# whitelist of users that can spawn single-user servers
Runas_Alias JUPYTER_USERS = io, europa, ganymede, callisto, rhea

# the command(s) jupyterhub can run on behalf of the above users without needing a password
Cmnd_Alias JUPYTER_CMD = /usr/local/bin/jupyterhub-singleuser

# single-user servers need some JPY_ environment variables
Defaults!JUPYTER_CMD env_keep = JPY_*

# actually give hub user permission to run the above command on behalf
# of the above users without a password
rhea ALL=(JUPYTER_USERS) NOPASSWD:JUPYTER_CMD

# allow rhea to send signals to her subprocesses (required for polling and process cleanup):
rhea ALL=(JUPYTER_USERS) NOPASSWD:/bin/kill