Review the use of JupyterHub or Nebari for login node functionality

[mwengren]

We could consider using JupyterHub or Nebari as a login/user management service rather than plain SSH login to the head node.

Some advantages of using a service like this are:

• easier environment management via Conda/conda-store and built-in isolation of user home directories
• ability to run Jupyter Notebooks directly from the JupyterHub UI
• user management via built-in Nebari authentication/authorization facilities
• other...

No doubt there are many technical and or security considerations with making a change like this. We can fill in details in this issue as we go.

[ocefpaf]

@mwengren I'm not 100% sure but I don't think jupyterhub or nebari handles the authentication themselves. I believe they have functionality to use GitHub and/or other oath services for it. With that said, using GH to log in the cloud sandbox would be awesome.

[KatherinePowell-NOAA]

Additional discussion in Friday Working Session (8/30/2024):
Decided to prioritize getting Nebari up and running on sandbox. If we configure with ICAM for MFA then we can share URL to Nebari and anyone who is authorized can login.

Also discussed a Shared EFS within JupyterHub - and ways to accomplish this. Micah ran into permission issues with AWS environment when he last tried - can we use pre-existing configuration to deploy?

Mykel will look into creating a VPC setup to test with.

[breannalcv]

Stand up Nebari or other computational analysis environment in the sandbox

[breannalcv]

Stand up Nebari or other computational analysis environment in the sandbox

[KatherinePowell-NOAA]

Decided to put Nebari implementation off for long term, and use Sagemaker in the short term