From 0b7341e6d80f0e53fc5c9277313b386cae7b10e5 Mon Sep 17 00:00:00 2001
From: Sarah Gibson <drsarahlgibson@gmail.com>
Date: Mon, 11 Dec 2023 15:50:12 +0000
Subject: [PATCH] Add hub for Tufts University

---
 config/clusters/2i2c/cluster.yaml             |  8 ++++
 .../2i2c/enc-tufts.secret.values.yaml         | 20 ++++++++
 config/clusters/2i2c/tufts.values.yaml        | 48 +++++++++++++++++++
 3 files changed, 76 insertions(+)
 create mode 100644 config/clusters/2i2c/enc-tufts.secret.values.yaml
 create mode 100644 config/clusters/2i2c/tufts.values.yaml

diff --git a/config/clusters/2i2c/cluster.yaml b/config/clusters/2i2c/cluster.yaml
index 3565e3864c..9ba7478c07 100644
--- a/config/clusters/2i2c/cluster.yaml
+++ b/config/clusters/2i2c/cluster.yaml
@@ -135,3 +135,11 @@ hubs:
       - basehub-common.values.yaml
       - mtu.values.yaml
       - enc-mtu.secret.values.yaml
+  - name: tufts
+    display_name: "Tufts University"
+    domain: tufts.2i2c.cloud
+    helm_chart: basehub
+    helm_chart_values_files:
+      - basehub-common.values.yaml
+      - tufts.values.yaml
+      - enc-tufts.secret.values.yaml
diff --git a/config/clusters/2i2c/enc-tufts.secret.values.yaml b/config/clusters/2i2c/enc-tufts.secret.values.yaml
new file mode 100644
index 0000000000..24598fd6e4
--- /dev/null
+++ b/config/clusters/2i2c/enc-tufts.secret.values.yaml
@@ -0,0 +1,20 @@
+jupyterhub:
+    hub:
+        config:
+            CILogonOAuthenticator:
+                client_id: ENC[AES256_GCM,data:VjKMcUOhCk0aWLztj4HjMkjP/Q3x6daj01aZx17RTeeDwHe9auQOvFz7fdZAqMHCW+nG,iv:acWGQg+QnvxlewUzthdy0sEQWc0V+FKSlktaUGVV3yk=,tag:5Sbx/ngZ+VZWt7T6LwUeMg==,type:str]
+                client_secret: ENC[AES256_GCM,data:kjqALzq/6zKUZmYi+/wAzTZbCJpUxAU2eUQgyla33GArYk/i8uXXYM07a4WvWX7YVFHLVFWam8rIMz0uvD9PdRHM/2LYBet9qEO8MU+h7ELoNP4nHAw=,iv:dW9nBYQBspGpY9Q16hH7imkaSCDxh6Xj/F02oVvnLy0=,tag:1P6kSRSHfhLon2jAvKZ9+g==,type:str]
+sops:
+    kms: []
+    gcp_kms:
+        - resource_id: projects/two-eye-two-see/locations/global/keyRings/sops-keys/cryptoKeys/similar-hubs
+          created_at: "2023-12-11T15:36:52Z"
+          enc: CiUA4OM7eEwyaCdfvyqhUi3s8gfpndMgyP40m/x7UETe/IUUCiULEkkAjTWv+sLh62rCeq3fYDXmsV4cAE4yWHfXchFrExtsbOEyEwOIczwkzJXvNR/PrYlfhPb+tNIY/pyLmBiBKysAuNU0zWYJUE6k
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2023-12-11T15:36:52Z"
+    mac: ENC[AES256_GCM,data:xn1ommOn/63KdtM1P60CLwRxaa2SmhYchkbtZxKC3u+UqNwxAwxF9yXUYcM0q1rO96Je0HkdeD+1BascOBLCw1DxTyhY6DyGMqw9Gkh0+YTy5LcijAbnYiAHg1/C5ChVYJVGVoFQhuoPoFs3hZX0nR7MxigcmKofv+PJ97wFo8s=,iv:IH6omjLRNoFcTxs7TXNJa/dDhIiGOmRq+xxhp8rRfuk=,tag:z6O3KwX7kTRCMApkZ9CCew==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
diff --git a/config/clusters/2i2c/tufts.values.yaml b/config/clusters/2i2c/tufts.values.yaml
new file mode 100644
index 0000000000..755ae192a1
--- /dev/null
+++ b/config/clusters/2i2c/tufts.values.yaml
@@ -0,0 +1,48 @@
+jupyterhub:
+  ingress:
+    hosts: [tufts.2i2c.cloud]
+    tls:
+      - hosts: [tufts.2i2c.cloud]
+        secretName: https-auto-tls
+  custom:
+    2i2c:
+      add_staff_user_ids_to_admin_users: true
+      add_staff_user_ids_of_type: "google"
+    homepage:
+      templateVars:
+        org:
+          name: Tufts University
+          logo_url: https://brand.tufts.edu/sites/g/files/lrezom786/files/styles/large/public/2022-09/tufts-ext.jpg
+          url: https://www.tufts.edu/
+        designed_by:
+          name: 2i2c
+          url: https://2i2c.org
+        operated_by:
+          name: 2i2c
+          url: https://2i2c.org
+        funded_by:
+          name: Tufts University
+          url: https://www.tufts.edu/
+  hub:
+    config:
+      JupyterHub:
+        authenticator_class: cilogon
+      CILogonOAuthenticator:
+        oauth_callback_url: "https://tufts.2i2c.cloud/hub/oauth_callback"
+        allowed_idps:
+          https://shib-idp.tufts.edu/idp/shibboleth:
+            default: true
+            username_derivation:
+              username_claim: "email"
+          http://google.com/accounts/o8/id:
+            username_derivation:
+              username_claim: "email"
+      Authenticator:
+        admin_users:
+          - Will.Humphries@tufts.edu
+          - Peter.Nadel@tufts.edu
+          - Kyle.Monahan@tufts.edu
+  singleuser:
+    image:
+      name: quay.io/2i2c/cloudbank-data8-image
+      tag: "d2746e55a4ee"