feat: create environment for every PR using Uffizzi

[daramayis]

This PR is a part of #13629 and helps demonstrate Uffizzi integration with Jupyterlab.

This will help create preview environments on all of Jupyterlab Pull Requests and help contributors including the maintainers iterate faster on their PRs.
I have created a PR over daramayis#1 (comment) to show what it looks like to have a preview environment deployed against your PR.

You can check out the preview over here as well.

@waveywaves

[jupyterlab-probot]

Thanks for making a pull request to f-jupyterlab!
To try out this branch on binder, follow this link:

[welcome]

Thanks for submitting your first pull request! You are awesome! 🤗

If you haven't done so already, check out Jupyter's Code of Conduct. Also, please make sure you followed the pull request template, as this will help us review your contribution more quickly.

You can meet the other Jovyans by joining our Discourse forum. There is also a intro thread there where you can stop by and say Hi! 👋

Welcome to the Jupyter community! 🎉

[daramayis]

Hi @JasonWeill 👋

Any thoughts on the PR? how is it looking :)

Thank you.

[jasongrout]

Thanks, this indeed looks very fast and nice.

On the service side, https://www.uffizzi.com/pricing indicates that if we started using this in this open source project, we'd have unlimited concurrent previews, etc.? Is that right?

[daramayis]

@jasongrout yes, that's right — the project will have unlimited concurrent previews.

[jasongrout]

@daramayis - someone pointed out that when I go to the PR review at https://pr-1-deployment-10033-f-jupyterlab.app.uffizzi.com/lab, I see artifacts from a previous person trying it out. This is concerning for two reasons:

1. The other person trying things out may affect the state of things so that a review is not a true clean fresh copy of the PR
2. It's a vector for someone to be malicious - someone could embed something malicious in the preview that is not visible in the actual PR

I'd love to hear your thoughts about how the PR previews preserve state across multiple people accessing them.

[daramayis]

Hi @jasongrout.

Thank you for the review — I have updated the PR regarding password protection.

So we have a feature for protecting the preview environments.
The preview environment is a single instance, in the scope of PR — also u can re-trigger the pipeline for deploy a new one.
You can set up the credentials and share them with the internal team.

So I set some testing credentials(secrets) in my repository to demonstrate how it looks like and works.

Testing

Please open https://app.uffizzi.com/github.com/daramayis/f-jupyterlab/pull/1
user: admin
pass: demodemo

[daramayis]

Hey @jasongrout,

Friendly ping — do you have a timeline for looking at this?

Thank you.

[daramayis]

Hey @jasongrout,

Nothing hears, we are closing the PR.