From 39980f09f354580637b5b2d16079074409666552 Mon Sep 17 00:00:00 2001
From: Min RK <benjaminrk@gmail.com>
Date: Thu, 13 Oct 2022 13:43:58 +0200
Subject: [PATCH] binder doesn't need to be admin in jupyterhub 2.0

---
 helm-chart/binderhub/values.yaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/helm-chart/binderhub/values.yaml b/helm-chart/binderhub/values.yaml
index 40db5ade2..63a9cbe99 100644
--- a/helm-chart/binderhub/values.yaml
+++ b/helm-chart/binderhub/values.yaml
@@ -62,6 +62,14 @@ jupyterhub:
         authenticator_class: nullauthenticator.NullAuthenticator
       BinderSpawner:
         auth_enabled: false
+    loadRoles:
+      binder:
+        services:
+          - binder
+        scopes:
+          - servers
+          # we don't need admin:users if auth is not enabled!
+          - "admin:users"
     extraConfig:
       0-binderspawnermixin: |
         """
@@ -186,7 +194,6 @@ jupyterhub:
         c.JupyterHub.spawner_class = BinderSpawner
     services:
       binder:
-        admin: true
         display: false
   singleuser:
     # start notebook server with lab ui as default