request access via the access request Google form - it is not necessary for these types of workshops.

::: {.callout-tip collapse="true"}
## Example email to 2i2c for a workshop with shared password authentication

*To: support [at] 2i2c.freshdesk.com*
*To: support [at] 2i2c.freshdesk.com* \
*cc: Openscapes/NASA/NOAA [primary contact](about.qmd#primary-contacts)*

Hello,
Expand All @@ -52,30 +55,49 @@ Thank you!
Erik
:::

Tell your learners that they will be able to access the Hub using the shared
Email your learners to tell them that they will be able to access the Hub using the shared
password during and for one week following the workshop, after which the password will
be changed and the their home directories inside the Hub will be removed.

::: {.callout-tip collapse="true"}
## Example email to workshop particpants for a workshop with shared password authentication

*To: workshop participants*

Hello!

We are looking forward to hosting you for our upcoming workshop! We will do our
work in the [NASA/NMFS]-Openscapes workshop hub:

<https://workshop.openscapes.2i2c.cloud/> (NASA) OR <https://workshop.nmfs-openscapes.2i2c.cloud/> (NMFS)

You will be provided a password at the beginning of the workshop which you can use to log in to the hub, along with your email address as your username. No prior setup is required. You will retain access to the hub, and the files you create within the hub, for one week after the workshop. After this the password will be reset and user directories will be removed.

Thank you, looking forward to the workshop!

Erik
:::

During the workshop, instruct participants to log in using their email address as their username, and the shared password.

One week after the workshop, send another email to `support at 2i2c.freshdesk.com`
(again cc the hub's primarty contacts) and request that the password be reset
and users' home directories from the workshop be removed.
and users' home directories be removed *from the workshop hub*.

### Instructions for Openscapes hub admins

1. When the workshop request is made, record the new workshop password in the
[SharedPasswords-Openscapes.Cloud Google Sheet](https://docs.google.com/spreadsheets/d/1Y4qzqWLsKHTNzuQi-fOaHGud0Ld_q1GHAzhS9-grV7Q/edit?gid=0#gid=0), and
work with the workshop lead and 2i2c to ensure the hub will meet their needs
and will be available when they need it.
*This section is for [Hub admins](about.qmd#primary-contacts) (Openscapes core team plus NASA/NOAA hub leads), who have access to the [SharedPasswords-Openscapes.Cloud Google Sheet](https://docs.google.com/spreadsheets/d/1Y4qzqWLsKHTNzuQi-fOaHGud0Ld_q1GHAzhS9-grV7Q/edit?gid=0#gid=0), and have close working relationships with 2i2c.
These steps intentionally align with the steps outlined above for workshop leads, and are meant to be collaborative - experienced mentors will be more familiar with the process and need less help than people leading workshops using the hub for the first time.*

1. Work with workshop lead in their issue (opening one if necessary) in the appropriate `workshop-planning` repository ([NASA](https://github.com/nasa-openscapes/workshop-planning/issues)/NMFS [TBD]), and add it to the MainPlanning project board ([example](https://github.com/orgs/NASA-Openscapes/projects/7/views/1?pane=issue&itemId=93334218&issue=NASA-Openscapes%7Cworkshop-planning%7C137)).

2. Record the workshop in the [workshop registry](https://docs.google.com/spreadsheets/d/1Sg4fMDGxMLI0p5cgK5xyamFJpKC6NyNneqXLDReSKcg/edit#gid=695033382).
Put "SinglePassword" in the `2i2c access type` column in the appropriate row.
2. Review and record the workshop in the **WorkshopRegistry** ([NASA](https://docs.google.com/spreadsheets/d/1Sg4fMDGxMLI0p5cgK5xyamFJpKC6NyNneqXLDReSKcg/edit#gid=695033382)/[NMFS](https://docs.google.com/spreadsheets/d/14GDUFU3_H2bZcSt--VGLRmrRFq3dylDL8ZeAKuFbV6E/edit?gid=695033382#gid=695033382)), and put "SinglePassword" in the `2i2c access type` column in the appropriate row. All mentors should also have access to this sheet.

3. Seven days after the workshop finishes, coordinate with the workshop lead to
make a request to 2i2c to change the password. Record this change in the Google sheet.
3. Help the workshop lead ensure that the resources in the hub are sufficient for the workshop's needs.
The default configuration should easily handle up to 100 particpants; more than that may require some work by 2i2c to scale up.

## Workshop Hub Access via GitHub Teams
4. Record the new workshop password in the [SharedPasswords-Openscapes.Cloud Google Sheet](https://docs.google.com/spreadsheets/d/1Y4qzqWLsKHTNzuQi-fOaHGud0Ld_q1GHAzhS9-grV7Q/edit?gid=0#gid=0).

If you are hosting a workshop where you will be teaching GitHub workflows,
and/or have learners who require longer-term access to the Hub after the workshop,
follow the instructions to [add participants to the 2i2c Hub](github-access.qmd#adding-champions-or-workshop-participants-to-the-hub-as-a-batch)
via a GitHub Team.
5. Seven days after the workshop finishes, coordinate with the workshop lead to
make a request to 2i2c to change the password and remove user home directories
from the *workshop hub* (definitely not the main hub). Record the password change in the [Google sheet](https://docs.google.com/spreadsheets/d/1Y4qzqWLsKHTNzuQi-fOaHGud0Ld_q1GHAzhS9-grV7Q/edit?gid=0#gid=0).

0 comments on commit 620a8f4

Please sign in to comment.